Patent ID: 11870766
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 7:
8. A computer-implemented method, comprising:
requesting, from a client application, authentication to access an on-premise application from a cloud computing service using a cloud-based authentication protocol, wherein the on-premise application adheres to a Kerberos authentication protocol, the cloud-based authentication protocol adheres to a cloud-based authentication protocol, the Kerberos authentication protocol differs from the cloud-based authentication protocol;
upon successful authentication of the client application, receiving, at the client application, a security token including at least one claim, wherein the at least one claim represents a granted permission to a resource, wherein the at least one claim includes a Kerberos security ticket of the Kerberos authentication protocol, the Kerberos security ticket generated by a Kerberos Key Distribution Center included in an identity provider of the cloud computing service, the security token associated with the cloud-based network authentication protocol;
extracting, at the client application, the Kerberos security ticket from the security token;
transmitting, from the client application, an authentication request using the Kerberos authentication protocol to a second Kerberos Key Distribution Center comprising a Kerberos authorization server of the on-premise application, the Kerberos authentication request including the Kerberos security ticket; and
in response to a successful validation of the Kerberos security ticket, obtaining by the client application, access to the on-premise application.