Patent ID: 11870766
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 14:
15. A device, comprising:
at least one processor and a memory;
wherein the at least one processor is configured to perform actions that:
receive an authentication request, at a cloud computing service, for access to an on-premise application, the authentication request associated with a cloud-based authentication protocol from a client application, the on-premise application associated with a Kerberos authentication protocol, the cloud-based authentication protocol differs from the Kerberos authentication protocol; and
upon successful verification of the authentication request:
generate a Kerberos security ticket of the Kerberos authentication protocol from a Kerberos Key Distribution Center included in the identity provider of the cloud computing service and generate an authentication token, wherein the authentication token is of the cloud-based authentication protocol and includes a plurality of claims, wherein at least one claim identifies a granted permission to a resource, wherein the at least one claim includes the Kerberos security ticket; and
provide the authentication token to the client application, wherein the client application authenticates to the on-premise application through the Kerberos authentication protocol by extracting the Kerberos security ticket from the authentication token, and providing the Kerberos security ticket to a second Kerberos Key Distribution Center comprising a Kerberos authentication server of the on-premise application, wherein the client application obtains access to the on-premise application in response to a successful validation of the Kerberos security ticket.