Patent ID: 9386007
Filing Date: 2016-07-05
CPC Classification: H04L

Claim Text:
1. A computer implemented method comprising: receiving a request from a user via a Web browser to access a multi-domain application, wherein the request is a single sign-on (SSO) request or a single logout (SLO) request, and wherein the multi-domain application runs on multiple domains in parallel; redirecting the Web browser to request a multi-domain service (MDS) endpoint accessible from a services domain with one or more parameters signed by a service provider, wherein the service provider issues an MDS cookie that includes a multi-domain application URL to access a domain of the multi-domain application, and wherein the service provider supports authentication and authorization services accessible from the services domain for the multiple domains of the multi-domain application; generating an original URL cookie (OUC) comprising the multi-domain application URL, wherein the multi-domain application URL is extracted from the MDS cookie at the MDS endpoint; redirecting the Web browser to request an identity provider, wherein the SSO request includes a login assertion parameter or the SLO request includes a logout assertion parameter, and wherein the identity provider request includes a name of the original URL cookie (OUC) comprising the multi-domain application URL; receiving an assertion response from the identity provider comprising: redirecting the Web browser to request the multi-domain application with the received assertion response, wherein the multi-domain application URL is retrieved from the OUC cookie.