Patent ID: 9344419
Filing Date: 2016-05-17
CPC Classification: G06F,H04L,H04W

Claim Text:
1. A method for authenticating within a single sign-on federated authentication system, the method comprising: enrolling a user, including creating a record for the user, the record storing a user ID for the user and storing an association between a site identifier for a first server and a first authentication method, and storing a further association between a site identifier of a second server and each of a second authentication method and a third authentication method; after enrolling the user, receiving, with the first server, a first claimant target for the user; authenticating the user to the first server according to the first authentication method; after authenticating the user to the first server, receiving with the first server from a second server an authentication request including the second site identifier and a second claimant target, wherein the first and second claimant targets each consist of one of the user ID, a username, or a biometric; again authenticating the user according to a second authentication method including using the second claimant target to locate the record for the user, then sending to the second server an indication of successful authentication.