Patent ID: 9749331
Date: 2017-08-29
CPC Classifications: G06F,H04L

Claim:
1. A method comprising: receiving a first authentication factor for a user in a single sign-on system, the single sign-on system to provide access to a plurality of cloud services; receiving, from a user device over a network, a request to access a cloud service of the plurality of cloud services, the user having a plurality of user accounts for the cloud service, wherein each user account has independent access credentials associated with the account; determining a context of the request to include a type of information to be sent to or received from the cloud service as a result of the request; comparing, by a processing device, the context of the request to an access policy for the single sign-on system; automatically determining a first user account of the plurality of user accounts for the cloud service based on the context of the request and the access policy; and granting the user conditional access to the cloud service using the associated access credential for the first user account, wherein granting conditional access comprises requesting a second authentication factor for the user before granting full access to the cloud service.