Patent ID: 9699168
Date: 2017-07-04
CPC Classifications: H04L

Claim:
1. A method of enabling a rich client to authenticate to and access a web- or cloud-based application, comprising: in response to an authentication request issued by the rich client, the rich client being other than browser-based and that supports its own interface as opposed to exporting a web interface to the web- or cloud-based application, obtaining an assertion on behalf of the rich client from an identity provider; in response to receiving the assertion, determining whether the assertion can be verified and whether a user associated with the assertion is permitted to access the application using the rich client; when the assertion can be verified and the user associated with the assertion is permitted to access the application using the rich client, exchanging the assertion for a token; receiving a call together with the token; and when the token is validated, providing data in response to the call.