Patent ID: 9674191
Date: 2017-06-06
CPC Classifications: H04L

Claim:
1. A method, comprising: detecting, by a processing device, an action initiated in an administrator portal associated with a user pertaining to a user portal during a current session of the administrator portal, the current session having a current session identifier associated with the administration portal; calculating, by the processing device, a current user-to-impersonate identifier comprising a combination of a user identifier associated with the user portal, an administrator identifier associated with the administrator portal, and the current session identifier associated with the administration portal; comparing, by the processing device, the current user-to-impersonate identifier with a user-to-impersonate identifier previously stored by the processing device, the stored user-to-impersonate identifier comprising a combination of the user identifier, the administrator identifier, and a single sign-on session identifier associated with the administrator portal, the single sign-on session identifier extracted by the processing device from a prior single sign-on by the processing device in the administrator portal to active portals comprising the user portal; responsive to determining that the current user-to-impersonate identifier matches the stored user-to-impersonate identifier: responsive to determining, by the processing device, that the current user-to-impersonate identifier does not match the stored user-to-impersonate identifier, and responsive to determining, by the processing device, that a combination of the user identifier, the administrator identifier, and a user role for the administrator is present in a static list: