Patent ID: 9571285
Date: 2017-02-14
CPC Classifications: G06F,H04L

Claim:
1. A system comprising: a hardware-processor-implemented first security token service associated with a first security domain and configured to: receive a request for a first token from a consumer and issue the first token based on a first issuing policy of the first security domain, wherein the first token is valid for one or more service providers within the first security domain; a hardware-processor-implemented token authenticator associated with the first security domain and configured to determine that the first token is not issued in a second security domain; and a hardware-processor-implemented second security token service configured to: receive the first token from the token authenticator, determine that the first token was issued by the first security token service, and validate the first token based on a local federation policy that defines a federation agreement between the first security domain and the second security domain.