Patent ID: 8959609
Filing Date: 2015-02-17
Classification: H04L,H04W

Abstract:
1. A computer implemented method for performing out-of-app based third party authentication of a user, by a partner aware app on a user operated computing device, wherein the third party authentication is performed according to a specific partner of a publisher of the app, the method comprising the steps of: requesting a secure session identifier from an identity provider of the publisher of the app, by the app on the computing device; receiving the secure session identifier from the identity provider of the publisher, by the app on the computing device; registering for notifications on the secure session identifier with a notification service, by the app on the computing device; directing a browser on the computing device to navigate to the identity provider of the publisher and to pass it, as parameters, the secure session identifier and a partner identifier of the specific partner, by the app on the computing device; receiving, from the identity provider of the publisher by the browser on the computing device, a redirect to a third party identity provider used by the specific partner to authenticate users, the redirect being based, by the identity provider of the publisher on the partner identifier; navigating to the third party identity provider, by the browser on the computing device, responsive to the received redirect; transmitting authentication credentials entered by the user in response to a prompt from the third party identity provider, by the browser on the computing device to the third party identity provider; receiving a notification on the session identifier that the third party identity provider successfully authenticated the user based on the transmitted authentication credentials, from the notification service by the app on the computing device, the notification having been sent from the identity provider of the publisher in response to receiving a redirected authentication result from the third party identity provider; calling the identity provider of the publisher with the session identifier, by the app on the client device, in response to receiving the notification that the third party identity provider successfully authenticated the user; and receiving a secure authentication token, from the identity provider of the publisher by the app on the client.