Patent ID: 7016959
Filing Date: 2006-03-21
Classification: H04L

Abstract:
1. A method for directory enabled, self service, single sign on user account management, the method implemented in conjunction with a directory, the directory comprising resource directory entries and user directory entries, the method comprising the steps of: receiving, from a user through a browser, an SSO user ID and SSO password of the user, the SSO password being known only to the user; retrieving from the directory, in dependence upon the SSO user ID and SSO password, a user directory entry for the user, wherein the user directory entry includes a mapped resource list comprising resource names of resources mapped to the user's SSO user ID; creating, in dependence upon the user directory entry, a new mapping of a resource to the SSO user ID, wherein the creating comprises the further steps of: retrieving from the directory a full resource list comprising resource names of all resources available for SSO mappings; deleting from the full resource list the resource names in the mapped resource list, thereby yielding an available resource list of resources presently available for mapping to the SSO user ID; displaying to the user through the browser the available resource list; receiving a user's chosen resource name from the available resource list displayed to the user, including resource security data for the chose resource name; amending the user directory entry to include the chosen resource name and the resource security data for the chosen resource name; and storing the amended user directory entry in the directory.