Patent ID: 9178865
Filing Date: 2015-11-03
Classification: H04L

Abstract:
1. A method of authenticating and authorizing access to Applications in different systems on networked server computers, comprising: providing user access credentials and an Application name for user access to an application; providing an authentication list of authentication Services associated with the application name in an order in which they are to be called for authentication; creating an authentication Web address list of Web addresses with the Web addresses on said authentication Web address list corresponding to respective Web addresses of the authentication Services on the authentication list in the same order as the authentication list; sequentially sending for authentication the User access credentials to each of the Web addresses on said authentication Web address list in the order in which they are listed to initiate access to respective user authentication Security Systems for access to the user application until the User access credentials are accepted by an authentication Security System, the User access credentials are recognized but found ineligible for present authentication or the authentication Web access list is completed to thereby complete the authentication process; providing an authorization list of the user authorization Services associated with the application name in the order in which they will be called for authorization; creating an authorization Web address list of the Web addresses with the Web addresses on said authorization Web address list corresponding to respective Web addresses of the authorization Services on the authorization list in the same order as the authorization list; and upon completion of the authentication process step, sequentially sending for authorization the User access credentials and Application name to each of the Web addresses on the authorization Web address list in the order in which they are listed to initiate access to respective authorization Security Systems until the User access credentials and Application name are accepted for access by an authorization Security System, access is denied or invalid, or the authorization Web address list is completed.