Patent ID: 9088564
Filing Date: 2015-07-21
Classification: H04L

Abstract:
1. A computer-implemented method for granting a user of a native application access to a web resource affiliated with the native application, the method comprising: receiving, at the native application that executes on a computer, a username and password from a user of the native application; using the username and password to make an access token request to a Central Authentication Service (CAS); receiving the access token from the CAS; using the access token to make a session token request to the CAS, wherein the session token request identifies the web resource and wherein the session token request identifies the native application, thereby enabling the CAS to use an application whitelist to determine that the native application is valid; receiving the session token from the CAS; and forwarding the session token to an endpoint server, thereby enabling the endpoint server to initialize an authenticated session that is scoped to the web resource, wherein doing so comprises: accepting, at the web browser, the HTTP session cookies to obtain access to the web resource.