Patent ID: 7383576

Claim:
A method in a computer system for displaying allowed-to-authenticate information, the method comprising: a. receiving a selection of a security object that is an entity; b. retrieving allowed-to-authenticate information for the selected security object, the information identifying the entity, a resource, and an action wherein when the entity attempts to authenticate to the resource the action indicates whether to allow or deny the attempt to authenticate to the resource; and c. displaying an indication of the selected security object along with the retrieved allowed-to-authenticate information; d. wherein the allowed-to-authenticate information is retrieved from an auxiliary security store that is used when providing a user interface for viewing the allowed-to-authenticate information and that is separate from a main security store used by a security mechanism when an entity attempts to authenticate to a resource, the auxiliary security store and the master security store having different data organizations that are adapted for accessing the allowed-to authenticate information, the auxiliary security store adapted for accessing allowed-to authenticate information for an entity and the master security store adapted for accessing allowed-to authenticate information for a resource.