Patent ID: 7209970

Claim:
A method for dynamically tracking a user session in order to authenticate and authorize a computer user to a plurality of separately secured remote applications, the method comprising the steps of: a. storing security information for a plurality of computer users in a user profile database; b. the user launching a first secured computer application on an application server; c. receiving login information from the computer user at an authorization server coupled with the user profile database; d. in response to step c, creating a Session ID for the computer user with the authorization server; e. storing at least a portion of the Session ID on the user's computer; f. also in response to step c, creating an object associated with the computer user or the Session ID; g. storing the object dynamically in a directory stored in a directory server coupled with the authorization server and the application server; h. copying at least some of the security information relating to the computer user from the user profile database to the object in the directory; i. comparing the log-in information entered by the computer user to the security information for the computer user and allowing the computer user access to the first secured computer application if the user is an authenticated or authorized user of the first secured computer application; j. the user launching a second separately-secured computer application on an application server; k. the second separately-secured computer application reading the Session ID on the user's computer; and l. the second separately-secured computer applications accessing the object for the computer user on the directory server in response to the Session ID to authenticate or authorize the user for the second separately-secured computer application.