Patent ID: 8832782

Claim:
A method of performing a single sign-on in a network comprising a client system, a host system and a credentialing server said method comprising: opening a first communications channel between a client system and a host system regarding a first process; opening a second communications channel between said host system and a credentialing server; authenticating credentials of said client system by said host system by; transmitting said credentials to said credentialing server; and receiving an authentication token from said credentialing server; sending said authentication token to said client system; opening a third communications channel between said client system and a second process; transmitting said authentication token to said second process; opening a fourth communications channel between said second process and said host system; transmitting said authentication token from said second process to said host system; transmitting said authentication token from said host system to said credentialing server; validating said authentication token by said credentialing server; and receiving a validation of said authentication token from said credentialing server that indicates that said token is associated with said previous successful authentication of said client system by said credentialing server; and selectively granting access to said client system so said second process based at least in part upon said validation of said authentication token.