Patent ID: 7831999

Claim:
A system for single security administration comprising: a first application server of a transactional server type, which is configured to execute transaction processes including receiving transactional procedure calls from clients to initiate the transaction processes, wherein the first application server includes an access control list which defines user security information for use in authorizing the calls from clients, and a Lightweight Directory Access Protocol (LDAP) authentication server plugin which is configured to forward the transactional procedure calls from clients to another application server for authorization; a second application server of a non-transactional server type, which is configured to administer security for the first application server, wherein the second application server includes a user profile database which includes security information for a plurality of users, including for each of the users a mapping of security credentials for that user between the transactional server type and the non-transactional server type, and an embedded LDAP server which is configured to receive and process the transactional procedure calls from the LDAP authentication server plugin; and wherein, when a transactional procedure call to initiate a transaction is received from a client at the first application server, the LDAP authentication server plugin identifies the user associated with the transactional procedure call, determines that the second application server should authenticate the user, initiates an LDAP session between the first application server and the second application server, determines a third application server of a non-transactional server type that stores user and group information for the user, when the second application server fails, initiates an LDAP session between the first application server and the third application server, and forwards the transactional procedure call to an embedded LDAP server in the third application server, wherein, upon receiving the transactional procedure call from the LDAP authentication server plugin, the embedded LDAP server processes the transactional procedure call, determines a corresponding user information from the user profile database, and returns the corresponding user information to the LDAP authentication server plugin, and wherein, after receiving from the embedded LDAP server a corresponding user information as determined by the user profile database at the second application server, the LDAP authentication server plugin creates a token reflecting an authentication result based on the corresponding user security information, which is subsequently used to authenticate the client to participate in the transaction.