Patent ID: 8776209

Claim:
A method comprising: presenting a user interface configured to receive user input specifying whether tunneling session detection should be used to provide security assertions without requiring a user to re-authenticate with a VPN gateway device; establishing, with the VPN gateway device, a tunneling session for a user of a private network associated with the VPN gateway device, the tunneling session being established between a client device and the VPN gateway device; receiving, with the VPN gateway device, a security assertion request from the client device, the security assertion request including a request for a security assertion to be made by the VPN gateway device with respect to the user of the private network associated with the VPN gateway device; determining, with the VPN gateway device, whether the security assertion request was received via the tunneling session established for the user between the client device and the VPN gateway device; and issuing, with the VPN gateway device, a security assertion for the user in response to determining that the security assertion request was received via the tunneling session.