Patent ID: 8296828

Claim:
A method to be executed at least in part in a computing device including a memory storing instructions and a processor executing an application in conjunction with the stored instructions for transforming a claim based identity to a credential based identity, the method comprising: receiving at a secure store service residing on an application server a claim based identity via a security token issued by a trusted authority to a client entity at a front end server through a secure store service proxy residing at the front end server; mapping a credential to the claim based identity; validating the claim at the secure store service on the application server; storing the credential in a secure manner in a Secure Store Database (SSD) associated with the secure store service; encrypting on the application server the credential stored in the secure store database associated with the secure store service utilizing a master key generated and managed by a key manager; synchronizing the master key to a new service instance at the key manager; in response to receiving the security token for each request to access a resource associated with the secure store service, retrieving the credential from a secure store database; employing a credential manager for decrypting the retrieved credential on the application server; returning the decrypted credential to the client entity of the request for use in authorization of the client entity to an access controlled resource; backing up and restoring the SSD at the key manager; and enabling a user and an administrator to at least one from a set of: create, read, and delete an application employing an application management API declared by an application manager.