Patent ID: 8683574

Claim:
A method implemented in a non-transitory computer-readable storage medium that executes on a processor to perform the method of: receiving, by the processor, an indication from an identity service that a first principal and second principal have successfully authenticated to an identity service; detecting, by the processor, that the first principal has logged in with a request for access to a Peer-To-Peer (P2P) Virtual Private Network (VPN) communication session with the second principal; notifying, by the processor, the second principal with the request when the first principal is logged in and makes the request; sending, by the processor, an approval received from the second principal to the first principal indicating the second principal authorized the first principal to connect with the second principal, the second principal communicates the approval back to the method in real time based on the notification of the request made by the first principal; and communicating, by the processor, commands to the first and second principals to initiate the P2P VPN communication session with one another and creating a duplex tunnel between workstations associated with the first and second principals that is identity based.