Patent ID: 7606917

Claim:
A computing system comprising: a first server to exchange communications with a first user manager and with a second user manager, the first server including a container having stored therein a first user store associated with the first user manager; a second user store associated with the second user manager; an application in communication with the first user store and with the second user store, the application to access a first resource and a second resource for a client of the first server; and a principle map separate from the application, the principle map including: a default principle sent to the first server from a default user manager in response to the default user manager authenticating the client for an access to the application, a first principle stored by the first user store, the first principle sent to the first server from the first user manager in response to an authentication of the application for access to the first user manager, and a second principle stored by the second user store, the second principle sent to the first server from the second user manager in response to an authentication of the application for access to the second user manager, wherein the principle map to map the first principle and the second principle to the default principle, wherein the first user store to receive a first user manager command sent from the application in a first format, the received first user manager command including the default principle to indicate that an accessing of the first resource via the first user manager is on behalf of the client, the first user store to respond to the receiving the first user manager command, including accessing the principle map with the default principle from the first user manager command to retrieve the first principle, translating the first user manager command from the first format to a second format, the translated first user command including the retrieved first principle, and sending the translated first user manager command from the first server to the first user manager, and wherein the second user store to receive a second user manager command sent from the application in the first format, the received second user manager command including the default principle to indicate that an accessing of the second resource via the second user manager is on behalf of the client, the second user store to respond to the receiving the second user manager command, including accessing the principle map with the default principle from the second user manager command to retrieve the second principle, translating the second user manager command from the first format to a third format, the translated second user command including the retrieved second principle, and sending the translated second user manager command from the first server to the second user manager.