Patent ID: 8875245

Claim:
An authority delegating system, which comprises an authentication apparatus, and delegates an authority possessed by a user to a second apparatus which requests a first apparatus, that executes a document processing service according to the authority, to execute the document processing, said authentication apparatus comprising: a processor and a memory; a receiving unit configured to receive an authority delegating request from said second apparatus; an acquisition unit configured to acquire information of authorities possessed by the user from a storage unit, and to acquire information of an authority required to execute a document processing request, the authority being specified by the first apparatus, based on a processing request notified from the second apparatus to the first apparatus; a comparison unit configured to compare the information of the authorities possessed by the user, which is acquired by the acquisition unit, with the information of the authority required to execute the document processing request, which is acquired by the acquisition unit; a providing unit configured to, if it is determined, based on a comparison result by the comparison unit, that the authorities possessed by the user do not satisfy the authority required to execute the document processing request, provide an authority delegating confirmation window which allows to delegate, to the second apparatus, an alternative authority that is different from an original authority required to execute the document processing request; and a transmission unit configured to transmit authentication information indicating that an authority permitted by the user via the authority delegating confirmation window has been delegated, and said first apparatus comprising: a processor and a memory; a request receiving unit configured to receive the document processing request from said second apparatus and the authentication information; a verification unit configured to verify, using the authentication information, which of authorities said second apparatus is delegated from the user; and an execution unit configured to execute document processing based on the document processing request when the authority required to execute the processing based on the document processing request is delegated to said second apparatus as a result of verification by said verification unit, wherein said authentication apparatus further comprises an issuing unit configured to issue an access token as the authentication information, and said verification unit of said first apparatus verifies, using the access token, which of authorities said second apparatus is delegated from the user.