Patent ID: 8752152

Claim:
A method to be executed at least in part in a computing device for employing federated authentication in data replication across authentication boundaries, the method comprising: receiving a request at a first server of a second domain for data replication from a first service operating in a first domain at a second service operating in the second domain, wherein the request includes a federated token associated with the first service; establishing a guarantee of trustworthiness of a third party trust broker across authentication boundaries from a registration authority; passing the federated token to the third party trust broker issuing the federated token from the first server of the second domain to have the third party trust broker perform an authentication of the federated token by performing a confirmation that the federated token is created by the third party trust broker and is coming from the first domain; receiving one of: the confirmation and a denial from the third party trust broker at the first server of the second domain; submitting an authorization request to an authorization server of the second domain from the first server of the second domain using authentication related data associated with the federated token securely stored at the third party trust broker; receiving one of a confirmation and a denial from the authorization server of the second domain based on a comparison of at least one desired capability to a configuration of the second domain; and responding to the first service with an affirmation of the request if a confirmation is received from the third party trust broker and the authorization server of the second domain.