Patent ID: 8370901

Claim:
A method for providing identity management by a computing apparatus for a user in a Web environment in which a first Web application accesses a second Web application on behalf of the user, the method comprising: creating an association table by an association table module to record a first session identity (ID) between the user and the first Web application, a second session ID between the user and the second Web application, and an association of the first and second session IDs; sending a session ID request containing the first session ID by the first Web application to a session ID return module; receiving the session ID request from the first Web application by the session ID return module; searching by the session ID return module for the associated second session ID in the association table according to the first session ID contained in the session ID request; returning the second session ID by the session ID return module to the first Web application in response to the session ID request, thereby providing identity management by a computing apparatus for a user in a Web environment in which a first Web application accesses a second Web application on behalf of the user; and authenticating the user's identity in the first Web application and the second Web application, wherein authenticating the user's identity in the first Web application comprises returning a third session ID associated with the user to the first Web application; and authenticating the user's identity in the second Web application comprises returning a fourth session ID associated with the user to the second Web application.