Patent ID: 8812698

Claim:
A system for enforcing authentication strength for remote portlets, the system comprising: a consumer portal; a producer portal in communication with said consumer portal; logic executing on the producer portal that performs the functions of: authenticating a user to said consumer portal, said user having an authentication strength level; receiving a request from said user at said consumer portal for a portlet, said portlet being produced by said producer portal and said portlet having an authentication strength level requirement; authenticating said consumer portal to said producer portal, said consumer portal having an authentication strength assertion level; sending a request for said portlet and an assertion of said authentication strength level of said user from said consumer portal to said producer portal; rejecting said request from said consumer portal if said authentication strength level of said user is less than said authentication strength level requirement for said portlet; rejecting said request from said consumer portal if said authentication strength assertion level of said consumer portal is not high enough to assert said authentication strength level of said user; and accepting said request from said consumer portal if said authentication strength level of said user is not less than said authentication strength level requirement for said portlet and said authentication strength assertion level of said consumer portal is high enough to assert said authentication strength level of said user.