Patent ID: 7941533

Claim:
A method for single sign-on session management, the method comprising: receiving, at a first server, a list of authorized users from a global repository, other servers also receiving the list of authorized users from the global repository, the first server and the other servers each having protected resources; establishing a session credential at the first server using the list of authorized users, the other servers also capable of establishing session credentials; sending the session credential from the first server to a client; receiving a protected resource request from the client at the first server, the protected resource request including the session credential established by the first server; responsive to receiving the session credential at the first server from the client, validating the session credential entirely within the first server, and upon validation of the session credential, granting the client access to a first protected resource at the first server; sending the session credential from the client to one of the other servers; receiving the session credential at the one of the other servers; and allowing the client access to a second protected resource at the one of the other servers based on the session credential that was established by the first server.