Patent ID: 7185364

Claim:
A method for providing access services, comprising: receiving user session state information for a first user at an application program interface for an access system, said user session state information is from an application without a web agent front end, said user session state information is from a cookie stored on a client for said first user, said user session state information is encrypted, and said step of receiving user session state information includes decrypting said user session state information; receiving, at said application program interface, a request to authorize said first user to access a first resource, said request to authorize is from said application without a web agent front end; providing authorization services of said access system to said application without a web agent front end using said application program interface in an attempt to authorize said first user to access said first resource without requiring said first user to re-submit authentication credentials; receiving a request from said application without a web agent front end for unencrypted data from said user session state information; and providing said unencrypted data from said user session state information to said application without a web agent front end, said application without a web agent front end does not have access to a key to decrypt said user session state information.