Patent ID: 7334254

Claim:
A system for controlling access to computing resources within an enterprise comprising: a web server and a web security agent controlling access to Uniform Resource Locators (URLs); a security gatekeeper and an access server controlling access to Application Programming Interfaces (APIs); and a core security framework used by both the web server and web security agent and by both the security gatekeeper and the access server to store security data and policies and approve or deny requests for access to URLs and APIs, wherein the security gatekeeper sends a data request made by a user with security related information to the core security framework to authenticate the user and to authorize the user, wherein the core security framework informs the security gatekeeper whether the user has been authenticated and authorized, wherein the security gate keeper forwards the data request to the access server when the security gate keeper is informed that the user has been authenticated and authorized, the access server provides the user with the requested data.