Microsoft Technology Licensing, LLC

Andrew James Wiley

Haitao Wang

Paul J Miller

Joseph B Isenhour

Sagar Bholanath Saha

Steven James Syfuhs

Sergeii Gubenko

Mitchell O Lindgren

An authentication server may not support all types of user credentials. For example, an on-premise authentication server may support credentials based on user secrets (i.e. username and password) and certificate-based credentials, but not hardware-key based credentials. A client device may use an un-supported type of credential to access resources managed by the on-premise authentication server by authenticating with a web-based authentication server. The web-based authentication server may support any type of credential, and the supported types of credentials may change over time. The web-based authentication server returns an authenticated user token indicating the user has been authenticated, but without authorizing access to any resources. The client device uses the on-premise authentication server to exchange the authenticated user token for an authorized user token. The client device then uses the authorized user token to access resources on the on-premise network.

Remote authentication for accessing on-premises network devices

Growing community of inventors

Bellevue, WA, United States of America

Andrew James Wiley