Microsoft Technology Licensing, LLC

Carlos Adrian Lopez Castro

Caleb Geoffrey Baker

Yordan Ivanov Rouskov

Pui-Yin Winfred Wong

William Bruce Barr, Iii

Alexander Thomas Weinert

Sarat Chandra Subramaniam

Violet Anna Barhudarian

Oren Jordan Melzer

Dilesh Dhokia

Laurentiu Bogdan Cristofor

Anirban Basu

Radhika Kashyap

Michael Vincent McLaughlin

Jiangfeng Lu

Christopher Adam Brooks

Stuart Kwan

Etan Micah Basseri

Pui Yin Winfred Wong

Daniel Edward Lee Wood

Zhifeng Wang

Adam Edwards

Robyn Nicole Hicock

Jessica Tian-Hueih Lin

Sandra Jiang

Abhijeet Kumar Sinha

Arturo Huato Lucatero

Michael V Mclaughlin

Generally discussed herein are devices, systems, and methods for adaptive authorization using a local route as a named location. A method can include defining a local route and a corresponding local route endpoint, associating a compute resource as a destination of the local route endpoint, defining an adaptive authorization policy that limits access to the compute resource to be through the local route endpoint, and enforcing access to the compute resource based on the defined adaptive authorization policy.

Adaptive authorization with local route identifier

Techniques are described herein that are capable of evaluating a result of enforcement of access control policies instead of enforcing the access control policies. For instance, a result of enforcement of an access control policy with regard to sign-in processes is evaluated instead of enforcing the access control policy with regard to the sign-in processes. The evaluation includes monitoring access requests that are received during the sign-in processes. Each access request requests access to a resource. The evaluation further includes comparing attributes of each access request against the access control policy that specifies criteria that are to be satisfied as a prerequisite to granting access to the resource to which access is requested by the respective access request. Metadata associated with the sign-in processes is generated instead of enforcing the access control policy with regard to the sign-in processes.

Evaluating a result of enforcement of access control policies instead of enforcing the access control policies

Authenticating computing entities. A method includes at an identity provider, providing a first access token to an entity for use by the entity in obtaining resources from a resource provider. The method further includes, at the identity provider, receiving response information from the entity. The response information from the entity is provided to the entity from the resource provider as a result of the resource provider enforcing policy at the resource provider. At the identity provider, a second access token is provided to the entity. The second access token is provided based on the response information, such that the second access token can be used by the entity to obtain the resources from the resource provider.

Rich token rejection system

Methods, systems, and apparatuses in a computing device enable user access to a resource. The method includes receiving, from a user, a request for access to a resource; accessing an authentication flow for granting access to the resource; obtaining first claims for a user from a first claims provider in the authentication flow; determining a second claims provider in the authentication flow, the second claims provider having a trust relationship with the claims facilitator; directing the user to the second claims provider; receiving second claims for the user from the second claims provider; and enabling the user to access the resource in response to at least the received first and second claims.

Extensible framework for authentication

Growing community of inventors

Duvall, WA, United States of America

Carlos Adrian Lopez Castro