Microsoft Technology Licensing, LLC

Cliff Van Dyke

Praerit Garg

Donald E Schmidt

Dave M McPherson

Karthik Jaganathan

Everett McKay

Mark Pustilnik

A role-based authorization management system maintains an authorization policy store that represents user authorizations to perform operations associated with an application. When a user attempts to perform a function associated with an application, the authorization management system verifies that the user is authorized to perform the requested function. The authorization management system also provides an interface for an application administrator to update role-based user authorization policies associated with one or more applications.

Role-based authorization management framework

A selective cross-realm authenticator associates an identifier with a request from an entity authenticated in one realm to access a resource associated with a second realm. The identifier indicates that the entity was authenticated in a realm other than the realm associated with the requested resource. A domain controller associated with the resource performs an access check to verify that the authenticated user is authorized to authenticate to the requested resource. Permissions associated with the resource can be used to specify levels of access to be granted to entities authenticated by a domain controller associated with another realm.

Selective cross-realm authentication

Growing community of inventors

Bellevue, WA, United States of America

Cliff Van Dyke