Microsoft Technology Licensing, LLC

Terawe Corporation

David Kent Downing

Kartik Paramasivam

Jean-Emile Elien

Wei-Lun Lo

Ruslan A Yakushev

Ramakrishnan Peruvemba

Ashutosh Badwe

Javier Dalzell

Anilkumar Balakrishnan

Hilal Al-Hilali

An authentication management system receives a resource request directed to a software service, which may require password-based authentication. The system redirects the resource request to an authentication identity provider (IdP), and receives an authentication token generated by the authentication IdP. The redirecting of the resource request comprises transmission of an authentication request, which includes user identity information that can be authenticated by the IdP but does not include a password for the software service. In response to receiving the authentication token, the system causes a shadow account to be created with the software service. For password-based authentication, this may include setting a temporary, random password for the shadow account. The system is then able to generate authenticated connection information (e.g., an authentication cookie) for the software service and transmit it to a client device, which enables the client device to access the software service via an authenticated connection.

Hybrid single sign-on for software applications and services using classic and modern identity providers

Data interchanges are processed so that problematic individual elements within the data interchanges do not cause the processing of the data interchanges to be suspended unless there is a catastrophic error. The data interchanges are split up by flat file and/or XML disassemblers of a message engine into independent messages even if some elements are incorrect or cause processing failures. Those messages in the interchange that may be processed are processed, while those that would cause processing errors are suspended in a suspend queue for recovery processing. Even when a message is placed in the suspend queue, processing continues with the next independent message in the data interchange. Messages that are placed in the suspend queue for lack of routing information may be resumed by providing the routing information and again attempting to route the previously suspended message. The method of the invention is scalable since it works regardless of the size of the interchange or its individual message elements.

Automatic recovery from failures of messages within a data interchange

Growing community of inventors

Bellevue, WA, United States of America

David Kent Downing