Microsoft Technology Licensing, LLC

David W Bailey

Yordan Ivanov Rouskov

Lynn Ayres

Lin Huang

Wei-Quiang Michael Guo

Ashvin Mathew

Costel Radu

Walter Oliver

Barry I Kelman

WeiQiang Michael Guo

Embodiments of authenticating linked accounts are presented herein. In an implementation, an authentication service provides functionality to form links between a plurality of user accounts. A client may then authenticate by providing credentials for one account in a group of linked accounts, and is permitted access to each account in the group of linked accounts based upon the linking. Thus, a single sign-in of a client to one account may permit the client to obtain services for service providers corresponding to multiple linked accounts, without an individual sign-in to each account.

Authenticating linked accounts

Providing access to a resource via authorization data that conditionally defines the access by an expression that identifies the resource by name and by at least one property of the resource. An authorization service issues the authorization data (e.g., as a token) and evaluating authorization data received from a client. The authorization service evaluates the expression in the authorization data to identify the resource and determine the rights associated with the user for the resource. The authorization service implements role-based access control to control access to resources in a distributed, multi-site network.

Authorization and access control service for distributed network resources

Growing community of inventors

Bellevue, WA, United States of America

David W Bailey