Siemens Aktiengesellschaft

Francesco Russo

Alessio Dellacha

Giorgio Repetto

A method, a system and a computer program manage a single sign on (SSO) session by an identity provider for a plurality of services. The method includes managing, by an identity provider, information on the SSO session via a cookie based protocol, and persisting a list of services of relying parties participating in same SSO session information in one session cookie and a plurality of temporary state cookies with randomly generated names. Whereby the list of session services are represented with a bit mask representation within the cookies and, whereby the plurality of temporary state cookies can be consolidated into one state cookie.

Managing a SSO session by an identity provider

A method and a system for defining additional resources in a user management system in a MES system includes providing a custom resource database at the server side with entries editable at engineering time or at run time. At engineering or at run time, a client application requests, via a local user management service, the definition of a custom resource from a centralized user management service, which in turns adds an entry related to the requested custom resource in the custom resource database. At run time, at a given event, the centralized user management service, beside transmitting other data to the local user management service, also transmits from the custom resource database additional data on the custom resources associated with the user and user groups as well as additional data on a second set of script files associated to the custom resources. In turn, the local user management service creates also with the additional data the related entries into the access database and executes the second set of scripts.

Growing community of inventors

Arenzano, Italy

Francesco Russo