Microsoft Technology Licensing, LLC

Josh Thomas Gray

Yordan Ivanov Rouskov

Jeffrey F Spelman

Brendan W Dixon

Ryan D Johnson

Naiyi Jiang

Matthew Hur

Michael S Dusche

John Kahren Tevosyan

A system provides single sign-on capabilities for accessing a Web application through a passive client across multiple realms within a federation. A federation refers to different organizations or realms that have employed agreements, standards, and/or cooperative technologies to make user identity and entitlements portable between the organizations. Communications are redirected through a client in one realm to obtain a security token that can allow the resource server in the other realm to authenticate the user for access to the Web application.

Passive client single sign-on for web applications

Managing and securing process flow. A network server receives user data and retrieves secured flow data from the user data. A user interface is rendered at the client in response to the user data. The flow data is based on a web request from the client and identifies the process flow and a position within the process flow. The request initiates the process flow on a data communication network and the user interface has a hidden form field that contains the retrieved flow data. The client posts user-supplied information in addition to the flow data via the user interface for verifying the web request.

Flow token

Growing community of inventors

Kirkland, WA, United States of America

Josh Thomas Gray