Microsoft Technology Licensing, LLC

Matthew S Rimer

Kim Cameron

Murli D Satagopan

Andy Harjanto

Don Hacherl

Nitin Karmarkar

Elisa W Zhang

Richa N Kumar

An XML data model and systems and methods for using the same are described herein that enable entities to interact with a remote directory service, such as an LDAP-style directory service, using industry standard Web services protocols that represent resources using XML, such as WS-Transfer and WS-Enumeration.

XML data model for remote manipulation of directory data

Techniques are described herein for providing protocol extensions to the WS-Enumeration protocol. A selection protocol extension to the WS-Enumeration protocol enables retrieval of partial representations of objects from a directory server. The partial representations include attributes of the objects that are designated via the selection protocol extension. A sorting protocol extension to the WS-Enumeration protocol enables sorting of objects (or partial representations thereof) to be retrieved from a directory server. The selection and sorting protocol extensions are defined in respective XML elements that are distinct from an XML element that defines an object request including a query filter for selecting objects in the directory server. The selection and sorting protocol extensions may be used independently from each other. The computer languages utilized by the aforementioned XML elements need not necessarily be the same. For instance, a different computer language may be used for each.

Selection and sorting protocol extensions to the WS-enumeration protocol

In the present invention, data relating to principals known to a computer system is centrally stored and objects having a standardized principal application programming interface (API) for finding, managing and accessing that data is provided to applications in lieu of having the applications independently store the principal data. The present invention eliminates the need for each application to create duplicate principal data. It also ensures that principal data are consistent throughout the applications on the computer system. In addition, the present invention allows any application with objects having the principal API to manage and change the principal data making such principal data easy to update. The principal API includes methods to find principals based on an identity reference to a principal or an identity claim that uniquely identifies the principal on computer system.

Application programming interface for centralized storage of principal data

Growing community of inventors

Kirkland, WA, United States of America

Matthew S Rimer