Okta, Inc.

Reman P Child

Hector Aguilar-Macias

Xin Gu

Thomas Belote

Jonathan R Todd

William B Dawson

Hassen Karaa

Andrew P Drozdov

William Dawson

Thomas M Belote

An identity management system detects the occurrence of a trigger event, such as a time period expiration, or an action on the identity management system. The identity management system accordingly generates a new password for an account of a user on a third-party service and causes the account of the user on the third-party service to use the new password. The identity management system can also detect a manual user change of a password for a third-party service and cause configuration of client devices of the user to reflect the new password.

Automated password generation and change

An identity management system prevents users' credential information from being harvested by phishing attackers. The identity management system can installed as a plug in on users' devices. Destinations that solicit users' credential information are verified. For example, web addresses or registered names of websites that receive users' credential information can be verified against known web addresses or registered names to verify their authenticity. When verification of the authenticity of a destination fails, a user is alerted and submission of credential information needs to be confirmed.

Secured user credential management

Users of organizations use many different third-party applications. The organizations use the services of a server to manage and interact with the third-party applications. In particular, the server provides a remote login service that interacts with auto-login components executing within the domains of the organizations. The auto-login components intercept (e.g., at networking devices of the organization) the requests to login to, or otherwise use, the third-party applications, and sends them to the remote login service. The remote login service handles transparent login of the users to the third-party applications, capturing resulting URLs and session cookies of the third-party applications and providing them to the user browsers so that the user is automatically provided with access to the applications without requiring manual login interactions.

Login proxy for third-party applications

An identity management system provides single sign-on (SSO) services to clients, logging the clients into a variety of third-party services for which the clients have accounts. An SSO integration is stored for each of the third-party services, the SSO integration including information that allows the identity management system to automate the login for the corresponding third-party service, such as locations of the login pages, and/or identities of username and password fields. The identity management system uses different techniques in different embodiments to detect that a given SSO integration is broken (i.e., no longer permits login for its corresponding third-party service) and/or to repair the SSO integration.

Detection and repair of broken single sign-on integration

An identity management system detects the occurrence of a trigger event, such as a time period expiration, or an action on the identity management system. The identity management system accordingly generates a new password for an account of a user on a third-party service and causes the account of the user on the third-party service to use the new password. The identity management system may also a mobile device management system to configure a client of the user with the new password.

Growing community of inventors

San Francisco, CA, United States of America

Reman P Child