Microsoft Technology Licensing, LLC

Samuel Devasahayam

Yordan Ivanov Rouskov

Ariel Nicolas Gordon

Sarat Chandra Subramaniam

Titus Constantin Miron

Venkatesh Gopalakrishnan

Lu Zhao

Parmeshwar Miguel Sequeira Arewar

Billy J Fuller

Caleb Geoffrey Baker

Marcelo Albuquerque Fernandes Mas

Krishnanand K Shenoy

Parmeshwar Arewar

Seng Lin Shee

Jan Lyk Choo

Rakesh P Bilaney

Embodiments are directed to revoking user sessions using signaling. In one scenario, an identity platform operating on a computer system receives an indication indicating that a user's login account has been compromised, where the user's login account has an associated login session and corresponding session artifact that is valid for a specified amount of time. The identity platform generates a signal indicating that the login session is no longer trusted and that the user is to be re-directed to the identity platform to re-authenticate and renew the session artifact and provides the generated signal to various relying parties including at least one relying party that is hosting the login session for the user.

Revoking sessions using signaling

Authenticating internet application sessions. A method includes downloading client side code that when executed implements one or more client side modules including at least one module with message interception functionality. The method includes executing the client side code to implement the one or more client side modules. A request is sent to an internet application server. In response to the request, a message is received from the internet application server indicating that the request is not authorized. The message from the internet application server indicating that the request is not authorized is intercepted at the one or more client side modules. The one or more client side modules, as a result of the message indicating that the request is not authorized, send a request for authentication in a required format for authentication. Authentication is performed without losing user state associated with the request to the internet application server.

Reauthentication to a web service without disruption

The formulation of a security token that specifies role information corresponding to one or more roles of a requesting entity that is to request an action to be performed on a resource. The formulation begins by accessing one or more claims, each having an expression regarding the requesting entity. The expression for at least one of the claims is evaluated to thereby assign the requesting entity to one or more identities. The identities are then used determine role information to include in a role-based security token that may be submitted to the computing system that manages the resources.

Claims-aware role-based access control

An improved scalability testing architecture for distributed applications allows testing of scalability with respect to a given number of computers using a test network having only a small fraction of that number of computers. Each client computer in the test network hosts multiple bootable systems in bootable partitions which timeshare the host machine on a mutually exclusive basis. A launcher in each bootable system verifies scheduling information for an instance of an application under test residing in the same partition and either permits or prevents continued operation of the instance based on the scheduling information. If continued operation is to be prevented, the launcher triggers a boot next routine to exit and cede control of the computer to the next bootable system on the computer.

Testing distributed services by using multiple boots to timeshare a single computer

Growing community of inventors

Kirkland, WA, United States of America

Samuel Devasahayam