International Business Machines Corporation

Simon Helsen

Ritchard Leonard Schacher

Nicholas R Ibarluzea

Patrick Ryan Wardrop

Christopher Lawrence Brealey

Christopher N Taylor

Jose Angel Rodriguez

Thomas C Schmidt

Methods, computer program products, and systems are presented. The methods include, for instance: receiving a request for a private credential of a first service of the two or more services from the first service, generating the private credential of the first service based on identity information of the first service, storing the private credential of the first service and the identity information of the first service in a local database, and sending the private credential of the first service to the first service for secure communication from the first service.

Scalable authentication between heterogeneous services

A method, computer program product, and system includes a processor(s) identifying one or more resources of a shared computing environment utilized in delivery of an application, to users of the shared computing environment. The processor(s) monitors communications to the one or more resources, to identify and intercept operations related to delivery of the application. The processor(s) analyze the intercepted operations, to determine when the operations comprise a pattern occurring with a frequency indicative of a predetermined level of confidence, where the pattern comprises one or more delivery operations. Based on determining the pattern occurs with the frequency, the processor(s) generates an automated delivery pipeline for the application, where the automated delivery pipeline automates at least one of the one or more delivery operations comprising the pattern. The processor(s) utilizes the automated delivery pipeline to deliver a new version of the application.

Automatic creation of delivery pipelines

An enterprise server is provisioned with an authentication response language, where the authentication response language allows the enterprise server to issue instructions for authentication steps to an enterprise client, which enables the enterprise client to execute a set of instructions for navigating an authentication sequence. The set of instructions installed into and served by the enterprise server varies depending on a protocol inherently used by the authentication topology. The enterprise client, when accessing a protected resource, and not already authenticated, receives a set of authentication instructions from the enterprise server formulated in the authentication response language. The client starts to interpret the provided authentication instructions, but controls the presentation layer and interface of any user interactions. The client follows the sequence by sending requests and receiving responses from one or more servers in the topology until the sequence is complete.

Abstracting an authentication sequence using HTTP

Growing community of inventors

Komoka, Canada

Simon Helsen