Microsoft Technology Licensing, LLC

Victor Boctor

Todd Carlyle Luttinen

Wilbert De Graaf

Siddhartha Mathur

David Andrew Sterling

Jeffrey B Kay

Gregory Gourevitch

Oren Jordan Melzer

Anirban Basu

Kamen Kamenov Moutafov

Lizhuang Zhao

David Nunez Tejerina

Maxim A Ivanov

Jesse M Dougherty

Kutlay Topatan

Palash Biswas

Lei Yu

Ozan Ozhan

Vitali Prokopenko

Selim Yazicioglu

Malcom Pearson

Shuang Lu

Bernard Luke Gallagher

Matthias Adam Leibmann

David Foster Mills

Frank Byrum

Mayank Mehta

Hao Zhang

Shivakumar Seetharaman

Edward Thomas Banti

Amit Fulay

Gregory Kostal

Vladimir Yarmolenko

Krassimir Emilov Karamfilov

Christopher Barnes

Jayteerth Narasingrao Katti

Michael Nelte

Chandresh Kumar Jain

Pretish Abraham

Yuhui Zhong

Sara L Manning

Grigory V Kaplin

Tejas Patel

Diego Hernan Carlomagno

Pankaj Mohan Kamat

James R Knibb

Paranthaman Saravanan

Randall Allen Lehner

Chowdhury Sucharit Barua

Greg Gourevitch

Ayse Yesim Koman

Pravjit Tiwana

Darrell Brunsch

Shaun Michael Wallace

Mini Varkey

Sarvani Kumar Bhamidipati

Olexiy Karpus

Theodore Albert Bucher

Nimeesh Patel

Fai Sigalov

Bernardo Sana

Liang Zou

Avi Roitman Bardack

Paula Muna Batthish

Raju Nagalinga S

Techniques are described herein that are capable of dynamically routing an authentication request to a backup authentication system by a client device. For instance, the client device stores a list, which identifies authentication systems that are authorized to respond to authentication requests from the client device. The client device sends the authentication request toward a primary authentication system based at least in part on the authentication request identifying the primary authentication system as a recipient of the authentication request. The authentication request requests authentication of a principal by the primary authentication system. The client device causes the backup authentication system to authenticate the principal using an authentication package received from the primary authentication system by dynamically routing the authentication request to the backup authentication system based at least in part on not receiving a valid response to the authentication request and further based at least in part on the list.

Client device capable of dynamically routing authentication requests to a backup authentication system

Techniques are described herein that are capable of dynamically failing over authentication traffic to a backup authentication system by a proxy system. An authentication request, which requests authentication of a principal, is received at the proxy system. The authentication request is directed to a primary authentication system. A determination is made, by the proxy system, that the primary authentication system is incapable of providing a valid response to the authentication request. The backup authentication system is caused, by the proxy system, to authenticate the principal using an authentication package received from the primary authentication system by dynamically routing the authentication request to the backup authentication system as a result of the primary authentication system being incapable of providing a valid response to the authentication request.

Proxy configured to dynamically failover authentication traffic to a backup authentication system

Techniques are described herein that are capable of using an authentication package from a primary authentication system to authenticate a principal by a backup authentication system. The authentication package includes an authentication artifact, which is signed with a cryptographic key by the primary authentication system and which includes claim(s) that are usable to authenticate the principal, and further includes metadata. The metadata includes credential verification information that is usable to verify a credential of the principal and a first principal identifier that identifies the principal. A request to authenticate the principal is received at the backup authentication system. The request includes the credential and a second principal identifier that identifies the principal. The principal is authenticated by the backup authentication system by verifying the credential using the credential verification information and further by determining that the first principal identifier corresponds to the second principal identifier.

Backup authentication system configured to use an authentication package from a primary authentication system to authenticate a principal

A message is received, that represents an action to be performed in a service. The message includes a natural language portion and an endpoint to interact with. The natural language portion is parsed to identify the action and the endpoint is interacted with to perform the action.

Natural language service interaction through an inbox

Techniques of data authentication in a distributed computing system are disclosed herein. One example technique includes receiving a request for performing an operation along with a data package that includes a security token, a first digital signature of the security token generated using an ephemeral private key, and an ephemeral public key with a second digital signature generated using a master private key stored at a secure location. The example technique can also include initially validating the second digital signature using a public key corresponding to the master private key, and upon validating the second digital signature, validating the first digital signature of the security token using the ephemeral public key included in the data package. Upon validating that the first digital signature of the security token, the request can be authenticated, and the requested operation can be performed.

Ephemeral cryptography keys for authenticating computing services

A connector surfaces a configuration user experience that allows a user to select notifications that a user wishes to receive from a service. The user's e-mail system has a URL endpoint identifier, and the service sends the selected notifications to the URL endpoint. The notifications are integrated into the user's inbox, as e-mail messages.

Service integration into electronic mail inbox

Message prioritization may be provided. First, a message may be received and a priority level may be calculated for the message. If the message is not rejected for having a priority lower than a predetermined threshold, the message may be placed in a first priority queue. Next, the message may be de-queued from the first priority queue based upon the calculated priority level for the message. Distribution group recipients corresponding to the message may then be expanded and the priority level for the message may be re-calculated based upon the expanded distribution group recipients. Next, the message may be placed in a second priority queue. The message may then be de-queued from the second priority queue based upon the re-calculated priority level for the message and delivered.

Using e-mail message characteristics for prioritization

An example method for migrating communication data from a source server to a target server includes obtaining, using a computing device, a set of credentials to access the source server, and accessing the source server using the set of credentials. The method also includes requesting, automatically by the computing device, a directory structure associated with communication data from the source server, populating, by the computing device, the target server using the directory structure, requesting the communication data from the source server, and populating the target server with the communication data.

Directory driven mailbox migrations

A method is presented for using a distributed source control system with a centralized source control system. A first set of files is obtained from a source control repository and stored on a first electronic computing device. The first set of files comprises all or part of a code base in the centralized source control system. A request is received for at least part of the code base from a second electronic computing device in a distributed source control system. As a result of the request, at least a part of the first set of files is sent to the second electronic computing device. A change set for the first set of files is received from the second electronic computing device. The change set is processed to be in a format compatible with the source control repository. The change set is submitted to the source control repository.

Using distributed source control in a centralized source control environment

A current request for a server to perform work for a user profile can be received and processed at the server. It can be determined whether server usage by the profile exhibits a sufficient trend toward a threshold value to warrant performing traffic shaping for the user profile. If so, then a delay time can be calculated based on, or as a function of, server resources used in processing the current request, and a response to the current request can be delayed by the delay time.

Traffic shaping based on request resource usage

Allocation of computing threads can include receiving a registration of a workload, the registration including a workload classification and a workload priority; monitoring statuses of a plurality of resources; identifying, by a computing device, a thread of a resource from the plurality of resources, the thread being programmed to execute a task associated with the workload; evaluating, by the computing device, the workload classification and the workload priority of the workload with workload classifications and workload priorities of other workloads requesting the thread; and allocating the thread to one of the workloads based on evaluation of the workload classification and the workload priority.

Resource health based scheduling of workload tasks

A computer-implemented method for allocating threads includes: receiving a registration of a workload, the registration including a workload classification and a workload priority;

Growing community of inventors

Redmond, WA, United States of America

Victor Boctor