Microsoft Technology Licensing, LLC

William R Taylor

Titus Constantin Miron

Umesh Unnikrishnan

Dharma Kiritkumar Shukla

Jason Matthew Cahill

Aditya G Bhandarkar

Zachary D Rosenfield

Nagender Vedula

Murli D Satagopan

Venkatesh Veeraraghavan

Seshadri Mani

Mark John Walker

Harshal Ingole

Haytham Abuel-Futuh

Shekhar N Swamy

Robert McKee Howard

Corey Roussel

Javier Dalzell

Kshamta Jerath

Shaofeng Zhu

John Keith Bankston

Christian Roy

Eray Aydin

Brian P Robbins

Steven Tullis

Nikhil Khare

A session token can be requested to be sent to a first computing service from a second computing service, and a first computing service can receive the requested session token from the second computing service. The first computing service can send a message that includes the session token through a passive client to the second computing service. The second computing service can receive the message that includes the session token from the passive client, and the second computing service can verify that the message is valid. This verification of the validity of the message can include verifying that the session token received back from the passive client matches the session token the second computing service sent to the first computing service.

Sending session tokens through passive clients

An application submits a permission request to a resource server. In response to receiving the request, the resource server generates a user interface that asks the user to grant or deny the requested permissions. If the permissions are granted, data is stored indicating that the application has the requested permissions. When a runtime request for a resource is received, the resource server determines whether the request has been made by a user, by an application, or by an application on behalf of a user. If the request is made by an application only, the request is granted only if the application has permission to access the resource by way of a direct call not on behalf of a user. If the request is made by an application on behalf of a user, the request is granted only if both the user and the application have sufficient permission.

Authorizing application access to secure resources

In a web application platform context, web service proxy interface augmentation is provided without undue loss of customization capabilities. After obtaining an address of a web service endpoint, sending a metadata query to the endpoint, and extracting operational information from the response, a contract is generated in the form of an interface. The interface does not rely on non-contract programming constructs. A file containing the interface is added to a project in an integrated development environment (IDE). From a developer perspective, the IDE displays service application(s) of a server farm identified by the developer. The developer selects a service application and receives a list of web service endpoint(s). After choosing an endpoint, the developer receives an automatically generated interface containing operational information for an operation exposed by the web service endpoint. The developer also creates in the IDE a web proxy project item that includes the interface.

Web service proxy interface augmentation

This disclosure describes techniques that enable a subscriber of a data center to manage a site collection group hosted by the data center. A site collection group is a set of site collections that belong to a single subscriber. A site collection is a collection of websites. A website is a collection of related resources. Each of the site collections is associated with an 'owner'. As described herein, the data center presents management interfaces that enable owners of site collections to manage the site collections. In addition, the data center presents management interfaces that enable subscribers to manage architectural aspects of their site collection groups.

Management of collections of websites

A server system sends a first credential request to a passive requestor at a client device. After sending the first credential request, the server system receives a credential for a user of the client device. If the credential is valid, the server system can provide the passive requestor with access to a resource provided by the server system. After providing the passive requestor with access to the resource, the server system provides an active requestor at the client device with access to the resource without sending a second credential request to the active requestor. Consequently, it may not be necessary for a user of the client device to provide credentials twice in order for the passive requestor and the active requestor to access the resource.

Transition from WS-Federation passive profile to active profile

A server farm includes a plurality of server devices. The plurality of server devices includes a plurality of topology service endpoints and a plurality of target service endpoints. A client computing system sends a topology service request to one of the topology service endpoints. In response, the topology service endpoint sends target service endpoint Uniform Resource Identifiers (URIs) to the client computing system. When a client application at the client computing system needs to send a target service request to one of the target service endpoints, the client computing system applies a load balancing algorithm to select one of the target service endpoint URIs. The client computing system then sends a target service request to the target service endpoint identified by the selected one of the target service endpoint URIs. In this way, the client computing system may use a load balancing algorithm appropriate for the client application.

Service-based endpoint discovery for client-side load balancing

A computing system hosts a plurality of websites, a plurality of external data sources, and a search service. External resources in each of the external data sources are partitioned among a plurality of external partitions. The search service automatically generates an index comprising index entries. The index entries are partitioned among a plurality of index partitions, each associated with one or more of the websites. For each given index partition, the index entries in the given index partition map terms to resources in the given set of resources that contain the terms. The given set of resources includes web pages in a given set of websites associated with the given index partition and external resources in external partitions used by the given set of websites. The search service uses the index entries in given index partition to identify resources in the given set of resources containing query terms.

Indexing of partitioned external data sources

The present invention facilitates the sharing of resources among multiple applications hosted on a server using shared resource providers. A shared resource provider is a logical grouping of shared services and resources to support the shared services, and is associated with one or more applications hosted on a computing device. The server fulfills requests for the shared services from the shared resource provider with which the requesting application is associated. Shared resource providers may be associated with many different applications, but each application may be associated with only one shared resource provider. The shared services may be configured for consumption by the applications at the server level, at the level of the shared resource provider, and the level of the application.

Method and system for shared resource providers

A graphical user interface and method for creating a mapping between a source object and a destination or target object are provided. The user interface includes a source screen region which displays a graphical representation of a source object, a target screen region which displays a graphical representation of a target object, and a mapping screen region which allows a user to create a mapping between the graphical representation of the source object and the graphical representation of the target object using graphical mapping indicia. The methodology includes displaying a graphical representation of a source object in a source screen region, displaying a graphical representation of a target object in a target screen region, creating a mapping between the graphical representation of the source object and the graphical representation of the target object in a mapping screen region using graphical mapping indicia, and displaying the mapping in the mapping screen region. The source and target objects may be schemas, spreadsheets, documents, databases, or other information sources, and the graphical mapping indicia may include link indicia and/or function objects linking nodes in the target object with nodes in the source object. The mapping may be compiled into code used by a runtime engine to translate source documents into target documents.

Mapping tool graphical user interface

An extensible and automatically replicating server farm configuration management infrastructure is provided. A centralized configuration database stores all configuration data for the server farm. New configuration data can be added to the configuration database by extending a configuration object model without knowing or changing the schema of the configuration database. A synchronization mechanism is provided for each server in the server farm to automatically keep configuration data in the server farm synchronized across multiple servers in the server farm.

Extensible and automatically replicating server farm configuration management infrastructure

A method for compiling a mapping between a source schema and a target schema is provided. The method comprises multiple passes, including determining source node dependencies, matching hierarchy, and generating code. The method may further comprise initializing node dependency memory prior to determining source node dependencies, and freeing node dependency memory after code generation. The compiler algorithm provides for compiling user-defined functions in the mapping into the compiled representation. Another aspect of the invention provides for generating an XSL code representation of the mapping. An XSL style sheet representation may thus be generated from a visual mapping in accordance with the invention.

Growing community of inventors

Kirkland, WA, United States of America

William R Taylor