User verification state sharing for principal-agent-based session management

Abstract

In various embodiments, systems and methods for user verification state sharing for principal-agent-based session management are provided. In some embodiments, a user verification state sharing process based on server-side logic and a session metadata database tier is provided that addresses sharing session context metadata securely without repetitious user reauthentication. Session context metadata may be managed using an API-based contextizer that maintains a database of session context metadata for active sessions corresponding with an authenticated principal user. Based on session context metadata, an IDP can serve a token generation code to one or more applications (on either a principal user's or agent user's devices) that may be used to locally generate the token used to establish a verified session for the principal user. The contextizer may operate as a gateway to the session metadata database to manage the reading and writing of session metadata.