公开(公告)号：US11632364B1

公开(公告)日：2023-04-18

申请号：US17305179

申请日：2021-07-01

Applicant: Juniper Networks, Inc.

Inventor： Gurminder Singh ,  Pei-Yu Yang ,  Mamata Devabhaktuni

IPC: H04L9/40 ,  G06F21/31

Abstract: A controller may be used to create and process an assertion, in some cases, to implement single-sign on (SSO) in a computer network. In some examples, the controller includes processing circuitry coupled to a storage device. The processing circuitry is configured to create the assertion, where the assertion includes information indicative of a set of attributes and parse the assertion to determine the set of attributes. Additionally, the processing circuitry is configured to determine if each attribute of the set of attributes maps to a plurality of primary user groups stored in the storage device. Based on determining that an attribute of the set of attributes does not map to at least one primary user group of the plurality of primary user groups, the processing circuitry is configured to create a set of secondary user groups and a set of secondary user group names corresponding to the attribute.

公开(公告)号：US11070540B1

公开(公告)日：2021-07-20

申请号：US16235647

申请日：2018-12-28

Applicant: Juniper Networks, Inc.

Inventor： Gurminder Singh ,  Pei-Yu Yang ,  Mamata Devabhaktuni

IPC: H04L29/06 ,  G06F21/31

Abstract: A controller may be used to create and process an assertion, in some cases, to implement single-sign on (SSO) in a computer network. In some examples, the controller includes processing circuitry coupled to a storage device. The processing circuitry is configured to create the assertion, where the assertion includes information indicative of a set of attributes and parse the assertion to determine the set of attributes. Additionally, the processing circuitry is configured to determine if each attribute of the set of attributes maps to a plurality of primary user groups stored in the storage device. Based on determining that an attribute of the set of attributes does not map to at least one primary user group of the plurality of primary user groups, the processing circuitry is configured to create a set of secondary user groups and a set of secondary user group names corresponding to the attribute.