公开(公告)号：US20210014224A1

公开(公告)日：2021-01-14

申请号：US16507099

申请日：2019-07-10

Applicant: Microsoft Technology Licensing, LLC

Inventor： Ariel Gordon ,  Paul Garner ,  Rachel Anne Brown Teller

IPC: H04L29/06 ,  H04L12/28

Abstract: Methods, systems, apparatuses, and computer program products are provided for automatically determining a home realm. An authentication request receiver interface may receive a request to access a resource and a device identifier from a client device. An authenticator may be enacted in response to receiving the request to access the resource that includes a home realm discoverer and an authentication user interface (UI) provider. The home realm discoverer may determine, based at least on the device identifier, the home realm from a plurality of realms. The authentication UI provider may provide, to the client device, an authentication UI via which a flat-name username can be submitted. Based at least on a flat-name user name and the determined home realm, access to the resource may be granted. In this manner, a user may input a flat-name username during sign-in, rather than inputting a realm or an entire e-mail address.

公开(公告)号：US11552947B2

公开(公告)日：2023-01-10

申请号：US16507099

申请日：2019-07-10

Applicant: Microsoft Technology Licensing, LLC

Inventor： Ariel Gordon ,  Paul Garner ,  Rachel Anne Brown Teller

IPC: H04L9/40 ,  H04L12/28

Abstract: Methods, systems, apparatuses, and computer program products are provided for automatically determining a home realm. An authentication request receiver interface may receive a request to access a resource and a device identifier from a client device. An authenticator may be enacted in response to receiving the request to access the resource that includes a home realm discoverer and an authentication user interface (UI) provider. The home realm discoverer may determine, based at least on the device identifier, the home realm from a plurality of realms. The authentication UI provider may provide, to the client device, an authentication UI via which a flat-name username can be submitted. Based at least on a flat-name user name and the determined home realm, access to the resource may be granted. In this manner, a user may input a flat-name username during sign-in, rather than inputting a realm or an entire e-mail address.

公开(公告)号：US10536450B2

公开(公告)日：2020-01-14

申请号：US15490657

申请日：2017-04-18

Applicant: Microsoft Technology Licensing, LLC

Inventor： Ariel Gordon ,  Sarat Chandra Subramaniam ,  Ben Vincent ,  Paul Garner

IPC: H04L29/06 ,  G06F21/31 ,  G06F21/41 ,  H04W4/14 ,  H04L29/08

Abstract: A method and system performed by a computing system for signing in using personal identifiers input via a sign-in portal that supports multiple tenants is provided. The system receives a sign-in request for a user that includes a personal identifier. The personal identifier uniquely identifies a person but does not include an identification of a tenant. The system performs a verification based on the personal identifier to authenticate the user. The system identifies, from a mapping, a tenant to which the personal identifier is mapped. The mapping maps personal identifiers of users to tenants. The system retrieves, from a user store for the tenant, user information relating to the user. The system then creates a security token based on the user information. If verification of the user was successful, the system sends the security token to the sign-in portal as evidence that the user has been authenticated.