Browser Extension Single Sign-On via Access Manager Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Single Sign-On (SSO) methods for web applications are inefficient, require complex changes to application structures, and need specialized skills, failing to effectively enable SSO across multiple applications without modifying the application or accessing dynamic attributes.
Innovation Solution
A system and method using a browser extension that receives and parses login credentials, generates XML data and digital scripts, and authenticates users through a database, enabling SSO across multiple web applications without altering the application structure, and allowing users to edit JavaScript without specialized skills.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Access Managers or Reverse Proxies are used for Single Sign-On, then single sign-on capability is achieved, but application structure changes are required and implementation complexity increases
Solution Approach 1:
The patent introduces an Access Manager as an intermediary component that mediates between users and multiple applications. The Access Manager handles authentication centrally, intercepting login requests and verifying credentials without requiring modifications to the application structures themselves. This mediator approach resolves the contradiction by providing SSO capability while avoiding the complexity of changing application architectures.
2Reliability
If current SSO methods are implemented, then single sign-on is enabled, but specialized skills and niche skill sets are required for implementation
Solution Approach 1:
The patent implements a self-service mechanism where the Access Manager automatically performs authentication tasks without requiring specialized manual configuration. The system autonomously manages credential verification, session tokens, and authentication state across applications. This automation eliminates the need for niche skills in implementation, as the system handles complex authentication logic internally while presenting a simple interface to users and administrators.
3Ease of operation
If browser extensions are used for SSO, then ease of operation improves, but inability to access dynamic attributes and submit login credentials occurs
Solution Approach 1:
The patent designs the Access Manager with universal functionality that works across multiple applications and authentication scenarios. The system provides a standardized interface for login while internally adapting to different application requirements. The Access Manager can handle various authentication methods (username/password, tokens, certificates) and dynamically adjusts its behavior based on the application context, thus maintaining both ease of operation and adaptability to dynamic attributes.
4Adaptability or versatility
If JavaScript code changes are required for browser extensions, then functionality can be customized, but extension must be rebuilt and redeployed
Solution Approach 1:
The patent implements a configuration mechanism where authentication parameters, application endpoints, and custom behaviors can be pre-configured in the Access Manager. These configurations are stored and managed centrally, allowing customization of functionality without requiring code changes or rebuilds. When customization is needed, administrators can modify configuration settings, and the Access Manager automatically applies changes without requiring reconstruction or redeployment of the extension.
Data Source
AI summary
The embodiments herein disclose a system and method for enabling single sign-on for a user on a plurality of web applications through a browser extension. The system includes a browser extension installed on a client device and a server. The server includes a receiving module, a parsing module, an authentication module, a generating module, and a database.