Identity Experience Framework for Composable Authentication Journeys

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current identity solutions are fragmented and require custom-built implementations for various workloads, lacking a seamless user experience across applications and failing to meet the diverse needs of companies and governments in digital transactions.

Innovation Solution

An identity experience framework (IEF) that enables composable user journeys for user authentication, allowing dynamic invocation of identity policies and leveraging a multi-sided platform to integrate identity operators, verification providers, and application service providers, providing a centralized solution for diverse identity protocols and user journeys.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If custom-built identity solutions are implemented for each application, then specific workload needs are met, but system complexity and development time increase

Engineering Contradiction:
Improveworkload-specific customizationVSAvoididentity solution complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements a universal identity framework that serves multiple workloads through a common architecture. The framework provides core identity verification functionality that can be adapted to different applications through configurable policies and providers, eliminating the need for separate custom-built solutions for each workload while maintaining versatility.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The identity framework is segmented into independent, modular components including identity providers, verification providers, policies, and user journeys. These segmented modules can be independently configured and combined to meet specific workload requirements without increasing overall system complexity, as each module has a defined responsibility and interface.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If multiple custom identity implementations are deployed across applications, then diverse workload requirements are satisfied, but user experience consistency deteriorates

Engineering Contradiction:
Improveworkload requirement fulfillmentVSAvoiduser experience consistency
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The framework provides a universal user experience layer that maintains consistency across all applications. The same user journey patterns, authentication flows, and interaction models are reused throughout the system, ensuring that users experience the same level of usability regardless of which application or workload they are accessing.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The framework acts as an intermediary layer between users and diverse identity implementations. This mediator layer standardizes user interactions with different identity providers and verification mechanisms, translating various backend implementations into a consistent user experience while still satisfying diverse workload requirements.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of operation

If centralized identity framework is implemented, then user experience consistency improves, but flexibility for custom workloads decreases

Engineering Contradiction:
Improveuser experience consistencyVSAvoidworkload-specific adaptability
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The framework implements dynamic configurability where user journeys, policies, and provider selections can be adjusted based on specific workload requirements. The system allows runtime configuration and composition of identity flows, enabling the same centralized framework to adapt to diverse workload needs without compromising user experience consistency.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The framework applies local quality by allowing workload-specific customization at the policy and configuration level while maintaining a consistent core user experience. Different workloads can have tailored identity verification steps, providers, and policies configured locally within the unified framework, providing adaptability without sacrificing overall consistency.

Inventive Principle:
Principle #3Local quality

4Reliability

If custom identity solutions are built for each application, then specific verification needs are met, but development and maintenance effort increase

Engineering Contradiction:
Improveverification accuracyVSAvoiddevelopment efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The framework provides universal verification capabilities through reusable identity providers and verification mechanisms that can be applied across all applications. This eliminates the need to rebuild verification logic for each custom solution, maintaining verification accuracy through proven, tested components while significantly improving development efficiency.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The framework performs preliminary action by pre-configuring identity providers, verification processes, and policy templates that can be directly applied to new workloads. This advance preparation of verification components allows rapid deployment of reliable identity solutions without requiring extensive custom development for each application.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12519766B2Identity experience framework
Publication Date: 2026.01.06 MICROSOFT TECHNOLOGY LICENSING LLC
  • US12519766B2 patent drawing
  • US12519766B2 patent drawing
  • US12519766B2 patent drawing

AI summary

Methods for composable user journeys for user authentication via an identity experience framework are performed by systems and apparatuses. Initiating a user authentication process for an application triggers application calls for dynamic invocation of a specific identity policy, required by the application, of a number of identity policies managed by a host of the identity experience framework. User interfaces defined by the identity policies are provided from the host to the application for interaction by the user and entry of identity information needed to authenticate the user according to specified verification providers. Identity claims and token requests are provided from the application to the host which then authenticates the identity claims via the verification providers and mints a token that includes the claims required by the application, according to the identity policy. The application consumes the token to complete the token request and allow the user access to the application.