Multi-Cloud Token Mapping for Unified SaaS Login
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional multi-cloud application systems require separate user accounts and management systems for different SaaS applications, leading to high system management and operation costs, and are inconvenient for users due to the need for individual account management.
Innovation Solution
An integrated system and method that uses an adapter at the PaaS layer to integrate multiple SaaS modules by generating and mapping token data across PaaS modules, allowing seamless and secure access to multiple SaaS modules using a single login account.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate user accounts and management systems are established for each SaaS application, then each SaaS application can be independently managed and accessed, but system management complexity and operation costs increase significantly
Solution Approach 1:
The patent merges multiple independent SaaS application management systems into a unified system. The gateway device consolidates authentication, authorization, and account management functions across multiple SaaS applications, allowing enterprises to manage multiple SaaS applications through a single integrated interface rather than separate management systems for each application.
Solution Approach 2:
The gateway device provides universal functionality that serves multiple SaaS applications simultaneously. It implements a common authentication mechanism that works across different SaaS applications, providing single sign-on capability and unified user management that can be applied to any number of SaaS applications within the enterprise environment.
2Reliability
If separate user accounts are established for each SaaS application, then each application's security requirements can be met, but user convenience deteriorates due to multiple login credentials
Solution Approach 1:
The patent combines multiple authentication credentials into a single unified login mechanism. The gateway device consolidates user credentials and authentication logic, allowing users to log in once to access multiple SaaS applications rather than maintaining separate usernames and passwords for each application, thereby improving user convenience while maintaining security.
Solution Approach 2:
The gateway device acts as an intermediary between users and multiple SaaS applications. It handles authentication and authorization requests, translating user credentials into appropriate access tokens for different SaaS applications. This intermediary layer maintains security requirements of each application while providing a simplified login experience for users.
3Adaptability or versatility
If multiple independent management systems are implemented, then each SaaS application can be customized and controlled independently, but operational costs increase excessively
Solution Approach 1:
The patent merges multiple independent management systems into a single gateway device that provides centralized control. This consolidation eliminates redundant infrastructure, reduces licensing costs for multiple separate systems, and lowers operational overhead while maintaining the ability to customize and control individual SaaS applications through the unified management interface.
Solution Approach 2:
The gateway device provides universal management capabilities that can be applied across multiple SaaS applications, eliminating the need for separate specialized management systems for each application. This multi-functional approach reduces overall system costs while maintaining adaptability and customization options for each integrated SaaS application.
Data Source
AI summary
An integrated system including an adapter, a first PaaS module, and a second PaaS module and an integrated method between multi-cloud applications are provided. When a tenant device accesses the first PaaS module so that the first PaaS obtains a login request, the first PaaS module generates first token data according to the login request and provides the first token data to the tenant device. When the tenant device provides login data to a second SaaS module to log in to the second SaaS module for the first time, the second SaaS module provides the login data to the adapter. The adapter verifies and parses the login data to generate the first token data and tenant information, obtains second token data according to the tenant information, and maps the second token data to the first token data. The integrated system and the integrated method can efficiently integrate the SaaS modules.