Operating-System SSO Login Service for Multi-App Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional operating system logins require separate authentication for each application, leading to inefficiencies and increased administrative overhead due to the lack of integration with centralized authentication providers.
Innovation Solution
Implementing a single sign-on (SSO) login service at the operating system level that integrates with a centralized authentication provider, allowing users to authenticate once and access multiple applications without additional login credentials through an OS-level SSO service.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If conventional operating system login is used with local user directory, then authentication is performed at OS level, but separate authentication is required for each application
Solution Approach 1:
The patent merges the OS-level authentication with application-level authentication by integrating the centralized authentication provider (IdP) into the operating system's login process. The SSO login service combines OS user account management with application authentication, allowing a single authentication action to satisfy both OS login and application access requirements.
Solution Approach 2:
The SSO login service provides multi-functionality by serving both as the OS authentication mechanism and as the application authentication gateway. A single user account and credential set acquired through the centralized IdP is universally accepted across multiple applications, eliminating the need for separate authentication systems.
2Reliability
If separate authentication for each application is implemented, then application security is maintained, but user experience deteriorates and administrative overhead increases
Solution Approach 1:
The centralized authentication provider (IdP) acts as an intermediary between the user and multiple applications. The IdP verifies user credentials once and then facilitates authenticated access to multiple applications without requiring separate authentication for each, maintaining security while improving user efficiency.
Solution Approach 2:
The system performs preliminary authentication at the OS level through the centralized IdP before application access is required. The authentication credentials and tokens are obtained in advance during the OS login process, so that when applications need to authenticate the user, the authentication has already been completed.
3Adaptability or versatility
If multiple user directories are maintained for different applications, then application-specific authentication is enabled, but administrative overhead increases
Solution Approach 1:
The centralized authentication provider serves as a universal user directory that works across all applications. Instead of maintaining separate user directories for each application, the IdP provides a single unified user database that all applications can authenticate against, reducing directory management complexity while maintaining adaptability.
Data Source
AI summary
As part of a login procedure of an operating system of an end user device, a single sign-on (SSO) login service that is part of the operating system is launched. A login page of an identity provider is displayed through the SSO login service. The SSO login service interacts with the identity provider to provide the authentication credentials submitted through the login page to the identity provider and receive secrets from the identity provider including an access token, an identity token, and a session cookie. The user is logged into the operating system of the end user device using the identity token. The SSO login service makes the secrets available to one or more applications configured for the SSO login service thereby allowing the user to access the one or more applications without separately providing authentication credentials to the one or more applications.