Okta, Inc.
DIGITAL SIGNATURE INJECTION FOR USER AUTHENTICATION ACROSS MULTIPLE INDEPENDENT SYSTEMS

Abstract:

A process running on client devices intercepts requests destined for an identity provider ("IdP") system and injects a digital signature corresponding to a user associated with the request. In order to reduce or eliminate the burden on providers of the applications or other resources used by the users, the organization providing the IdP system may also provide components that run locally on the client devices of users and integrate with the users' applications. For example, in one embodiment code of the IdP system is run within a container of an application to handle communication with the IdP system. Additionally, code of the IdP system is run as a local process that handles request interception and digital signature injection. For client devices not supporting the use of the local process, a separate verifier application of the IdP can be run locally and allow interactively performing authentication via a user interface.