Multi-tenant identity cloud service with on-premise authentication integration

Patent metadata

Field	Value
Publication number	US-11870770-B2
Application number	US-202016807713-A
Country	US
Kind code	B2
Filing date	Mar 3, 2020
Priority date	Sep 13, 2019
Publication date	Jan 9, 2024
Grant date	Jan 9, 2024

Abstract

Embodiments are directed to a multi-tenant cloud system. Embodiments receive a request for an authentication action for a user and create an authenticate target action. Embodiments register a cache listener to listen for a target action response that is responsive to the authenticate target action and initiate the authentication action for the user at an on-premise active directory (“AD”) via a bridge. Embodiments wait for a cache callback and, at the cache callback, receive a target action response comprising a result of the authentication action.

First claim

What is claimed is:

1. A method of operating a multi-tenant cloud system, the method comprising:
receiving a request for an authenticate action for a user, the request received at the multi-tenant cloud system from an on-premise active directory via a firewall, the request received by searching for pending target actions within a database, the request generated by an on-premise active directory (AD) via a bridge;
in response to the request, at the multi-tenant cloud system creating an authenticate target action, the authenticate target action comprising an AD domain identifier of a targeted application;
registering a cache listener at the multi-tenant cloud system to listen for a target action response that is responsive to the authenticate target action, the cache listener generating a cache callback when a cache event occurs;
initiating the authentication action for the user at the AD via the bridge;
waiting for the cache callback; and
at the cache callback, receiving at the multi-tenant cloud system via the on-premise active directory a target action response comprising a result of the authentication action;
wherein the authenticate target action comprises a synchronous target action or an asynchronous target action, the synchronous target action thread blocking until receiving the target action response and the asynchronous target action thread polling until receiving the target action response.

2. The method of claim 1 , further comprising:
while waiting for the cache callback, polling for a thread created for the authenticate target action; wherein the polling continues until the cache callback or a timeout.

3. The method of claim 1 , wherein the cache listener is implemented by an in-memory distributed data grid.

4. The method of claim 3 , wherein the in-memory distributed data grid comprises a Coherence cache.

5. The method of claim 1 , wherein the authenticate action comprises changing a password.

6. The method of claim 5 , wherein the synchronous target action comprises a response to the user logging in.

7. A non-transitory computer-readable medium storing instructions which, when executed by at least one of a plurality of processors, cause the processors to operate a multi-tenant cloud system, the operating comprising:
receiving a request for an authenticate action for a user, the request received at the multi-tenant cloud system from an on-premise active directory via a firewall, the request received by searching for pending target actions within a database, the request generated by an on-premise active directory (AD) via a bridge;
in response to the request, at the multi-tenant cloud system creating an authenticate target action, the authenticate target action comprising an AD domain identifier of a targeted application;
registering a cache listener at the multi-tenant cloud system to listen for a target action response that is responsive to the authenticate target action, the cache listener generating a cache callback when a cache event occurs;
initiating the authentication action for the user at the AD via the bridge;
waiting for the cache callback; and
at the cache callback, receiving at the multi-tenant cloud system via the on-premise active directory a target action response comprising a result of the authentication action;
wherein the authenticate target action comprises a synchronous target action or an asynchronous target action, the synchronous target action thread blocking until receiving the target action response and the asynchronous target action thread polling until receiving the target action response.

8. The computer-readable medium of claim 7 , the operating further comprising:
while waiting for the cache callback, polling for a thread created for the authenticate target action; wherein the polling continues until the cache callback or a timeout.

9. The computer-readable medium of claim 7 , wherein the cache listener is implemented by an in-memory distributed data grid.

10. The computer-readable medium of claim 9 , wherein the in-memory distributed data grid comprises a Coherence cache.

11. The computer-readable medium of claim 7 , wherein the authenticate action is an asynchronous action comprises changing a password.

12. The computer-readable medium of claim 11 , wherein the synchronous target action comprises a response to the user logging in.

13. A multi-tenant cloud system for a plurality of user accounts, the system comprising:
one or more processors in communication with a client system that receives an authentication action request for a user, the request received at the multi-tenant cloud system from an on-premise active directory via a firewall, the processors:
receiving a request for an authenticate action for a user, the request received at the multi-tenant cloud system from an on-premise active directory via a firewall, the request received by searching for pending target actions within a database, the request generated by an on-premise active directory (AD) via a bridge;
in response to the request, at the multi-tenant cloud system creating an authenticate target action, the authenticate target action comprising an AD domain identifier of a targeted application;
registering a cache listener at the multi-tenant cloud system to listen for a target action response that is responsive to the authenticate target action, the cache listener generating a cache callback when a cache event occurs;
initiating the authentication action for the user at the AD via the bridge;
waiting for the cache callback; and
at the cache callback, receiving at the multi-tenant cloud system via the on-premise active directory a target action response comprising a result of the authentication action;
wherein the authenticate target action comprises a synchronous target action or an asynchronous target action, the synchronous target action thread blocking until receiving the target action response and the asynchronous target action thread polling until receiving the target action response.

14. The system of claim 13 , further comprising:
while waiting for the cache callback, polling for a thread created for the authenticate target action;
wherein the polling continues until the cache callback or a timeout.

15. The system of claim 13 , wherein the cache listener is implemented by an in-memory distributed data grid.

16. The system of claim 13 , wherein the authenticate action comprises changing a password.

17. The system of claim 16 , wherein the synchronous target action comprises a response to the user logging in.

Assignees

• Oracle Int Corp

Inventors

• Lao Isabella Hio-Wai
• Cole Gary
• Sridhar Sudarsan
• Wilson Gregg

Classifications

• H04L63/0846 Primary

  using time-dependent-passwords, e.g. periodically changing passwords · CPC title

• H04L12/403

  with centralised control, e.g. polling · CPC title

• H04L12/462

  LAN interconnection over a bridge based backbone · CPC title

• H04L63/029

  Firewall traversal, e.g. tunnelling or, creating pinholes · CPC title

• H04L67/568

  Storing data temporarily at an intermediate stage, e.g. caching · CPC title