Transformed Link for Automatically Providing Access of a Protected Resource Accessible to a Different Instance

Patent metadata

Field	Value
Publication number	US-2025392583-A1
Application number	US-202519312002-A
Country	US
Kind code	A1
Filing date	Aug 27, 2025
Priority date	Mar 26, 2024
Publication date	Dec 25, 2025
Grant date	—

Abstract

In the present application, improved techniques of a provider instance providing a customer instance access to resources on an ITSM platform are disclosed. A link to a protected resource is generated by a first instance. In response to determining that the link is being transmitted to a user of a second instance different from the first instance, the link is converted into a transformed link comprising an application programming interface (API) call. In response to the user of the second instance interacting with the transformed link, the API call is received. Based on the API call, it is determined that the user is authorized to access the protected resource. In response to determining that the user is authorized to access the protected resource, the user of the second instance is provided a uniform resource locator (URL) to access a time-based single sign-on (SSO) page for accessing the protected resource.

First claim

What is claimed is:

1 . A method comprising:
receiving, from a first computational instance, a first user input directed to a user interface (UI), wherein the first user input is associated with a user profile; obtaining, by a virtual agent based on the first user input, a link to a resource; transforming the link to generate a transformed link; updating the UI to include the transformed link; based on a second user input selecting the transformed link within the UI, determining, by the virtual agent, whether the user profile satisfies an authorization condition with respect to the resource; and in accordance with a determination of whether the user profile satisfies the authorization condition, granting or denying the user profile access to the resource.

2 . The method of claim 1 , wherein the user profile satisfies the authorization condition, and wherein the user profile is granted access to the resource.

3 . The method of claim 1 , wherein the user profile does not satisfy the authorization condition, and wherein the user profile is denied access to the resource.

4 . The method of claim 1 , wherein the access to the resource is limited to a second computational instance different from the first computational instance.

5 . The method of claim 4 , wherein granting the user profile access to the resource includes logging the user profile into the second computational instance.

6 . The method of claim 5 , wherein logging the user profile into the second computational instance is time limited.

7 . The method of claim 4 , wherein the second computational instance corresponds to a provider instance, and the first computational instance corresponds to a consumer instance.

8 . The method of claim 1 , wherein the first computational instance does not have access to the resource via the link.

9 . The method of claim 1 , wherein transforming the link is in response to determining that the link is to be transmitted to the first computational instance.

10 . The method of claim 1 , wherein transforming the link is in response to determining that the first user input is associated with a user that is authorized to access the resource.

11 . The method of claim 1 , wherein activating the transformed link causes an application programming interface (API) call to be made.

12 . The method of claim 1 , wherein the first user input corresponds to a user request, and wherein obtaining the link includes identifying content that is responsive to the user request.

13 . The method of claim 12 , wherein the content comprises a knowledgebase article.

14 . The method of claim 12 , wherein the content comprises a catalog item.

15 . A non-transitory computer-readable medium, storing program instructions that, when executed by one or more processors of a computing system, cause the computing system to perform operations comprising:
receiving, from a first computational instance, a first user input directed to a user interface (UI), wherein the first user input is associated with a user profile; obtaining, by a virtual agent based on the first user input, a link to a resource; transforming the link to generate a transformed link; updating the UI to include the transformed link; based on a second user input selecting the transformed link within the UI, determining, by the virtual agent, whether the user profile satisfies an authorization condition with respect to the resource; and in accordance with a determination of whether the user profile satisfies the authorization condition, granting or denying the user profile access to the resource.

16 . The non-transitory computer-readable medium of claim 15 , wherein the access to the resource is limited to a second computational instance different from the first computational instance.

17 . The non-transitory computer-readable medium of claim 16 , wherein granting the user profile access to the resource includes logging the user profile into the second computational instance.

18 . The non-transitory computer-readable medium of claim 17 , wherein logging the user profile into the second computational instance is time limited.

19 . The non-transitory computer-readable medium of claim 16 , wherein the second computational instance corresponds to a provider instance, and the first computational instance corresponds to a consumer instance.

20 . A computing system comprising:
one or more processors; memory; and program instructions, stored in the memory, that upon execution by the one or more processors cause the computing system to perform operations comprising:
receiving, from a first computational instance, a first user input directed to a user interface (UI), wherein the first user input is associated with a user profile;
obtaining, by a virtual agent based on the first user input, a link to a resource;
transforming the link to generate a transformed link;
updating the UI to include the transformed link;
based on a second user input selecting the transformed link within the UL, determining, by the virtual agent, whether the user profile satisfies an authorization condition with respect to the resource; and
in accordance with a determination of whether the user profile satisfies the authorization condition, granting or denying the user profile access to the resource.

Assignees

• Servicenow Inc

Inventors

• Edmonds James Robert

Classifications

• G06F9/547

  Remote procedure calls [RPC]; Web services · CPC title

• G06F9/541

  via adapters, e.g. between incompatible applications · CPC title

• H04L63/0815 Primary

  providing single-sign-on or federations · CPC title