Methods, systems and computer program products for identity and access management

Patent metadata

Field	Value
Publication number	US-9893955-B2
Application number	US-64950509-A
Country	US
Kind code	B2
Filing date	Dec 30, 2009
Priority date	Dec 30, 2009
Publication date	Feb 13, 2018
Grant date	Feb 13, 2018

Abstract

Methods of managing access to systems of an organization are provided. The methods include creating a unique identifier for a user, the unique identifier having an associated user profile for the user and being stored with the associated user profile in an identifier repository associated with the organization; requesting at least one account for the user on at least one system of the organization responsive to the creation of the unique identifier for the user, wherein the at least one account is defined based on the user profile of the user associated with the unique identifier; and generating the at least one account for the user on the at least one system of the organization responsive to the request. Related systems and computer program products are also provided herein.

First claim

That which is claimed:

1. A method of managing access to systems of an organization, comprising:
receiving, by a server, selections associated with a user, the selections input to an account requestor module website, the selections specifying an organization, a department, and a login form;
receiving, by the server, a unique identifier input by the user in the account requestor module website;
storing, by the server, an electronic profile in electronic association with the unique identifier input by the user in the account requestor module website;
querying, by the server, an electronic repository for the department input in the account requestor module website, the electronic repository electronically associating software applications and departments including the department;
identifying, by the server, a listing of software applications that is electronically associated with the department;
requesting, by the server, an account for each software application in the listing of software applications, wherein the account for the each software application in the listing of software applications is defined based on information in the electronic profile associated to the department; and
generating the account for the each software application in the listing of software applications responsive to the requesting of the account.

2. The method of claim 1 , further comprising:
detecting a change in the electronic profile; and
modifying access to the account responsive to the change.

3. The method of claim 2 , wherein detecting the change in the electronic profile comprises detecting a termination associated with the unique identifier and wherein the method further comprises:
deleting the account for the each software application in the listing of software applications responsive to the termination; and
removing the unique identifier.

4. The method of claim 1 , further comprising receiving a common username and password for the each software application in the listing of software applications.

5. The method of claim 1 , further comprising:
receiving a request to modify a password associated with the account of the user; and
modifying the password for the each software application in the listing of software applications.

6. The method of claim 1 , further comprising associating a telephone number to the department selected by the user in the account requestor module website.

7. A system, comprising:
a hardware processor; and
a memory device, the memory device storing instructions, the instructions when executed causing the hardware processor to perform operations, the operations comprising:
receiving selections associated with a user, the selections input to an account requestor module website, the selections specifying an organization, a department, and a login form;
receiving a unique identifier input by the user in the account requestor module website;
connecting an account generation module to the account requestor module web site via a library;
querying an electronic repository for the department selected by the user in the account requestor module website, the electronic repository electronically associating software applications and departments including the department associated with the electronic profile;
retrieving a listing of software applications that is electronically associated with the department selected by the user in the account requestor module website;
requesting an account for each software application in the listing of software applications; and
generating the account for the each software application in the listing of software applications.

8. The system of claim 7 , wherein the operations further comprise:
receiving a termination of employment associated with the unique identifier;
deleting the account for each software application in the listing of software applications responsive to the termination; and
removing the unique identifier.

9. The system of claim 7 , wherein the operations further comprise receiving a common username and password for the each software application in the listing of software applications.

10. The system of claim 7 , wherein the operations further comprise:
receiving a request to modify a password associated with the account; and
modifying the password for the each software application in the listing of software applications.

11. The system of claim 7 , wherein the operations further comprise associating a telephone number to the department selected by the user in the account requestor module website.

12. A memory device storing code that when executed causes a hardware processor to perform operations, the operations comprising:
receiving selections associated with a user, the selections input to an account requestor module website, the selections specifying an organization, a department, and a login form;
receiving a unique identifier input by the user in the account requestor module website;
connecting an account generation module to the account requestor module web site via a library;
querying an electronic repository for the department selected by the user in the account requestor module website, the electronic repository electronically associating software applications and departments including the department associated with the electronic profile;
retrieving a listing of software applications that is electronically associated with the department selected by the user in the account requestor module website;
requesting an account for each software application in the listing of software applications;
generating the account for the each software application in the listing of software applications;
determining a supervisory change based on a supervisory identifier;
forcing an access review via the account requestor module web site in response to the supervisory change based on the supervisory identifier.

13. The memory device of claim 12 , wherein the operations further comprise:
detecting a termination of employment associated with the unique identifier;
deleting the account for each software application in the listing of software applications responsive to the termination; and
removing the unique identifier.

14. The memory device of claim 12 , wherein the operations further comprise receiving a common username and password for the each software application in the listing of software applications.

15. The memory device of claim 12 , wherein the operations further comprise:
receiving a request to modify a password associated with the account; and
modifying the password for the each software application in the listing of software applications.

16. The memory device of claim 12 , wherein the operations further comprise associating a telephone number to the department within the organization selected by the user in the account requestor module website.

Assignees

• Reeves Allison
• Johnson Michael
• Kirkpatrick Michael
• Toretti Gary
• At & T Ip I Lp

Inventors

• Reeves Allison
• Johnson Michael
• Kirkpatrick Michael
• Toretti Gary

Classifications

• H04L63/102

  Entity profiles · CPC title

• H04L41/28 Primary

  Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration · CPC title

• G06F2221/2101

  Auditing as a secondary aspect · CPC title

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title

• G06Q10/10

  Office automation; Time management · CPC title