Identity experience framework
摘要
說明書
A computer-readable storage medium comprising computer-executable instructions that, when executed by at least one processor, perform a method is also described herein. The method may include steps for providing a composable user journey for user authentication, according to an identity experience framework, as described herein. The method may be implemented by a computing system that embodies or accepts the computer-readable storage medium. The computing system may comprise a multi-sided identity experience framework configured to support a plurality of remote identity operators, a plurality of remote verification providers, and a plurality of remote application service providers for user authentication to applications. In an embodiment, the method includes receiving a call from an application, the call indicating or specifying an identity policy of a plurality of identity policies for dynamic deployment by the application, and executing a user authentication process that is defined by the identity policy and that includes providing a user interface (UI) associated with the identity policy to the application. The method also includes receiving a token request and an identity claim responsive to user interaction with the UI at the application, verifying the identity claim, and providing a token to the application for consumption to complete the token request.
In an embodiment of the computer-readable storage medium, the method includes providing the identity claim to a verification provider according to the identity policy, and receiving a response claim from the verification provider. In the embodiment, verifying the identity claim includes verifying the identity claim against the response claim.
