Identity experience framework
摘要
說(shuō)明書(shū)
The additional examples and embodiments described in this Section may be applicable to examples disclosed in any other Section or subsection of this disclosure.
A system is described herein. The system may be configured and enabled in various ways to provide composable user journeys for user authentication, and the system may perform its functions according to an identity experience framework, as described herein. The system includes a memory(ies) configured to store program logic, and also includes a processor(s) configured to access the memory and to execute the program logic. In the system, the program logic includes communicator logic and policy executor logic. The communicator logic configured to receive a call from an application, the call indicating or specifying an identity policy that is one of a plurality of identity policies for dynamic deployment by the application, and to receive a token request and an identity claim responsive to user interaction with a user interface (UI) associated with the identity policy and provided to the application. The policy executor logic is configured to execute a user authentication process that is defined by the identity policy and that includes providing the UI to the application. The policy executor logic is also configured to verify the identity claim and provide a token to the application for consumption, via the communicator logic, to complete the token request.
In an embodiment of the system, the policy executor logic, to verify the identity claim, is configured to provide the identity claim to a verification provider according to the identity policy, receive a response claim from the verification provider, and verify the identity claim against the response claim.
