US 12,328,309 B1
Pattern based security assertion markup language (SAML) access
Raghavarao Sodabathina, Westborough, MA (US); and Imtiaz Sayed, Frisco, TX (US)
Assigned to Amazon Technologies, Inc., Seattle, WA (US)
Filed by Amazon Technologies, Inc., Seattle, WA (US)
Filed on Jun. 24, 2022, as Appl. No. 17/849,500.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/083 (2013.01) 22 Claims
OG exemplary drawing
 
1. A system for facilitating Security Assertion Markup Language (SAML) accesses to network-based services, the system comprising:
one or more computing processors and memories for executing computer-executable instructions to implement a SAML configuration service, wherein the SAML configuration service is configured to:
obtain, from an identity provider service, a customer authentication information;
without user intervention, in response to receiving the authentication information from the identity provider service, discover a plurality of target SAML-enabled services by accessing one or more service providers with the customer authentication information, wherein the plurality of target SAML-enabled services are hosted in the one or more network service providers;
without user intervention, prioritize the discovered plurality of target SAML-enabled services, wherein the prioritization is based at least on the customer usage pattern of historically accessing each network service provider associated with the discovered SAML-enabled services;
provide a prioritized list of target SAML-enabled services, including the prioritized discovered plurality of target SAML-enabled services, to a customer computing device communicatively coupled with the system;
receive, from the customer computing device, at least one selection of target SAML-enabled services selected from the prioritized list of target SAML-enabled services;
without user intervention, in response to receiving the at least one selected target SAML-enabled services, identify one or more configuration parameters associated with SAML configuration of the at least one selected target SAML-enabled services; and
cause, without user intervention, an automatic initial configuration of SAML configurations associated with the at least one selected target SAML-enabled services based on the identified configuration parameters.