SYSTEMS AND METHODS FOR NORMALIZING IDENTITY CLAIMS ACROSS DISPARATE IDENTITY DIRECTORIES

摘要

Systems and methods for normalizing claims across a plurality of disparate identity directories. The methods comprise: receiving, by a computing device, a directory claim from a first identity directory of the plurality of disparate identity directories; transforming, by the computing device, the directory claim into a composite directory claim including at least two of a first normalized claim containing an object identifier (e.g., an Security Identifier (“SID”) or Object Identifier (“OID”)), a second normalized claim containing a system user identifier (e.g., User Principle Claim (“UPN”) or email address), and a third normalized claim containing an entity identifier (e.g., a Globally Unique Identifier (“GUID”)); and causing, by the computing device, at least a portion of the composite directory claim to be used in authorizing use of network resources provided by a relying party, where the network resources are unable to recognize identity information contained in the directory claim.