METHOD AND SYSTEM FOR CREATING AND MANAGING DEPENDENT IDENTITY FEDERATION RELATIONSHIPS

摘要

A method and system for providing a service to a user (102) by a first service provider (108) in an identity federation environment (100) is provided. The user has an identity relationship with an identity provider (104) and the identity provider has a primary relationship with a second service provider (106) for the user. The method includes receiving (404) a first token for the service. The first token is associated with an identifier of the primary relationship. Further, the method includes requesting (406) the identity provider to certify the first token. Furthermore, the method includes receiving (408) a second token from the identity provider. The second token is associated with an identifier of a secondary relationship between the first service provider and the identity provider to provide the service to the user from the first service provider. The secondary relationship is dependent on the primary relationship.