Abstract: A method and system is provided to provide single sign on (SSO) functionality in a network that avoids storing a user's credentials in persistent storage. A session may be initiated with a portal which sends a session ID derivative as a credential string instead of a user's password to a target application. When the target application attempts to authenticate the user, by sending a request to a LDAP directory, the request is intercepted by a LDAP proxy that instead validates the UserID with the LDAP directory and the password is validated by a credential validator component which verifies with the portal that the credential string presented as the user password has been produced from the active session ID. In an embodiment, the credential string validator validates each short-living credential only once and upon detecting a second validation request for the same string, initiates a security breech process.

Abstract: A method and apparatus is provided for 3D virtual try-on of apparel on an avatar. A method of fitting a garment on a person's body online may comprise receiving specifications of a garment, receiving body specifications of one or more fit models, receiving one or more grade rules, receiving one or more fabric specifications, and receiving specifications of a consumer's body. The value of one or more fabric constants may be determined according to the received one or more fabric specifications. One or more virtual garments in graded sizes may be created and stored in a database based on the received garment specifications and fabric constants. Moreover, one or more graded virtual fit models may be created and stored in a database based on the received specifications of the fit model. Each virtual garment may be draped on the related virtual fit model to create a fit-model drape. An avatar is received or created to represent a consumer's body shape.

Abstract: A method and system is provided to provide single sign on (SSO) functionality in a network that avoids storing a user's credentials in persistent storage. A session may be initiated with a portal which sends a session ID derivative as a credential string instead of a user's password to a target application. When the target application attempts to authenticate the user, by sending a request to a LDAP directory, the request is intercepted by a LDAP proxy that instead validates the UserID with the LDAP directory and the password is validated by a credential validator component which verifies with the portal that the credential string presented as the user password has been produced from the active session ID. In an embodiment, the credential string validator validates each short-living credential only once and upon detecting a second validation request for the same string, initiates a security breech process.