Abstract: A native application on a client computing device enables secure user authentication via an identity provider (IdP) for accessing services of a web service provider. The native application forwards a redirect request generated by a main gateway of the service provider and including an IdP uniform resource locator (URL) to a system browser of the client computing device. The redirect request directs the system browser to a broker gateway of the service provider that registers an authentication response handler and redirects the system browser to the IdP URL to enable a user of the native client computing device to authenticate. After the broker gateway receives an IdP authentication response from the IdP following authentication by the user, the broker gateway provides the IdP authentication response to the native application for providing back to the main gateway. The main gateway finally processes the authentication response to complete the authentication request.

Abstract: A system for efficiently configuring bindings based on a dependency graph is described. The system may generate or access a graph comprising a set of nodes. Each node may represent a binding and is associated with a component property of a component hierarchy corresponding to a hierarchical structure of a data model. Each node of the graph may be connected to at least one other node with an edge representing a dependency in the hierarchical structure of the data model. The system may receive a request to generate a view associated with the set of bindings. The system may determine an order to load the set of bindings based on the graph, and may load the set of bindings based on the determined order.

Abstract: An agent computer system uses a session-less login process to log in two users in a same application session. The system establishes an application session with an application server and a user session with the application server by authenticating a first user using an identity provider system (IdP). The system detects a request to perform an action by the first user within the application session that requires a second user's authentication. While maintaining the user session, the system requests a session-less authentication of the second user by transmitting an authentication request, which includes a flag indicating that the requested authentication is a session-less authentication. The system receives a confirmation of the authentication of the second user without establishing a second user session and performs the requested action in response to receiving the confirmation of the authentication of the second user.

Abstract: A system provides a design interface for designing and implementing graphical user interfaces that users can access through web browsers. Depending on the configuration of the graphical user interfaces, the users may be able to monitor and control industrial processes by interacting with components that correspond to the industrial processes as displayed in user interfaces at client devices. The design interface includes functionality for selecting preprogrammed components, or for generating new components for display. The design interface further allows designers to associate data values received from a variety of sources with properties of the components in the user interfaces. In particular, properties associated with a component of an interface are stored in property tree structures, making dynamic changes to the components possible. Data bindings between subtrees representing components and sets of data from industrial and other sources allows for designs that scale with the availability of the data.

Abstract: A native application on a client computing device enables secure user authentication via an identity provider (IdP) for accessing services of a web service provider. The native application forwards a redirect request generated by a main gateway of the service provider and including an IdP uniform resource locator (URL) to a system browser of the client computing device. The redirect request directs the system browser to a broker gateway of the service provider that registers an authentication response handler and redirects the system browser to the IdP URL to enable a user of the native client computing device to authenticate. After the broker gateway receives an IdP authentication response from the IdP following authentication by the user, the broker gateway provides the IdP authentication response to the native application for providing back to the main gateway. The main gateway finally processes the authentication response to complete the authentication request.

Abstract: A native application on a client computing device enables secure user authentication via an identity provider (IdP) for accessing services of a web service provider. The native application forwards a redirect request generated by a main gateway of the service provider and including an IdP uniform resource locator (URL) to a system browser of the client computing device. The redirect request directs the system browser to a broker gateway of the service provider that registers an authentication response handler and redirects the system browser to the IdP URL to enable a user of the native client computing device to authenticate. After the broker gateway receives an IdP authentication response from the IdP following authentication by the user, the broker gateway provides the IdP authentication response to the native application for providing back to the main gateway. The main gateway finally processes the authentication response to complete the authentication request.

Abstract: An agent computer system uses a session-less login process to log in two users in a same application session. The system establishes an application session with an application server and a user session with the application server by authenticating a first user using an identity provider system (IdP). The system detects a request to perform an action by the first user within the application session that requires a second user's authentication. While maintaining the user session, the system requests a session-less authentication of the second user by transmitting an authentication request, which includes a flag indicating that the requested authentication is a session-less authentication. The system receives a confirmation of the authentication of the second user without establishing a second user session and performs the requested action in response to receiving the confirmation of the authentication of the second user.

Abstract: A native application on a client computing device enables secure user authentication via an identity provider (IdP) for accessing services of a web service provider. The native application forwards a redirect request generated by a main gateway of the service provider and including an IdP uniform resource locator (URL) to a system browser of the client computing device. The redirect request directs the system browser to a broker gateway of the service provider that registers an authentication response handler and redirects the system browser to the IdP URL to enable a user of the native client computing device to authenticate. After the broker gateway receives an IdP authentication response from the IdP following authentication by the user, the broker gateway provides the IdP authentication response to the native application for providing back to the main gateway. The main gateway finally processes the authentication response to complete the authentication request.

Abstract: A system provides a design interface for designing and implementing graphical user interfaces that users can access through web browsers. Depending on the configuration of the graphical user interfaces, the users may be able to monitor and control industrial processes by interacting with components that correspond to the industrial processes as displayed in user interfaces at client devices. The design interface includes functionality for selecting preprogrammed components, or for generating new components for display. The design interface further allows designers to associate data values received from a variety of sources with properties of the components in the user interfaces. In particular, properties associated with a component of an interface are stored in property tree structures, making dynamic changes to the components possible. Data bindings between subtrees representing components and sets of data from industrial and other sources allows for designs that scale with the availability of the data.

Abstract: An agent computer system uses a session-less login process to log in two users in a same application session. The system establishes an application session with an application server and a user session with the application server by authenticating a first user using an identity provider system (IdP). The system detects a request to perform an action by the first user within the application session that requires a second user's authentication. While maintaining the user session, the system requests a session-less authentication of the second user by transmitting an authentication request, which includes a flag indicating that the requested authentication is a session-less authentication. The system receives a confirmation of the authentication of the second user without establishing a second user session and performs the requested action in response to receiving the confirmation of the authentication of the second user.

Abstract: A system for efficiently configuring bindings based on a dependency graph is described. The system may generate or access a graph comprising a set of nodes. Each node may represent a binding and is associated with a component property of a component hierarchy corresponding to a hierarchical structure of a data model. Each node of the graph may be connected to at least one other node with an edge representing a dependency in the hierarchical structure of the data model. The system may receive a request to generate a view associated with the set of bindings. The system may determine an order to load the set of bindings based on the graph, and may load the set of bindings based on the determined order.

Abstract: A native application on a client computing device enables secure user authentication via an identity provider (IdP) for accessing services of a web service provider. The native application forwards a redirect request generated by a main gateway of the service provider and including an IdP uniform resource locator (URL) to a system browser of the client computing device. The redirect request directs the system browser to a broker gateway of the service provider that registers an authentication response handler and redirects the system browser to the IdP URL to enable a user of the native client computing device to authenticate. After the broker gateway receives an IdP authentication response from the IdP following authentication by the user, the broker gateway provides the IdP authentication response to the native application for providing back to the main gateway. The main gateway finally processes the authentication response to complete the authentication request.

Abstract: A system for efficiently configuring bindings based on a dependency graph is described. The system may generate or access a graph comprising a set of nodes. Each node may represent a binding and is associated with a component property of a component hierarchy corresponding to a hierarchical structure of a data model. Each node of the graph may be connected to at least one other node with an edge representing a dependency in the hierarchical structure of the data model. The system may receive a request to generate a view associated with the set of bindings. The system may determine an order to load the set of bindings based on the graph, and may load the set of bindings based on the determined order.

Abstract: A native application on a client computing device enables secure user authentication via an identity provider (IdP) for accessing services of a web service provider. The native application forwards a redirect request generated by a main gateway of the service provider and including an IdP uniform resource locator (URL) to a system browser of the client computing device. The redirect request directs the system browser to a broker gateway of the service provider that registers an authentication response handler and redirects the system browser to the IdP URL to enable a user of the native client computing device to authenticate. After the broker gateway receives an IdP authentication response from the IdP following authentication by the user, the broker gateway provides the IdP authentication response to the native application for providing back to the main gateway. The main gateway finally processes the authentication response to complete the authentication request.

Abstract: A system provides a design interface for designing and implementing graphical user interfaces that users can access through web browsers. Depending on the configuration of the graphical user interfaces, the users may be able to monitor and control industrial processes by interacting with components that correspond to the industrial processes as displayed in user interfaces at client devices. The design interface includes functionality for selecting preprogrammed components, or for generating new components for display. The design interface further allows designers to associate data values received from a variety of sources with properties of the components in the user interfaces. In particular, properties associated with a component of an interface are stored in property tree structures, making dynamic changes to the components possible. Data bindings between subtrees representing components and sets of data from industrial and other sources allows for designs that scale with the availability of the data.

Abstract: A system for efficiently configuring bindings based on a dependency graph is described. The system may generate or access a graph comprising a set of nodes. Each node may represent a binding and is associated with a component property of a component hierarchy corresponding to a hierarchical structure of a data model. Each node of the graph may be connected to at least one other node with an edge representing a dependency in the hierarchical structure of the data model. The system may receive a request to generate a view associated with the set of bindings. The system may determine an order to load the set of bindings based on the graph, and may load the set of bindings based on the determined order.

Abstract: A system provides a design interface for designing and implementing graphical user interfaces that users can access through web browsers. Depending on the configuration of the graphical user interfaces, the users may be able to monitor and control industrial processes by interacting with components that correspond to the industrial processes as displayed in user interfaces at client devices. The design interface includes functionality for selecting preprogrammed components, or for generating new components for display. The design interface further allows designers to associate data values received from a variety of sources with properties of the components in the user interfaces. In particular, properties associated with a component of an interface are stored in property tree structures, making dynamic changes to the components possible. Data bindings between subtrees representing components and sets of data from industrial and other sources allows for designs that scale with the availability of the data.

Abstract: A native application on a client computing device enables secure user authentication via an identity provider (IdP) for accessing services of a web service provider. The native application forwards a redirect request generated by a main gateway of the service provider and including an IdP uniform resource locator (URL) to a system browser of the client computing device. The redirect request directs the system browser to a broker gateway of the service provider that registers an authentication response handler and redirects the system browser to the IdP URL to enable a user of the native client computing device to authenticate. After the broker gateway receives an IdP authentication response from the IdP following authentication by the user, the broker gateway provides the IdP authentication response to the native application for providing back to the main gateway. The main gateway finally processes the authentication response to complete the authentication request.

Abstract: A system provides a design interface for designing and implementing graphical user interfaces that users can access through web browsers. Depending on the configuration of the graphical user interfaces, the users may be able to monitor and control industrial processes by interacting with components that correspond to the industrial processes as displayed in user interfaces at client devices. The design interface includes functionality for selecting preprogrammed components, or for generating new components for display. The design interface further allows designers to associate data values received from a variety of sources with properties of the components in the user interfaces. In particular, properties associated with a component of an interface are stored in property tree structures, making dynamic changes to the components possible. Data bindings between subtrees representing components and sets of data from industrial and other sources allows for designs that scale with the availability of the data.

Abstract: An interface system generates interfaces for visualizing human-machine interactions including piping systems. The interface system receives, as input, parameters describing a first pipe data object and a second pipe data object. The pipe data objects can be diagrams representing physical piping in an industrial system. Using the parameters of the first and second pipe data objects, the system determines whether images of the pipes in the interface will overlap. When the system renders vector graphic images of the first pipe data object and the second pipe data object, the second pipe data object is rendered with markings that provide a visual indication that the two pipes overlap and are not connected. The interface system further enables a user to edit the piping diagram to combine the first and second pipe data objects into a single combined pipe data object and updates the rendered images for display.