Abstract: An extensible mechanism for providing access control for logical objects in a network environment. A security broker is able to dynamically register one or more claims providers, each of which can assert one or more claims about logical objects. The claims providers may be purpose built or may be third party applications which expose data or business rules for use. Claims may be augmented by additional claims providers after the original claim is asserted. The applicability of claims may be scope limited either at the time the claims provider is registered or when the user requests that a security token be issued.

Abstract: Displaying organizational information of an entity includes storing data representing nodes associated with members of the entity in a database accessible by members of the entity. Data representing connections between the nodes that represent hierarchical relationships between the members is stored. An organizational chart comprising the nodes and connections is displayed on a presentation surface associated with a particular member of the entity. Input to create new nodes and connections is received from the particular member of the entity. When the new nodes are associated with a group that is associated with the particular member, the displayed nodes and connections are updated in response to the received input.

Abstract: A request, from a requester, is received to view user information on a user's personal site associated with a user. A relationship is determined between the requester and the user. User information is provided to the requester based on the requester's relationship to the user.

Abstract: Displaying organizational information of an entity includes storing data representing nodes associated with members of the entity in a database accessible by members of the entity. Data representing connections between the nodes that represent hierarchical relationships between the members is stored. An organizational chart comprising the nodes and connections is displayed on a presentation surface associated with a particular member of the entity. Input to create new nodes and connections is received from the particular member of the entity. When the new nodes are associated with a group that is associated with the particular member, the displayed nodes and connections are updated in response to the received input.

Abstract: Implementations generally relate to providing information associated with a profile owner to a target user in a social network system. In one implementation, a method includes receiving profile data associated with a profile owner. The method also includes receiving contact data associated with the profile owner, where the profile data and the contact data are provided by different users. The method also includes generating one or more views, where the one or more views include an interleaved view, and where the profile data and the contact data are displayed in an interleaved manner in a same section of the interleaved view.

Abstract: A method for determining membership/follower status in a social network is provided. Outgoing edge data and anti-outgoing edge data of a first user are read. A second user is determined to be a member of the first user's social graph when the second user is designated in the outgoing edge data and not designated in the anti-outgoing edge data of the first user. In another implementation, a method for removing a second user from a social graph of a first user is provided. A designation of the second user is removed from outgoing edge data of the first user, and a designation of the first user is removed from incoming edge data of the second user. A designation of the first user is added to anti-outgoing edge data of the second user, and a designation of the second user is added to anti-incoming edge data of the first user.

Abstract: An extensible mechanism for providing access control for logical objects in a network environment. A security broker is able to dynamically register one or more claims providers, each of which can assert one or more claims about logical objects. The claims providers may be purpose built or may be third party applications which expose data or business rules for use. Claims may be augmented by additional claims providers after the original claim is asserted. The applicability of claims may be scope limited either at the time the claims provider is registered or when the user requests that a security token be issued.

Abstract: An extensible mechanism for providing access control for logical objects in a network environment. A security broker is able to dynamically register one or more claims providers, each of which can assert one or more claims about logical objects. The claims providers may be purpose built or may be third party applications which expose data or business rules for use. Claims may be augmented by additional claims providers after the original claim is asserted. The applicability of claims may be scope limited either at the time the claims provider is registered or when the user requests that a security token be issued.

Abstract: User profile replication may be provided. First, at least one modification to at least one user profile property may be received at a first service provider. A user profile change log may be updated in response to receiving the at least one modification to the at least one user profile property. Then the at least one modification to the at least one user profile property may be identified at the first service provider. Identifying the at least one modification to the at least one user profile property at the first service provider may comprise retrieving the at least one modification to the at least one user profile property from the user profile change log. Next, the identified at least one modification to the at least one user profile property may be replicated at a second service provider. The first service provider and the second service provider may be geographically separate.

Abstract: A request, from a requester, is received to view user information on a user's personal site associated with a user. A relationship is determined between the requester and the user. User information is provided to the requester based on the requester's relationship to the user.

Abstract: A server system receives and installs multiple claim provider plug-ins. Each of the claim provider plug-ins implements the same software interface. However, each of the claim provider plug-ins can provide claims that assert different things. Claims provided by the claim provider plug-ins can be used to control access of users to a resource.

Abstract: A request, from a requester, is received to view user information on a user's personal site associated with a user. A relationship is determined between the requester and the user. User information is provided to the requester based on the requester's relationship to the user.

Abstract: A server system receives and installs multiple claim provider plug-ins. Each of the claim provider plug-ins implements the same software interface. However, each of the claim provider plug-ins can provide claims that assert different things. Claims provided by the claim provider plug-ins can be used to control access of users to a resource.

Abstract: Search results are displayed according to relevance and grouped by the social distance between the person associated with the profile and the user performing the search. Metadata is defined of each of the profiles indicating groups affiliated the profile and a relevance value is determined as a function of the metadata for each of the profiles in the result set. The social distance is determined as a function of a colleague designation associated with the profile.

Abstract: Providing enterprise and targeted content to a personalized portal at a client device in a distributed environment. An administrator managing the distributed environment defines a plurality of workspace pages to be displayed to a user via the portal. The portal also includes a personalized page. The administrator determines workspace content to be provided to the user on the workspace pages via the portal, and the workspace content includes a set of predetermined content parameters. Targeted content is selected from the workspace content as a function of user profile data and the set of predetermined content parameters. The arranged targeted content and personalized content are rendered on the pages via the portal.

Abstract: An extensible mechanism for providing access control for logical objects in a network environment. A security broker is able to dynamically register one or more claims providers, each of which can assert one or more claims about logical objects. The claims providers may be purpose built or may be third party applications which expose data or business rules for use. Claims may be augmented by additional claims providers after the original claim is asserted. The applicability of claims may be scope limited either at the time the claims provider is registered or when the user requests that a security token be issued.

Abstract: User profile replication may be provided. First, at least one modification to at least one user profile property may be received at a first service provider. A user profile change log may be updated in response to receiving the at least one modification to the at least one user profile property. Then the at least one modification to the at least one user profile property may be identified at the first service provider. Identifying the at least one modification to the at least one user profile property at the first service provider may comprise retrieving the at least one modification to the at least one user profile property from the user profile change log. Next, the identified at least one modification to the at least one user profile property may be replicated at a second service provider. The first service provider and the second service provider may be geographically separate.

Abstract: Displaying organizational information of an entity includes storing data representing nodes associated with members of the entity in a database accessible by members of the entity. Data representing connections between the nodes that represent hierarchical relationships between the members is stored. An organizational chart comprising the nodes and connections is displayed on a presentation surface associated with a particular member of the entity. Input to create new nodes and connections is received from the particular member of the entity. When the new nodes are associated with a group that is associated with the particular member, the displayed nodes and connections are updated in response to the received input.

Abstract: A system and method is provided for personal sites. The personal sites are associated with a single Uniform Resource Locator (URL). A personal site may contain information that is useful to both the web page owner and other groups of users. According to one aspect of the present invention, the personal site may have two or more views instead of one: one homepage for the web page owner and other homepages directed at other specific users. The present invention allows a web page owner to control access to multiple web pages from a single URL, thereby allowing different groups to have different views of the owner's content. In one embodiment, a web server redirects users to different web pages by analyzing identifiers associated with each web page query.

Abstract: A request, from a requester, is received to view user information on a user's personal site associated with a user. A relationship is determined between the requester and the user. User information is provided to the requester based on the requester's relationship to the user.