Abstract: Systems, methods, and software can be used to perform a two-factor authentication. In some aspects, a method includes: receiving, by an electronic device from a device authentication server, a two-factor authentication (2FA) token; transmitting, by the electronic device to an identity provider (IDP), an authentication request for a 2FA operation, wherein the authentication request comprises the 2FA token; receiving, by the electronic device from the IDP, an authentication response; and determining, by the electronic device, whether the 2FA operation succeeds based on the authentication response.

Abstract: Systems, methods, and software can be used to perform a two-factor authentication. In some aspects, a method includes: receiving, by an electronic device from a device authentication server, a two-factor authentication (2FA) token; transmitting, by the electronic device to an identity provider (IDP), an authentication request for a 2FA operation, wherein the authentication request comprises the 2FA token; receiving, by the electronic device from the IDP, an authentication response; and determining, by the electronic device, whether the 2FA operation succeeds based on the authentication response.

Abstract: Systems, methods, and software can be used to provide authentication for a software service. In some aspects, an identity provider (IDP) receives an identity authentication request from a client device. The IDP transmits an on-premises verification initiation request for a digest authentication to on-premises directory provider (OPDP). The IDP receives an on-premises verification initiation request. The an on-premises verification initiation request includes one or more digest authentication attributes. The IDP transmits the one or more digest authentication attributes. The IDP receives a digest, wherein the digest is calculated based on the one or more digest authentication attributes and one or more identity authentication credentials. The IDP transmits the digest, and receives an on-premises verification response that indicates a result of the digest authentication.

Abstract: Systems, methods, and software can be used to provide authentication for an enterprise service. In some aspects, an identity server receives an authentication request. An on-premises verification command is transmitted. The on-premises verification command indicates an on-premises agent that verifies on-premises network connectivity. In response to the on-premises verification command, an on-premises verification response message is received. An authentication response is transmitted based on the received on-premises verification response message.

Abstract: Systems, methods, and software can be used to access an enterprise resource. In some aspects, a certificate for accessing enterprise resources at one or more service providers (SP) is received at an enterprise mobility management (EMM) client on a mobile device from an EMM server. An authentication request is sent to an identity provider from an application on a mobile device. In response to the authentication request, an authentication challenge is received from the identity provider. The authentication challenge includes a certificate request. In response to the authentication challenge, an authentication response is sent from the application. The authentication response includes the certificate. An authorization token is received from the identity provider. The authorization token indicates whether the identity provider validates the certificate and the mobile device.

Abstract: Systems, methods, and software can be used to share content. In some aspect, an enterprise mobility management (EMM) server receives a command for provisioning a user for an enterprise service at an identity provider (IDP). The EMM server sends a user provisioning request to the IDP. The user provisioning request includes a user identity attribute and a user entitlement attribute, the user identity attribute identifies the user, and the user entitlement attribute indicates an access level associated with the user for the enterprise service. The EMM server receives a user provisioning response from the IDP. The user provisioning response indicates that the user is provisioned at the IDP for the enterprise service.

Abstract: Systems, methods, and software can be used to provide authentication for a software service. In some aspects, an identity provider (IDP) receives an identity authentication request from a client device. The IDP transmits an on-premises verification initiation request for a digest authentication to on-premises directory provider (OPDP). The IDP receives an on-premises verification initiation request. The an on-premises verification initiation request includes one or more digest authentication attributes. The IDP transmits the one or more digest authentication attributes. The IDP receives a digest, wherein the digest is calculated based on the one or more digest authentication attributes and one or more identity authentication credentials. The IDP transmits the digest, and receives an on-premises verification response that indicates a result of the digest authentication.

Abstract: Systems, methods, and software can be used to provide authentication for an enterprise service. In some aspects, an identity server receives an authentication request. An on-premises verification command is transmitted. The on-premises verification command indicates an on-premises agent that verifies on-premises network connectivity. In response to the on-premises verification command, an on-premises verification response message is received. An authentication response is transmitted based on the received on-premises verification response message.

Abstract: Systems, methods, and software can be used to share content. In some aspect, an enterprise mobility management (EMM) server receives a command for provisioning a user for an enterprise service at an identity provider (IDP). The EMM server sends a user provisioning request to the IDP. The user provisioning request includes a user identity attribute and a user entitlement attribute, the user identity attribute identifies the user, and the user entitlement attribute indicates an access level associated with the user for the enterprise service. The EMM server receives a user provisioning response from the IDP. The user provisioning response indicates that the user is provisioned at the IDP for the enterprise service.

Abstract: Systems, methods, and software can be used to access an enterprise resource. In some aspects, a certificate for accessing enterprise resources at one or more service providers (SP) is received at an enterprise mobility management (EMM) client on a mobile device from an EMM server. An authentication request is sent to an identity provider from an application on a mobile device. In response to the authentication request, an authentication challenge is received from the identity provider. The authentication challenge includes a certificate request. In response to the authentication challenge, an authentication response is sent from the application. The authentication response includes the certificate. An authorization token is received from the identity provider. The authorization token indicates whether the identity provider validates the certificate and the mobile device.

Abstract: A method and system for searching and collecting electronically stored information are described. Consistent with an embodiment of the invention, configuration and execution of a search are separated in time and location. For example, a search configuration application executing at a first computer system is utilized to generate a search configuration file, which controls the operation of a search agent when the search agent is executing at a target computer system and performing a search of storage devices act of the target computer system. Encryption is utilized to prevent unauthorized access to the search configuration file as well as the search results file generated by the search agent.

Abstract: A method and system for searching and collecting electronically stored information are described. Consistent with an embodiment of the invention, configuration and execution of a search are separated in time and location. For example, a search configuration application executing at a first computer system is utilized to generate a search configuration file, which controls the operation of a search agent when the search agent is executing at a target computer system and performing a search of storage devices act of the target computer system. Encryption is utilized to prevent unauthorized access to the search configuration file as well as the search results file generated by the search agent.

Abstract: A method and apparatus for providing a required deaerating temperature differential between incoming water and sparge steam in a steam generation system having a vacuum deaerator. The present invention selectively combines raising the energy of the sparge steam with flash cooling of the incoming water to provide the required deaerating temperature differential. The energizing of the sparge steam is accomplished by a thermocompression device. The thermocompression device may also be used to reduce the pressure in a portion of the vacuum deaerator to cause the flash cooling of the incoming water.

Abstract: A method and apparatus for providing a required deaerating temperature differential between incoming water and sparge steam in a steam generation system having a vacuum deaerator. The present invention selectively combines raising the energy of the sparge steam with flash cooling of the incoming water to provide the required deaerating temperature differential. The energizing of the sparge steam is accomplished by a thermocompression device. The thermocompression device may also be used to reduce the pressure in a portion of the vacuum deaerator to cause the flash cooling of the incoming water.

Abstract: A method and apparatus for providing a required deaerating temperature differential between incoming water and sparge steam in a steam generation system having a vacuum deaerator. The present invention selectively combines raising the energy of the sparge steam with flash cooling of the incoming water to provide the required deaerating temperature differential. The energizing of the sparge steam is accomplished by a thermocompression device. The thermocompression device may also be used to reduce the pressure in a portion of the vacuum deaerator to cause the flash cooling of the incoming water.