Abstract: Systems and methods for implementing an identity assertion framework to authenticate a user in a federation of security domains are provided. A first security token service (STS) is configured to receive a request for a first token from a consumer and to issue the first token to the consumer. The first STS is associated with a first security domain, and the first token is issued according to a first issuing policy of the first security domain. A service provider within a second security domain receives the first token and makes a determination whether the first token is invalid in the second security domain. A second STS receives the first token from the service provider, determines that the first token was issued by the first STS, and validates the first token according to a federation policy between the first security domain and the second security domain.

Abstract: A marketplace machine may provide a marketplace for the software service developed by a developer. The marketplace machine may register a software service, configure a server to provide the software service, and advertise the software service to potential consumers (e.g., other developers). The marketplace machine may receive a request (e.g., a call) to invoke the software service, route the request to a server configured to provide the software service, and record (e.g., meter) the usage of the software service. When the software service is invoked by a consumer, the marketplace machine may charge the consumer a fee for usage of the software service. Furthermore, the marketplace machine may generate and provide a report that indicates usage of the software service.

Abstract: Methods and systems to automatically respond to make a Super Identity by linking two identities and methods and systems to use the identities include a transaction authorization module that receives a request associated with a first identity record associated with a user, the request being for information associated with a second identity record. An identity linking module identifies that the second identity record is linked to the first identity record and retrieves the information associated with the second identity record. The transaction authorization module also generates a response including the information associated with the second identity, and transmits the response.

Abstract: Various embodiments described herein include one or more of systems, software, and methods to automatically facilitate a billing transaction between a third-party developer and a user subscribing to a third-party application. Some such embodiments create a sub-account under a serving platform account registered to the user. Some embodiments include storing a billing plan associated with the third-party application, the billing plan defining a fee to subscribe to the third-party application.

Abstract: A method and system for user-generated content policy optimization are described. In example embodiments, a harvester module receives listing data from a database. The listing data represents user-generated content maintained by a content serving platform, such as a network-based marketplace. An impact module calculates a compliance impact based on a profile report. The profile report includes use of elements in the listing data. A policy module analyzes the policy affecting the user-generated content.

Abstract: A method and a system to manage recommendations in an online marketplace are presented. A social shopping interface is provided at a publisher site accessed by a first user identified by a first user identifier. A recommendation of a listing describing an item for sale and including a second user identifier corresponding to a second user is accessed from a recommendation database. The recommendation, including at least a portion of the listing and the second user identifier are displayed to the first user at the publisher site via the social shopping interface.

Abstract: A method and system for embedding applications in a web platform are described. In order to subscribe to an embedded application, the web platform receives a subscription request from a user to subscribe to the application along with configuration data. The configuration data includes both default fields from the platform itself and application-specific data requested by the application developer. This data is provided to the developer who may authorize the subscription request, reject the subscription request, or inform the web platform that the subscription is pending and awaiting review for a decision at a later time.

Abstract: A computed-implemented method and system for recommending business applications on a network-based marketplace are described. A user's listings, representing items for sale on the marketplace, are harvested to calculate segmentation data and metrics that form a user profile. The user profile is compared with other similar users who have subscribed to various applications, and the impact those applications have had on the metrics of the similar users is calculated in order to determine what impact the applications will have on the user in question. The impact, combined with user preferences, is used to suggest appropriate applications, which are displayed to the user within the marketplace. If the user selects one of the applications, the application is added to the user's profile and relevant listings are updated with the new application.

Abstract: In various exemplary embodiments, a system and associated method to perform an adaptive risk-based assessment of a user is disclosed. The method includes assigning a risk assessment process to the user and providing a plurality of assessment factors to the risk assessment process. The plurality of assessment factors are based on both the user (e.g., previously assessed factors, residence, phone number, address, etc.) and one or more actions the user may perform (e.g., selling an item in an electronic marketplace and the value of the item). A post-action analysis of the risk assessment process is performed. The risk assessment process can be modified based on a determination of the post-action analysis.

Abstract: A method and system to manage content is provided to generate an abstraction layer between a user application and content, based on a formal definition of content (referred to as a content contract). An example content system comprises a content bundle module, a user application, and a content access interface module. The content bundle module may be configured to store content items. A content item may include text items and placeholders. The user application, which does not have to be coded with specific knowledge regarding the content bundle, may be configured to receive a request to provide to a to a client system a presentation package (e.g., a web page) that has the content item, and to obtain the content item and any associated metadata from the content access interface module. Content item metadata may include, for example, information regarding a value to populate a placeholder in the content item.