Abstract: A system for providing single sign-on (SSO) user names for Web cookies in a multiple user information directory environment. SSO access to multiple applications is supported in situations where multiple user information directories are deployed, and users may be known by multiple identifiers. Convenient specification is enabled for which of a user's multiple names is to be used in an SSO Web cookie that is passed from application to application to enable SSO operation. The user's SSO Web cookie user name is fully separated conceptually from the user's effective name for any given application within the SSO environment. The SSO Web cookie user name provided by the disclosed system is specified independently from the effective name by which the user is known when operating in the Web application that writes the SSO Web cookie back to the user's computer system. Use of an administratively supplied user name in the SSO Web cookie is facilitated.

Abstract: Disclosed is an independent user verification system and method for providing a user verification service which can be arbitrarily called by one or more applications. A verification command is received from an application. The command contains at least some information for verification by a user. The verification system presents a screen to receive a username and password from the user. The screen contains the information for verification. The verification system verifies the username and password for the application. The verification system is independent from the application, and can service several related or unrelated applications. The information for verification may comprise policy information to be agreed to by a user. The policy information may, for example, relate to information a user must agree to in order to sign-up for a new service offered by the application.