Abstract: Disclosed are hybrid authentication systems and methods that enable users to seamlessly sign-on between cloud-based services and on-premises systems. A cloud-based authentication service receives login credentials from a user and delegates authentication to an on-premises authentication service proxy. The login credentials can be passed by the cloud-based authentication service to the on-premises authentication service proxy, for instance, as an access token in an authentication header. The access token can be a JavaScript Object Notation (JSON) Web Token (JWT) token that is digitally signed using JSON Web Signature. Some embodiments utilize a tunnel connection through which the cloud-based authentication service communicates with the on-premises authentication service proxy. Some embodiments leverage an on-premises identity management system for user management and authentication.

Abstract: Disclosed are hybrid authentication systems and methods that enable users to seamlessly sign-on between cloud-based services and on-premises systems. A cloud-based authentication service receives login credentials from a user and delegates authentication to an on-premises authentication service proxy. The login credentials can be passed by the cloud-based authentication service to the on-premises authentication service proxy, for instance, as an access token in an authentication header. The access token can be a JavaScript Object Notation (JSON) Web Token (JWT) token that is digitally signed using JSON Web Signature. Some embodiments utilize a tunnel connection through which the cloud-based authentication service communicates with the on-premises authentication service proxy. Some embodiments leverage an on-premises identity management system for user management and authentication.

Abstract: Disclosed are hybrid authentication systems and methods that enable users to seamlessly sign-on between cloud-based services and on-premises systems. A cloud-based authentication service receives login credentials from a user and delegates authentication to an on-premises authentication service proxy. The login credentials can be passed by the cloud-based authentication service to the on-premises authentication service proxy, for instance, as an access token in an authentication header. The access token can be a JavaScript Object Notation (JSON) Web Token (JWT) token that is digitally signed using JSON Web Signature. Some embodiments utilize a tunnel connection through which the cloud-based authentication service communicates with the on-premises authentication service proxy. Some embodiments leverage an on-premises identity management system for user management and authentication.

Abstract: Disclosed are hybrid authentication systems and methods that enable users to seamlessly sign-on between cloud-based services and on-premises systems. A cloud-based authentication service receives login credentials from a user and delegates authentication to an on-premises authentication service proxy. The login credentials can be passed by the cloud-based authentication service to the on-premises authentication service proxy, for instance, as an access token in an authentication header. The access token can be a JavaScript Object Notation (JSON) Web Token (JWT) token that is digitally signed using JSON Web Signature. Some embodiments utilize a tunnel connection through which the cloud-based authentication service communicates with the on-premises authentication service proxy. Some embodiments leverage an on-premises identity management system for user management and authentication.

Abstract: Disclosed are hybrid authentication systems and methods that enable users to seamlessly sign-on between cloud-based services and on-premises systems. A cloud-based authentication service receives login credentials from a user and delegates authentication to an on-premises authentication service proxy. The login credentials can be passed by the cloud-based authentication service to the on-premises authentication service proxy, for instance, as an access token in an authentication header. The access token can be a JavaScript Object Notation (JSON) Web Token (JWT) token that is digitally signed using JSON Web Signature. Some embodiments utilize a tunnel connection through which the cloud-based authentication service communicates with the on-premises authentication service proxy. Some embodiments leverage an on-premises identity management system for user management and authentication.

Abstract: Techniques to dynamically discover and manage page fragments, e.g., to provide a dynamic application user interface, are disclosed. In various embodiments, an indication to add a fragment dynamically to a current application page is received. The fragment to be added is determined, in response to the indication, and added dynamically to the current application page.

Abstract: An apparatus, method, and system using techniques to partially refresh a display page. A navigation URL generated by an application in response to a user interaction is received, the navigation URL indicating a place within a page hierarchy at which a partial refresh of a page with which the navigation URL is associated is to be performed and the navigation URL including one or more URL portions usable to retrieve page content data to be used to partially refresh the page. The navigation URL is processed to determine the place within the page hierarchy at which the partial refresh is to be performed. The navigation URL is used to retrieve the page content data.

Abstract: Developer-composed custom application session parameters are disclosed. In various embodiments, a definition of a custom application session parameter is received via a software development tool user interface. Application code to store and manage the custom application session parameter, including by making the custom application parameter available across a plurality of application user interface pages, is generated programmatically based at least in part on the definition.

Abstract: Disclosed are hybrid authentication systems and methods that enable users to seamlessly sign-on between cloud-based services and on-premises systems. A cloud-based authentication service receives login credentials from a user and delegates authentication to an on-premises authentication service proxy. The login credentials can be passed by the cloud-based authentication service to the on-premises authentication service proxy, for instance, as an access token in an authentication header. The access token can be a JavaScript Object Notation (JSON) Web Token (JWT) token that is digitally signed using JSON Web Signature. Some embodiments utilize a tunnel connection through which the cloud-based authentication service communicates with the on-premises authentication service proxy. Some embodiments leverage an on-premises identity management system for user management and authentication.

Abstract: An apparatus, method, and system using techniques to partially refresh a display page. A navigation URL generated by an application in response to a user interaction is received, the navigation URL indicating a place within a page hierarchy at which a partial refresh of a page with which the navigation URL is associated is to be performed and the navigation URL including one or more URL portions usable to retrieve page content data to be used to partially refresh the page. The navigation URL is processed to determine the place within the page hierarchy at which the partial refresh is to be performed. The navigation URL is used to retrieve the page content data.

Abstract: Techniques to dynamically discover and manage page fragments, e.g., to provide a dynamic application user interface, are disclosed. In various embodiments, an indication to add a fragment dynamically to a current application page is received. The fragment to be added is determined, in response to the indication, and added dynamically to the current application page.

Abstract: An apparatus, method, and system using techniques to partially refresh a display page. A navigation URL generated by an application in response to a user interaction is received, the navigation URL indicating a place within a page hierarchy at which a partial refresh of a page with which the navigation URL is associated is to be performed and the navigation URL including one or more URL portions usable to retrieve page content data to be used to partially refresh the page. The navigation URL is processed to determine the place within the page hierarchy at which the partial refresh is to be performed. The navigation URL is used to retrieve the page content data.

Abstract: Techniques to dynamically discover and manage page fragments, e.g., to provide a dynamic application user interface, are disclosed. In various embodiments, an indication to add a fragment dynamically to a current application page is received. The fragment to be added is determined, in response to the indication, and added dynamically to the current application page.

Abstract: Developer-composed custom application session parameters are disclosed. In various embodiments, a definition of a custom application session parameter is received via a software development tool user interface. Application code to store and manage the custom application session parameter, including by making the custom application parameter available across a plurality of application user interface pages, is generated programmatically based at least in part on the definition.

Abstract: Developer-composed custom application session parameters are disclosed. In various embodiments, a definition of a custom application session parameter is received via a software development tool user interface. Application code to store and manage the custom application session parameter, including by making the custom application parameter available across a plurality of application user interface pages, is generated programmatically based at least in part on the definition.

Abstract: Techniques to process a form are disclosed. An attribute associated with a child data model is recognized in a first set of form data associated with a form an attribute associated with a child data model. A data value associated with the attribute is used to obtain a second set of form data associated with the child data model. The second set of form data is associated with the form.

Abstract: Interface control(s) associated with declaratively defining an action flow are provided; the action flow includes a desired outcome of an action flow. Information associated with a user interface page is received; this information includes a state during which the user interface page is displayed. Information associated with a business service associated with a content management server is received; that information includes a state during which the business service is performed on the content management server. In the action flow definition, a first association between the user interface page and the state during which the user interface page is displayed and a second association between the business service and the state during which the business service is invoked on the content management server are recorded.