Abstract: Online and on-premise applications identify trusted authentication providers. The applications are configured with a list of trusted issuers of authentication credentials. When an application receives a request requiring authentication, the application returns a 401 response that includes the trusted issuer list. The requesting application compares the trusted issuer list from the 401 response to its own list of authentication providers. If there is a match between the two lists, then the requesting application creates a self-issued token for the authentication provider. The authentication provider uses the self-issued token to generate an authentication token for the requesting application. The requesting application may also directly create a token for a target partner application, without an authentication provider, if there is a direct trust between the two applications.

Abstract: Techniques for throttling of rogue entities to push notification servers are described. An apparatus may comprise a processor and a memory communicatively coupled to the processor. The memory may store an application, the application maintaining a monitored domain table, the application maintaining an offending domain table, the application operative to receive an incoming request from a client in a domain, to detect harmful activity based on the request, and to respond to the harmful activity based on one or both of the monitored domain table and the offending domain table. Other embodiments are described and claimed.

Abstract: A communications manager of an enterprise receives an add-conference request to host a conference by the enterprise from an organizer client, wherein the conference to enable an anonymous user that does not have enterprise credentials to join the conference. The communications manager sends an add-conference response to the organizer client indicating that the conference is organized.

Abstract: Architecture for a communications system enabling a user to provision a telephone at a new location without network administrative pre-configuring. An input component (e.g., keypad) receives a numeric extension and PIN. The extension is a telephone extension of the user and the PIN can be administratively assigned. A location component provides location information of an enterprise communications server to the telephone based on the extension. The telephone uses the location information to send messages to the enterprise communications server. A registration component registers the telephone with the enterprise communications server based on the numeric extension. A telephony address is returned to the telephone. An authentication component authenticates the telephone based on the PIN. Upon authentication, the extension is assigned to the telephone, and telephone communications can be sent and received from that location.

Abstract: Service invocation information including call routing, reasons for redirections, and similar information are provided to party requesting a communication session and recipients of an enhanced communication system along the call routing path as the request is routed. Some of the information is filtered based on system and/or user defined rules, user permission levels, and comparable aspects.

Abstract: A centralized service communicatively links an application provider to a plurality of different message forwarding services. The centralized service receives a request and authenticates the application provider associated with the request. Further, the centralized service delivers a message embodied by the request to a first message forwarding service with a first protocol and/or to a second message forwarding service with a second protocol different than the first protocol.

Abstract: A communications manager of an enterprise receives an add-conference request to host a conference by the enterprise from an organizer client, wherein the conference to enable an anonymous user that does not have enterprise credentials to join the conference. The communications manager sends an add-conference response to the organizer client indicating that the conference is organized.

Abstract: A communication system has a plurality of collections. Each collection comprises a security boundary within which private data is accessible. Each collection is associated with a director. The directors receive messages that specify domains. When a director for a given collection receives a message, the director identifies one of the collections as being a home collection for the domain specified by the message. If the specified domain's home collection is the given collection or another collection within a given privacy boundary, the director forwards the message to a server pool associated with the specified domain's home collection. Otherwise, if the specified domain's home collection is not within the given privacy boundary, the director forwards the message to the director of the specified domain's home collection.

Abstract: Enhanced communication systems with various resiliency and survivability aspects are provided. Data center, cluster, network, and load balancer survivability are provided for seamless communication experience in case of data center, cluster, discovery infrastructure, or hardware load balancer failures. Call, data, and authentication survivability are provided through dynamic re-routing over alternative networks, continuous data replication, and alternative authentication mechanisms. Seamless failover is ensured through use of identical signaling protocols and data carried by protocols between primary and backup clusters. Voicemail resiliency is achieved by re-routing calls directed to voicemail over alternative paths such as PSTN connections.

Abstract: A platform for manipulating data associated with defining, deploying, and administering distributed server systems utilizes a structured data model with a flexible replication mechanism, a set of schemas, and an object model to manipulate system topology, configuration (settings), and policies. A scoping mechanism for characteristics of the settings, policies, and resolution is provided in addition to the data model along with an authorization mechanism for single and multi-tenant environments.

Abstract: Resilient load balancing servers in an enhanced communication system is provided mitigating server failures or scheduled shutdowns. A repeatable but virtually random sequence of servers is generated for a given pool of homogeneous servers based on a user identifier in a request message. If a request cannot be routed to a first choice server, for any reason, then subsequent servers in the sequence are selected. A communication protocol within the system is adapted to permit an individual server to indicate that it cannot accept new requests. Following the indication from the server, traffic associated with existing dialogs is allowed to continue to be processed by the server, but new dialogs are directed to other servers.

Abstract: Enhanced communication systems with various resiliency and survivability aspects are provided. Data center, cluster, network, and load balancer survivability are provided for seamless communication experience in case of data center, cluster, discovery infrastructure, or hardware load balancer failures. Call, data, and authentication survivability are provided through dynamic re-routing over alternative networks, continuous data replication, and alternative authentication mechanisms. Seamless failover is ensured through use of identical signaling protocols and data carried by protocols between primary and backup clusters. Voicemail resiliency is achieved by re-routing calls directed to voicemail over alternative paths such as PSTN connections.

Abstract: Approaches for efficiently routing messages using a server pool are provided. In an embodiment, the system attempts to ensure high availability of servers by enabling clients to specify a domain name for the server pool even though the server pool comprises multiple servers, each having a distinct name. When a client initiates a session by using the server pool's domain name, the system may select an available server with a different name, and will route the request and subsequent messages during the session to the selected server. The system may select a server from the pool having the lowest load. The system may also indicate servers that subsequent messages in the session are to transit. Subsequent messages may then be routed to indicated servers to enable application services on the indicated servers to take actions based on the messages and the direction of the messages.

Abstract: Independent telephony systems are integrated by using symmetric forking from both systems. Calls received by either system are forked to the other system. Thus, a call can be accepted by one of the systems, using its external interfaces, and presented to all devices in both systems. Each system is enabled to leverage internal call control advanced features to enhance overall user experience. Internally inserted parameters to call requests are used between the two systems for preventing endless loop of calls between the integrated systems.

Abstract: A resource is located on a server using a distributed resource algorithm that is executing on each server within a cluster of servers. A request for a resource is received at a server in the cluster. The server executes the distributed resource algorithm to determine the server that owns the requested resource. The distributed resource algorithm automatically adapts itself to servers being added or removed within the cluster and is directed at evenly distributing resources across the available servers within the cluster.

Abstract: Service invocation information including call routing, reasons for redirections, and similar information are provided to party requesting a communication session and recipients of an enhanced communication system along the call routing path as the request is routed. Some of the information is filtered based on system and/or user defined rules, user permission levels, and comparable aspects.

Abstract: Directory services schema for telephone call management. The schema facilitates the development of call routing rules as one or more instances of one or more classes. Once created, the rules can be propagated to all other director services servers, and any subsequent updates and system changes are readily propagated to maintain optimum call system management. The rules can be stored in a routing table allowing administrators to define phone routes for various scenarios. System hardware/software changes can be managed using distinguished names and automatically propagated (or replicated) to the other directory services servers on an enterprise network. The architecture includes a schema component for generating a directory services schema, and a call routing component that routes telephone calls according to call routing rules defined by the directory services schema. The rules can be processed in combination with policies of usage attributes and phone number patterns/ranges to manage call routing.

Abstract: Architecture for a communications system enabling a user to provision a telephone at a new location without network administrative pre-configuring. An input component (e.g., keypad) receives a numeric extension and PIN. The extension is a telephone extension of the user and the PIN can be administratively assigned. A location component provides location information of an enterprise communications server to the telephone based on the extension. The telephone uses the location information to send messages to the enterprise communications server. A registration component registers the telephone with the enterprise communications server based on the numeric extension. A telephony address is returned to the telephone. An authentication component authenticates the telephone based on the PIN. Upon authentication, the extension is assigned to the telephone, and telephone communications can be sent and received from that location.

Abstract: A method and system for directing data transfers between applications and devices residing on different computers or devices using an adaptive flow control protocol has been described. When an application or device requests to transfer data with another application or device, adaptive flow control protocol adapts the way data is transferred by observing when an application that is receiving data posts a receive buffer and detects the receive buffer's size. Based upon the application's or device's behavior, the adaptive flow control protocol transfers the data in a mode that is best suited for the application.

Abstract: Techniques are disclosed providing secure reservationless conferencing, allowing an organizer to arrange a meeting while off-line from a conferencing server, with the conferencing server still enforcing security for the meeting.