Method of handling user groups in desktop and web based applications in a heterogeneous authentication environment

摘要

An embodiment of the present invention is a method that effectuates the handling of user group membership information in a heterogeneous information technology environment having multiple authentication sources. The method including creating a plurality of first user groups in a security model used by an application, adding an attribute to each of said plurality of first user groups and setting the value of each of the attributes to a name corresponding to each of a plurality of second user groups in a plurality of heterogeneous authentication sources, granting a plurality of privileges to said plurality of first user groups as required by said application, causing said user to inherit a plurality of privileges for each of said plurality of second user groups identified in a plurality of user group names list based on said security module authentication and allowing a user to log into said application using said security module.