FIELD OF DISCLOSURE

The present disclosure is generally related to systems and methods, including but not limited to systems and methods for credential control among a plurality of client devices.

BACKGROUND

In a work environment or network, employees can be provided or required to have passwords to interact with different content provided through the work network. For security reasons, the employees can be required to change these passwords at different times and on different devices. If an employee changes a password on a first device, they may forget to change the same password on a second device. Therefore, if the employee attempts to login to the second device or access content via the second device the employee can be locked out or prevented from accessing the work network.

SUMMARY

Devices, systems and methods for credential control among a plurality of client devices and applications are provided herein. A credential manager executing on a sever can receive a modification or change to a credential associated with an identifier of a user at a first application accessed by the user using the credential and/or a first client device used by the user to access the first application. The credential manager can update, propagate or communicate the modification to the credential at a plurality of applications (e.g., different from the first application) previously accessed by the user using the previous credential and/or a plurality of client devices (e.g., different from the first client device) used by the user to access the plurality of applications. For example, the credential manager can maintain a login history for a plurality of users that can be organized based in part on an identifier associated with each user and a credential associated with the identifier and used to authenticate to one or more applications via one or more client devices. The login history can identify one or more applications and one or more client devices the respective user accessed and the credential used to access the one or more applications by the user. When a modification or change to a credential is received, the modification to the credential can be updated at the different applications or different client devices identified in the login history to reduce or prevent the user from being locked out from accessing the applications or client devices after modifying the credential via the first application and/or first client device. In some embodiments, the credential can be updated with the modification automatically by the credential manager such that the user does not need to individually modify the credential at the plurality of applications and/or client devices.

In at least one aspect, a method for credential control among a plurality of client devices is provided. The method can include receiving, by a server, a modification to a credential for an identifier associated with a user of an application accessed via a first client device. The credential can be used for authenticating to the application of one or more applications accessed by the user across a plurality of client devices. The method can include storing, by the server, the modification to the credential to a login history for the user. The login history can identify the plurality of client devices and one or more applications accessed via the plurality of client devices by the user using the credential. The method can include identifying, by the server using the login history, one or more client devices of the plurality of client devices through which the application of the one or more applications is accessed by the user using the credential. The method can include communicating, by the server, the modification to the credential to the one or more client devices to indicate to the user to update the credential using the modified credential on each of the one or more client devices.

In embodiments, the method can include generating, by the server, a listing to map the one or more applications accessed by the user using the credential to respective ones of the plurality of client devices according to a login event at the respective ones of the plurality of client devices using the credential. The method can include receiving, by the server via an agent executing on the first client device, a selection indicating at least one application of the plurality of applications to communicate the modification to the credential for the at least one application via at least one client device of the plurality of client devices. The method can include receiving, by the server via an agent executing on the first client device, an indication that the credential was updated for at least one application executing on the first client device. The method can include updating, by the server, the login history for the user to indicate the credential was updated to include the modification for at least one application executing on the first client device.

In some embodiments, the method can include determining, by the server, that the modification to the credential was unsuccessful at the first client device for at least one application of the one or more applications accessed by the user. The method can include providing, by the server to an agent executing on the first client device, an instruction to update the credential at the first client device for the at least one application of the one or more applications accessed by the user. The method can include generating, by the server, a listing that includes a status for the plurality of client devices and the one or more applications accessed by the user across the plurality of client devices. The status can be indicative of the modification to the credential being received at respective ones of the plurality of client devices and the one or more applications.

In embodiments, the method can include updating, by the server, the credential to include the modification at the one more client devices associated with the user and connected to the server. The method can include detecting, by the server, a first group of client devices of the plurality of client devices associated with the user are offline. The method can include updating, by the server, the credential to include the modification at the first group of client devices of the one or more client devices responsive to the status of respective ones of the first group of client devices changing from offline to online.

In at least one aspect, a method for credential control is provided. The method can include receiving, by an agent executing on a first client device, a modification of a first credential to change the first credential to a second credential for an identifier associated with a user of the first client device. The method can include providing, by the agent to the user via the first client device, a listing identifying a plurality of applications accessed by the user using the first credential and accessible via the first client device. The method can include receiving, by the agent, a selection of one or more applications of the plurality of applications from the listing. The method can include changing, by the agent, the first credential to the second credential for the selected one or more applications of the plurality of applications at the first client device.

In some embodiments, the method can include providing, by the agent to the user of the client device, the listing identifying a plurality of client devices associated with the user and accessed using the first credential. The method can include providing, by the agent to a server, a selection of one or more client devices of the plurality of client devices to update the first credential to the second credential at the one or more client devices. The method can include transmitting, by the agent to a server, a request for a login history for the user and associated with the credential. The login history can include the plurality of applications accessed by the user using the first credential within a determined time period and a plurality of client devices associated with the user and accessed using the first credential with the determined time period. The method can include encrypting, by the agent, the second credential. The method can include transmitting, by the agent to a server, the encrypted second credential to be stored in a user profile for the user at a database of the server.

In embodiments, the method can include determining, by the agent, if the first credential was updated to the second credential at the selected one or more applications of the plurality of applications at the first client device. The method can include providing, by the agent to a server, an indication that the first credential was updated the second credential at respective ones of the selected one or more applications of the plurality of applications at the first client device. The method can include determining, by the agent, that the first credential did not update to the second credential at the selected one or more applications of the plurality of applications at the first client device. The method can include receiving, by the agent from a server, an instruction to manually update the first credential to the second credential for respective ones of the selected one or more applications of the plurality of applications at the first client device.

In at least one aspect, a system for credential control is provided. The system can include a server having one or more processors coupled to a memory. The one or more processors can be configured to receive a modification to a credential for an identifier associated with a user of an application accessed via a first client device. The credential can be used for authenticating to the application of one or more applications accessed by the user across a plurality of client devices. The one or more processors can be configured to store the modification to the credential to a login history for the user. The login history can identify the plurality of client devices and one or more applications accessed via the plurality of client devices by the user using the credential. The one or more processors can be configured to identify, using the login history, one or more client devices of the plurality of client devices through which the application of the one or more applications is accessed by the user using the credential. The one or more processors can be configured to communicate the modification to the credential to the one or more client devices to indicate to the user to update the credential using the modified credential on each of the one or more client devices.

In some embodiments, the one or more processors can be configured to generate a listing to map the one or more applications accessed by the user using the credential to respective ones of the plurality of client devices according to a login event at the respective ones of the plurality of client devices using the credential. The one or more processors can be configured to receive, via an agent executing on the first client device, an indication that the credential was updated for at least one application executing on the first client device. The one or more processors can be configured to update the login history for the user to indicate the credential was updated to include the modification for at least one application executing on the first client device.

In embodiments, the one or more processors can be configured to determine that the modification to the credential was unsuccessful at the first client device for at least one application of the one or more applications accessed by the user. The one or more processors can be configured to provide, to an agent executing on the first client device, an instruction to update the credential at the first client device for the at least one application of the one or more applications accessed by the user. The one or more processors can be configured to detect a first group of client devices of the plurality of client devices associated with the user are offline. The one or more processors can be configured to update the credential to include the modification at the first group of client devices of the one or more client devices responsive to the status of respective ones of the first group of client devices changing from offline to online.

These and other aspects and implementations are discussed in detail below. The foregoing information and the following detailed description include illustrative examples of various aspects and implementations, and provide an overview or framework for understanding the nature and character of the claimed aspects and implementations. The drawings provide illustration and a further understanding of the various aspects and implementations, and are incorporated in and constitute a part of this specification.

