Native application single sign-on

摘要

In an example embodiment, a virtual private network (VPN) connection is established between a client device and an authentication service. Then a request is received from a third-party application on the client device, with the request being for a third-party service. A log-in page is requested from the third-party service, with the log-in page including one or more log-in fields usable to enter credential information. The log-in page is then modified to hide the one or more log-in fields. Credentials corresponding to a user of the client device and also corresponding to the third-party service are then obtained. The modified log-in page is sent to the client device via the VPN connection. A log-in submission is received from the third-party application. The credentials corresponding to the user and to the third-party service are sent to the third-party service to log-in the user to the third-party service.

主权项

1. A method of providing single sign-on, the method comprising:
establishing a virtual private network (VPN) connection between a client device and an authentication service; receiving, at the authentication service, via the VPN connection, a request from a third-party application on the client device, the request for a third-party service; requesting a log-in page from the third-party service, the log-in page including one or more log-in fields usable to enter credential information; modifying the log-in page, the modifying hiding the one or more log-in fields; obtaining credentials corresponding to a user of the client device and also corresponding to the third-party service; sending the modified log-in page to the client device via the VPN connection; receiving a log-in submission, via the VPN connection, from the third-party application; and submitting, to the third-party service, the credentials corresponding to the user and to the third-party service to log-in the user to the third-party service.