System and method for mobile single sign-on integration

A client-side web-identification authentication computer system for providing web services to mobile devices using single sign-on (SSO) credentials, the system comprising:

• non-transitory computer memory;
• a processor, the processor executing at least a portion of stored executable computer instructions to perform at least the following:
• receiving, from the service provider system or from a mobile device, a request to authenticate an identity of a user;
• authenticating the identity of the user;
• generating an authentication token based on the step of authenticating;
• communicating the authentication token;
• wherein the authentication token causes the service provider system to perform at least the following:
• select an authentication protocol from a plurality of supported authentication protocols based on at least one of a client identifier communicated from the mobile device, the authentication token, and an attribute of the mobile device;
• validate the authentication token in accordance with the selected authentication protocol;
• generate an authorization access token;
• process a service request received from the mobile device, the service request containing the authorization access token;
• and
• service the service request in response to the authorization access token.

A mobile device for providing web services using single sign-on (SSO) credentials, the mobile device comprising:

• a non-transitory computer memory;
• a processor, the processor executing at least a portion of stored executable computer instructions to perform at least the following:
• receiving, at the mobile device, a request to access at least one service at a service provider computer system;
• communicating the request to the service provider computer system;
• verifying the identity of a user associated with the mobile device;
• receiving, in response to the step of verifying, an authentication token from a client-side web-identification authentication computer system;
• automatically communicating the authentication token to the service provider computer system;
• and
• wherein the authentication token causes the service provider computer system to perform at least the following:
• select an authentication protocol from a plurality of supported authentication protocols based on at least one of a client identifier communicated from the mobile device, and the authentication token, and an attribute of the mobile device;
• validate the authentication token in accordance with the selected authentication protocol;
• generate an authorization access token;
• process a service request received from the mobile device, the service request containing the authorization access token;
• and
• service the service request in response to the authorization access token.

A service provider computer system for providing web services to mobile devices using single sign-on (SSO) credentials managed by a client-side computer system, the system comprising:

• non-transitory computer memory storing executable computer instructions;
• a programmable processor, the programmable processor executing at least a portion of the stored executable computer instructions to perform at least the following:
• receiving, at the service provider system, a request to access web services using a mobile device;
• redirecting the mobile device to a web-identification authentication service at the client-side computer system to authenticate the identity of the user, wherein the step of redirecting causes the client-side computer system to generate an authentication token and communicate to the mobile device a message containing the authentication token and a redirect function call that, when processed by a processor at the mobile device, causes the mobile device to automatically communicate the authentication token the service provider system;
• selecting an authentication protocol from a plurality of supported authentication protocols based on at least one of the authentication token, a client identifier, and an attribute of the mobile device;
• validating the authentication token in accordance with the selected authentication protocol;
• generating an authorization access token;
• processing a service request received from the mobile device, the service request containing the authorization access token;
• and
• servicing the service request in response to the authorization access token.