Authenticating for an enterprise service

An identity server, comprising:

• at least one hardware processor;
• and
• a non-transitory computer-readable storage medium coupled to the at least one hardware processor and storing programming instructions, wherein the programming instructions, when executed, instruct the at least one hardware processor to:
• receive, at the identity server, from a client device, an authentication request;
• in response to receiving the authentication request, transmit, from the identity server to the client device over a network, an on-premises verification command, wherein the on-premises verification command indicates an on-premises agent that verifies whether the client device has on-premises network connectivity;
• determine, by the identity server, whether an authentication succeeds or fails based on whether an on-premises verification response message is received from the client device in response to the on-premises verification command, wherein the on-premises verification response message indicates whether the client device has on-premises network connectivity;
• and
• transmit, by the identity server, an authentication response, wherein the authentication response indicates whether the authentication succeeds or fails based on whether the on-premises verification response message is received from the client device in response to the on-premises verification command.

A non-transitory computer-readable medium containing instructions which, when executed, cause a computing device to perform operations comprising:

• receiving, at an identity server, from a client device, an authentication request;
• in response to receiving the authentication request, transmitting, from the identity server to the client device over a network, an on-premises verification command, wherein the on-premises verification command indicates an on-premises agent that verifies whether the client device has on-premises network connectivity;
• determining, by the identity server, whether an authentication succeeds or fails based on whether an on-premises verification response message is received from the client device in response to the on-premises verification command, wherein the on-premises verification response message indicates whether the client device has on-premises network connectivity;
• and
• transmitting, by the identity server, an authentication response, wherein the authentication response indicates whether the authentication succeeds or fails based on whether the on-premises verification response message is received from the client device in response to the on-premises verification command.