Verified device identity providing context to application

An apparatus comprising:

• a network interface unit configured to:
• send a request to access an application resource provided by a remote application server;
• receive at the apparatus, from the remote application server, a message directing the apparatus to send a first authentication message to a device identity server, wherein the first authentication message requests an authenticated device identity for the apparatus;
• send a second authentication message to the device identity server;
• receive the authenticated device identity from the device identity server, wherein the authenticated device identity is valid for any user identity;
• and
• send the authenticated device identity from the apparatus to the remote application server;
• and
• a processor coupled to the network interface unit and configured to:
• attach metadata associated with the apparatus to the first authentication message to generate the second authentication message;
• and
• obtain access to the application resource from the remote application server via the network interface unit based on the authenticated device identity.

One or more non-transitory computer readable storage media encoded with computer executable instructions operable to cause a processor in a computing device to:

• send a request to access an application resource provided by a remote application server;
• receive at the computing device, from the remote application server, a first message directing the computing device to send a first authentication message to a device identity server, wherein the first authentication message requests an authenticated device identity for the computing device;
• attach metadata associated with the computing device to the first authentication message to generate a second authentication message;
• send the second authentication message from the computing device to the device identity server;
• receive the authenticated device identity from the device identity server, wherein the authenticated device identity is valid for any user identity;
• send the authenticated device identity to the remote application server;
• and
• obtain access to the application resource from the remote application server based on the authenticated device identity.