System and method for mobile single sign-on integration

A method for a client-side computer system to manage single sign-on (SSO) credentials between mobile devices and a service provider computer system providing web services to the mobile devices, the method comprising:

• receiving, from the service provider system or from a mobile device, a request to authenticate an identity of a user;
• generating an authentication token upon authenticating the identity of the user;
• communicating the authentication token to the service provider system directly or through the mobile device, wherein the authentication token causes the service provider system to perform at least the following:
• selecting an authentication protocol from a plurality of supported authentication protocols based on at least one of a client identifier communicated from the mobile device, the authentication token, and an attribute of the mobile device,
• validating the authentication token in accordance with the selected authentication protocol, and
• generating an authorization access code or an authorization access token upon validating the authentication token, wherein a service request received from the mobile device and containing the authorization access code or the authorization access token will cause the service provider system to service the service request.

A non-transitory computer readable medium having computer readable code for causing a client-side computer system to manage single sign-on (SSO) credentials between mobile devices and a service provider computer system providing web services to the mobile devices, the computer readable code causing the client-side computer system to perform:

• receiving, from the service provider system or from a mobile device, a request to authenticate an identity of a user;
• generating an authentication token upon authenticating the identity of the user;
• communicating the authentication token to the service provider system directly or through the mobile device, wherein the authentication token causes the service provider system to perform at least the following:
• selecting an authentication protocol from a plurality of supported authentication protocols based on at least one of a client identifier communicated from the mobile device, the authentication token, and an attribute of the mobile device,
• validating the authentication token in accordance with the selected authentication protocol, and
• generating an authorization access code or an authorization access token upon validating the authentication token, wherein a service request received from the mobile device and containing the authorization access code or the authorization access token will cause the service provider system to service the service request.