Secured automatic user log-in at website via personal electronic device

A method at a mobile device for automatically providing, to a user operating the mobile device, access to a restricted at least a portion of a website of an enterprise, the method comprising:

• receiving, at the mobile device, an indication of the user performing a first navigation, via a browser executing on the mobile device, to a target destination that is included on the website of the enterprise and to which access is restricted, the target destination included in the restricted at least the portion of the website;
• authenticating, by the mobile device and based on a user profile stored at a back-end system associated with the enterprise and one or more credentials received via a user interface of the mobile device, the user to an account of the user with the enterprise;
• based on a preference indicated by the user for one of persisting or not persisting automatic access of the user at the website:
• generating, by the mobile device based on the authentication of the user, a token based on a user identifier associated with the user profile corresponding to the user account and a device identifier provided by and uniquely indicative of the mobile device, the token corresponding to automatic access of the user to the restricted at least the portion of the website,
• storing the token in a first memory of the mobile device, and
• providing, by the mobile device to the back-end system, the device identifier provided by the mobile device for storage, at the back-end system, in conjunction with the user profile of the user, the user profile of the user storing respective indications of the user identifier, the device identifier, and the one or more credentials;
• based on a received indication of the user performing a second navigation to the target destination, automatically determining, at the mobile device, whether or not the token is stored at the mobile device;
• when the token is determined to be stored at the mobile device:
• accessing, by the mobile device and based on the user identifier indicated by the token, the user profile stored at the back-end system corresponding to the website;
• comparing, by the mobile device, the device identifier indicated by the token with a device identifier indicated by the user profile and with a device identifier stored in a second memory of the mobile device;
• and
• when the device identifier indicated by the token, the device identifier indicated by the user profile, and the device identifier stored in the second memory of the mobile device are in accordance, automatically providing, by the mobile device to the user, access to the restricted at least the portion of the website;
• when at least one of:
• (i) the token is determined to be not stored at the mobile device, or (ii) the device identifier indicated by the token does not correspond to the device identifier indicated by the user profile, requesting, at the mobile device, the user to log-in via a user interface of the mobile device in order to access the target destination included on the website.