Wireless device authentication and service access

A system, comprising:

• an authenticator network device configured to:
• receive, from a client device coupled to the authenticator network device via a port, a user ID associated with the client device to authenticate the client device to access a network service through a network;
• receive a service request to access the network service through the network;
• a token generation system configured to generate, at the authenticator network device, a token specific to the user ID;
• a service request modification engine configured to:
• modify, at the authenticator network device, the service request with the token to generate a modified service request;
• provide the modified service request to a device service management system;
• a network authentication method determination engine configured to negotiate a second authentication method upon rejection of a first authentication method by the client device for authenticating the client device, wherein the first authentication method is different from the second authentication method;
• a service management engine configured to:
• determine, at the device service management system, the user ID from the token in the modified service request;
• and
• a port management engine configured to:
• set the port to an authorized state in response to determining, at the device service management system and based on the negotiated second authentication method and the user ID from the token in the modified service request, to authenticate the client device to allow use of the network service using the client device through the network by providing the single sign-on access to the network service without the user ID being provided as an input to access the network service.

A non-transitory, tangible computer-readable media having instructions stored thereon that, when executed by at least one processor, causes the at least one processor to perform operations comprising:

• receiving, using an authenticator network device coupled to a client device via a port, a user ID associated with the client device to authenticate the client device to access a network service through a network;
• receiving a service request to access the network service through the network;
• generating a token specific to the user ID;
• modifying the service request with the token to generate a modified service request;
• providing the modified service request to a device service management system;
• authenticating, at the device service management system, the client device using a first authentication method;
• negotiating, via the authenticator network device, a second authentication method upon rejection of the first authentication method by the client device to authenticate the client device, wherein the first authentication method is different from the second authentication method;
• and
• setting the port to an authorized state in response an indication that is based on the negotiated second authentication method and the user ID from the token in the modified service request, to authenticate the client device to allow use of the network service using the client device through the network by providing the single sign-on access to the network service without the user ID being provided as an input to access the network service.