Transferring a single sign-on session between a browser and a client application

A single sign-on management system comprising a first computing device and instructions that, when executed by the first computing device, cause the first computing device to:

• send a launch command to launch an application on a second computing device, the launch command responsive to a launch request received by the first computing device from a browser session of the second computing device, the launch command indicative of a request to transfer a single sign-on session between the browser session and the application, the launch command comprising a first security credential and a second security credential;
• receive, from the application, the first security credential and an identification indicative of an identification unique to the second computing device;
• receive, from the browser session, an identification confirmation indicating that the identification received by the first computing device matches the identification unique to the second computing device;
• send, to the application, a third security credential responsive to the identification confirmation;
• and
• establish the single sign-on session with the application, the establishing responsive to the first computing device receiving, from the application, the identification and an encrypted version of the second security credential relative to the third security credential.

A non-transitory machine-readable storage medium storing instructions that when executed by at least one computing device cause the at least one computing device to:

• send a launch command to launch an application on a second computing device, the launch command responsive to a launch request received by the first computing device from a browser session of the second computing device, the launch command indicative of a request to transfer a single sign-on session between the browser session and the application, the launch command comprising a first security credential and a second security credential;
• receive, from the application, the first security credential and an identification indicative of an identification unique to the second computing device;
• receive, from the browser session, an identification confirmation indicating that the identification received by the first computing device matches the identification unique to the second computing device;
• send, to the application, a third security credential responsive to the identification confirmation;
• and
• establish the single sign-on session with the application, the establishing responsive to the first computing device receiving from the application the identification and an encrypted version of the second security credential relative to the third security credential.