User device authentication

An apparatus for user device authentication at an application platform providing a single sign-on (SSO) service for user devices to access one or more cloud-based applications, comprising:

• a processor;
• memory in electronic communication with the processor;
• and
• instructions stored in the memory and executable by the processor to cause the apparatus to:
• receive, at the application platform and from a user device, an initial login request;
• redirect the initial login request to a proxy server based at least in part on the initial login request lacking authentication information or an authorization message;
• receive, at the application platform and from the proxy server, a first login request and the authentication information based at least in part on a certificate of the user device, wherein the authentication information comprises identification information for the proxy server, wherein receiving, at the application platform and from the proxy server, the first login request and the authentication information is based at least in part on the redirecting;
• perform a validation process for the proxy server based at least in part on the authentication information;
• transmit the authorization message for use by the user device based at least in part on a successful result of the validation process;
• receive, at the application platform and from the user device, a second login request and the authorization message;
• initiate a login procedure for the user device based at least in part on receiving the second login request and the authorization message;
• and
• authenticate, at the application platform, the user device for access to the application platform based at least in part on the login procedure and receiving the second login request and the authorization message at the application platform, wherein the authenticating at the application platform allows the user device to communicate with the application platform via a route bypassing the proxy server.

A non-transitory computer-readable medium storing code for user device authentication at an application platform providing a single sign-on (SSO) service for user devices to access one or more cloud-based applications, the code comprising instructions executable by a processor to:

• receive, at the application platform and from a user device, an initial login request;
• redirect the initial login request to a proxy server based at least in part on the initial login request lacking authentication information or an authorization message;
• receive, at the application platform and from the proxy server, a first login request and the authentication information based at least in part on a certificate of the user device, wherein the authentication information comprises identification information for the proxy server, wherein receiving, at the application platform and from the proxy server, the first login request and the authentication information is based at least in part on the redirecting;
• perform a validation process for the proxy server based at least in part on the authentication information;
• transmit the authorization message for use by the user device based at least in part on a successful result of the validation process;
• receive, at the application platform and from the user device, a second login request and the authorization message;
• initiate a login procedure for the user device based at least in part on receiving the second login request and the authorization message;
• and
• authenticate, at the application platform, the user device for access to the application platform based at least in part on the login procedure and receiving the second login request and the authorization message at the application platform, wherein the authenticating at the application platform allows the user device to communicate with the application platform via a route bypassing the proxy server.