Dynamic user authorization with a service provider

A server device comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to:
• receive, at the server device and from a client device, a communication of a request for the client device to access a service provided by a service provider, the communication including a call-back address associated with the service provider;
• determine that the client device is authorized to access the service from the service provider;
• sign a message that includes the call-back address such that use of the call-back address for a change in the authorization is trusted by the service provider;
• send the message that includes the call-back address to an intermediary service;
• determine that a change in authorization has occurred relative to the client device accessing the service;
• and
• based at least in part on the change in authorization, utilize the call-back address to notify the service provider that the change in authorization has occurred.

A method comprising:

• receiving at a service provider and from a client device, a request for the client device to access a service provided by the service provider;
• returning to the client device the request with redirect instructions and a call-back address related to the service provider;
• receiving at the service provider and from the client device, an indication of a trusted authorization for the client device to access the service provided by the service provider;
• based at least in part on receiving the trusted authorization, granting access to the service by the client device in a user session;
• receiving at the service provider and from a third party, a communication indicating that a change in authorization has occurred relative to the access of the service by the client device;
• determining that the communication indicating that the change in authorization has occurred is trusted based at least in part on the communication including a signature from a trusted authorization entity;
• and
• based at least in part on determining that the communication indicating that the change in the authorization has occurred is trusted, adjusting the access of the client device to the service provided by the service provider in the user session.