Extending single-sign-on to relying parties of federated logon providers

An enterprise identity provider server device, comprising:

• at least one processor;
• a communication interface;
• memory storing instructions that, when executed by the at least one processor, cause the server device to:
• receive, via the communication interface, a second authentication token from a federated identity provider server, the second authentication token configured to enable access to a second set of resources in a third-party system using a federated identity service provided by the federated identity provider server;
• provide, via the communication interface, a first authentication token to an enterprise server, the first authentication server token configured to assert identities of users within a computing environment hosted by the enterprise server, and enable access to a first set of resources in an enterprise system;
• and
• provide, via the communication interface, the second authentication token to the enterprise server in response to receipt, by the enterprise server, of the first authentication token so that the enterprise server enables access to the second set of resources in the third-party system, the third-party system being outside the enterprise system;
• send a request to the federated identity provider server to regenerate the second authentication token, wherein the federated identity provider server generates a refreshed authentication token;
• and
• send to the enterprise server, the refreshed authentication token, wherein sending the refreshed authentication token to the enterprise server enables user devices managed by the enterprise server to access the second set of resources.

A non-transitory computer-readable medium storing instructions that, when executed, cause:

• receiving a second authentication token from a federated identity provider server, the second authentication token configured to enable access to a second set of resources in a third-party system using a federated identity service provided by the federated identity provider server;
• providing a first authentication token to an enterprise server, the first authentication token configured to assert identities of users within a computing environment hosted by the enterprise server, and enable access to a first set of resources in an enterprise system;
• and
• providing the second authentication token to the enterprise server in response to receipt, by the enterprise server, of the first authentication token so that the enterprise server enables access to the second set of resources in the third-party system, the third-party being outside the enterprise system:
• sending a request to the federated identity provider server to regenerate the second authentication token, wherein the federated identity provider server generates a refreshed authentication token;
• and
• sending to the enterprise server, the refreshed authentication token, wherein sending the refreshed authentication token to the enterprise server enables user devices managed by the enterprise server to access the second set of resources.