Authentication using session-less login

A non-transitory computer-readable storage medium storing instructions that, when executed by a processor, cause the processor to perform operations comprising:

• establishing, by an agent computer system, an application session with an application server;
• establishing, by the agent computer system, a user session with the application server by authenticating a first user of the agent computer system using an identity provider system;
• detecting, by the agent computer system, a request to perform an action by the first user within the application session that requires a second user's authentication;
• while maintaining the user session with the application server, requesting, by the agent computer system, a session-less authentication of the second user using the identity provider system, wherein requesting the session-less authentication comprises transmitting an authentication request including a flag indicating that the requested authentication is a session-less authentication, the flag causing the identity provider system to ignore the user session;
• receiving, by the agent computer system, a confirmation of the authentication of the second user from the identity provider system without establishing a second user session with the application server associated with the second user;
• and
• performing, by the agent computer system, the requested action in response to receiving the confirmation of the authentication of the second user.

A system comprising:

• one or more computer processors;
• and
• one or more computer-readable mediums storing instructions that, when executed by the one or more computer processors, cause the system to:
• establish an application session with an application server;
• establish a user session with the application server by authenticating a first user using an identity provider system;
• detect a request to perform an action by the first user within the application session that requires a second user's authentication;
• while maintaining the user session with the application server, request a session-less authentication of the second user using the identity provider system, wherein requesting the session-less authentication comprises transmitting an authentication request including a flag indicating that the requested authentication is a session-less authentication, the flag causing the identity provider system to ignore the user session;
• receive a confirmation of the authentication of the second user from the identity provider system without establishing a second user session with the application server associated with the second user;
• and
• perform the requested action in response to receiving the confirmation of the authentication of the second user.