Web-based authentication for desktop applications

A method comprising:

• receiving, at a web application, a connection from an internal browser running in a desktop application of a client device;
• redirecting, by the web application, the internal browser of the desktop application to an identity server, wherein the web application acts as an intermediary between the desktop application and the identity server;
• receiving, by the web application, an indication of successful authentication to the identity server of a user at the desktop application;
• returning, by the web application, to the internal browser of the desktop application, a cookie comprising an access token confirming authorization of the user at the desktop application;
• receiving, from the desktop application, an authentication request comprising the access token;
• and
• authenticating the user to the desktop application, based on the access token.

A system comprising:

• a web application configured to act as an intermediary between desktop applications and an identity server for authenticating users of the desktop applications;
• a desktop application configured to:
• identify the web application as the intermediary between the desktop application and the identity server;
• load a browser control to navigate an internal browser of the desktop application to the web application, wherein the web application redirects the internal browser to the identity server;
• submit, via the internal browser, user credentials to authenticate a user of the desktop application to the identity server;
• receive, at the internal browser, a cookie comprising an access token for the user of the desktop application;
• transmit, to a web application programming interface (API) associated with the web application, an authentication request comprising the access token;
• and
• granting access to a resource of the desktop application based on an indication of authentication received from the web API.