Integrated authentication system and method

A system comprising:

• a computer processor;
• a non-transitory computer readable medium coupled to the computer processor;
• a virtual machine comprising instructions stored on the non-transitory computer readable medium and executing on the computer processor;
• an application executing on the virtual machine and configured to:
• send, to a provisioning service, a local authentication token for a user of the virtual machine,
• receive, from the provisioning service, a portable access token, and
• launch, for the user, a session in a web service by sending the portable access token to an application programming interface (API) of the web service;
• and
• a user interface service configured to:
• receive, from the user, login credentials,
• generate, using the login credentials, a refresh token for the user;
• and
• send, to the provisioning service, the refresh token for the user;
• the provisioning service configured to:
• generate, from the local authentication token, the portable access token;
• generate, using the refresh token for the user, the virtual machine;
• and
• validate first information included in the local authentication token as matching second information in the refresh token in generating the portable access token, wherein the portable access token comprises a data structure that stores information used for authentication to the web service, and wherein the portable access token has a first period of validity and a digital signature, wherein the first period of validity is less than a second period of validity of the local authentication token and a third period of validity of the refresh token, wherein the second period of validity of the local authentication token and the third period of validity of the refresh token comprise different periods of validity with respect to one another.

A non-transitory computer readable medium comprising instructions that, when executed by a virtual machine executing on a computer processor, perform operations comprising:

• sending, to a provisioning service and by an application executing on the virtual machine, a local authentication token for a user of the virtual machine, wherein the provisioning service uses the local authentication token to generate a portable access token;
• receiving, from the provisioning service, the portable access token;
• and
• launching, by the application and for the user, a session in a web service by sending the portable access token to an application programming interface (API) of the web service, wherein the provisioning service further:
• receives a refresh token for the user;
• generates, using the refresh token for the user, the virtual machine;
• and
• validates first information included in the local authentication token as matching second information in the refresh token in generating the portable access token, wherein the portable access token comprises a data structure that stores information used for authentication to the web service, and wherein the portable access token has a first period of validity and a digital signature, wherein the first period of validity is less than a second period of validity of the local authentication token and a third period of validity of the refresh token, wherein the second period of validity of the local authentication token and the third period of validity of the refresh token comprise different periods of validity with respect to one another.