Authentication tunneling mechanisms for remote connections

A method for authentication tunneling at a client machine, comprising:

• establishing an encrypted channel between a first authenticator application running on a remote machine and a second authenticator application running on the client machine, wherein the encrypted channel is established using a secret key accessible by the client machine;
• receiving an authentication prompt from the remote machine via the encrypted channel, the authentication prompt associated with accessing one or more resources via an identity management system, wherein the authentication prompt is encrypted with the secret key associated with the client machine;
• obtaining user verification data from a user of the client machine in accordance with the authentication prompt, wherein the user verification data is obtained using the second authenticator application running on the client machine;
• and
• transmitting, to the remote machine via the encrypted channel in response to the authentication prompt, a first authentication response comprising the user verification data associated with the user of the client machine, an identifier of the client machine, and a first digital signature of the second authenticator application running on the client machine, wherein the first authentication response is encrypted with the secret key associated with the client machine.