Techniques for inter-client authorization

A computer-implemented method for establishing sessions via one or more authorization servers, comprising:

• receiving, from a source client, an inter-client token comprising at least an identifier of a user and an indication of a first set of authentication methods that the user was authenticated with based at least in part on a first authorization procedure between the source client and a first authorization server of the first set of authorization servers, wherein the inter-client token comprises the indication of the one or more authentication methods, and is used for establishing a session for the user at a target client;
• transmitting the inter-client token to a second authorization server of the one or more authorization servers;
• and
• establishing, based at least in part on the inter-client token, the session for the user at the target client and via the second authorization server, wherein the session is established in accordance with a second authorization procedure between the target client and the second authorization server.

An apparatus for establishing sessions via one or more authorization servers, comprising:

• one or more memories storing processor-executable code;
• and
• one or more processors coupled with the one or more memories and individually or collectively operable to execute the code to cause the apparatus to:
• perform a first authorization procedure to establish a first session for a user at a source client, the first authorization procedure being performed via a first authorization server of the one or more authorization servers;
• receive, from the first authorization server based at least in part on the first authorization procedure, an identity token comprising at least an identifier of the user and an indication of one or more authentication methods that the user was authenticated with based at least in part on performing the first authorization procedure;
• and
• transmit, to a target client, an inter-client token that is based at least in part on the identity token, wherein the inter-client token comprises the indication of the one or more authentication methods, and is used for establishing a second session for the user at the target client.