State driven orchestration of authentication components in an access manager

A method comprising:

• receiving a request to access a resource from a client, access to the resource requiring a first authentication and a second authentication;
• authenticating the user on a web browser client at a server using a first authentication plugin;
• sending an encrypted cookie to the client based on the first authentication;
• requesting the encrypted cookie from the web browser client;
• bypassing the first authentication based on the received encrypted cookie and then authenticating the user on the web browser client using a second authentication plugin;
• and
• allowing access to the resources that requires the first and second authentications based on the received encrypted cookie and the second authentication using the second authentication plugin.

A method comprising:

• authenticating a user on a web browser client at a server using a first authentication plugin;
• sending an encrypted cookie to the client based on the authentication;
• receiving a request to access a resource from the client, access to the resource requiring a first authentication and a second authentication;
• requesting the encrypted cookie from the web browser client;
• bypassing the first authentication based on the received encrypted cookie and then authenticating the user on the web browser client using a second authentication plugin;
• and
• allowing access to the resources that requires the first and second authentications based on the received encrypted cookie and authentication using the second authentication plugin.