Accessing enterprise resources

A mobile device, comprising:

• a memory;
• and
• at least one hardware processor communicatively coupled with the memory and configured to:
• receive, at an enterprise mobility management (EMM) client on the mobile device, a certificate for accessing an enterprise resource from an EMM server;
• send, from an application on the mobile device, an authentication request to an identity provider;
• receive, in response to the authentication request, an authentication challenge from the identity provider, wherein the authentication challenge comprises a certificate request;
• send, from the application and in response to the authentication challenge, an authentication response, wherein the authentication response comprises the certificate;
• and
• receive, an authorization token from the identity provider, wherein the authorization token indicates whether the identity provider validates the certificate and the mobile device.

A non-transitory computer-readable medium containing instructions which, when executed, cause a computing device to perform operations comprising:

• receiving, at an enterprise mobility management (EMM) client on a mobile device, a certificate for accessing an enterprise resource from an EMM server;
• sending, from an application on the mobile device, an authentication request to an identity provider;
• receiving, in response to the authentication request, an authentication challenge from the identity provider, wherein the authentication challenge comprises a certificate request;
• sending, from the application and in response to the authentication challenge, an authentication response, wherein the authentication response comprises the certificate;
• and
• receiving, an authorization token from the identity provider, wherein the authorization token indicates whether the identity provider validates the certificate and the mobile device.