Single sign-on management for multiple independent identity providers

A method comprising:

• with a computing system associated with a master identity provider, receiving an authentication request from a browser of a user device on behalf of a first web application;
• with the computing system, determining that no master single sign-on session exists for a user associated with the browser;
• with the computing system, in response to the determining, instructing a local identity provider to obtain credentials from the user;
• with the computing system, receiving local single sign-on session information from the local identity provider;
• and
• with the computing system, creating a master single sign-on session.

A computing system associated with a local identity provider, the computing system comprising:

• a processor;
• and
• a memory with machine readable instructions that when executed by the processor, cause the system to:
• receive a first authentication request from a first web application of a user device;
• redirect a browser associated with the first web application to a server system associated with a master identity provider;
• receive from the browser, a master session identifier provided by the master identity provider, the master session identifier identifying a master single sign-on session that is available to a plurality of local identity providers;
• and
• establish a first local single sign-on session between the local identity provider and the browser.