Authenticating for a software service

An identity provider (IDP), comprising:

• at least one hardware processor;
• and
• a non-transitory computer-readable storage medium coupled to the at least one hardware processor and storing programming instructions for execution by the at least one hardware processor, wherein the programming instructions, when executed, cause the at least one hardware processor to perform operations comprising:
• receiving, at the IDP and from a client device, an identity authentication request;
• transmitting, from the IDP to an on-premises directory provider (OPDP), an on-premises verification initiation request for a digest authentication;
• receiving, at the IDP and from the OPDP, an on-premises verification initiation request, wherein the on-premises verification initiation request includes one or more digest authentication attributes;
• transmitting, from the IDP to the client device, the one or more digest authentication attributes;
• receiving, at the IDP and from the client device, a digest, wherein the digest is calculated based on the one or more digest authentication attributes and one or more identity authentication credentials;
• transmitting, from the IDP to the OPDP, the digest;
• and
• receiving, at the IDP and from the OPDP, an on-premises verification response that indicates a result of the digest authentication.

A computer-readable medium containing instructions which, when executed, cause a computing device to perform operations comprising:

• receiving, at an identity provider (IDP) and from a client device, an identity authentication request;
• transmitting, from the IDP to an on-premises directory provider (OPDP), an on-premises verification initiation request for a digest authentication;
• receiving, at the IDP and from the OPDP, an on-premises verification initiation request, wherein the on-premises verification initiation request includes one or more digest authentication attributes;
• transmitting, from the IDP to the client device, the one or more digest authentication attributes;
• receiving, at the IDP and from the client device, a digest, wherein the digest is calculated based on the one or more digest authentication attributes and one or more identity authentication credentials;
• transmitting, from the IDP to the OPDP, the digest;
• and
• receiving, at the IDP and from the OPDP, an on-premises verification response that indicates a result of the digest authentication.