Asserting a mobile identity to users and devices in an enterprise authentication system

A method comprising:

• receiving, from an unmanaged device, a request to authenticate a user to a service using a unique identity associated with a managed device;
• mapping the unique identity received from the unmanaged device to the managed device;
• determining, based at least in part on the unique identity, an identity certificate associated with the managed device;
• generating an identity assertion based at least in part on the identity certificate;
• and
• providing the identity assertion to the unmanaged device.

A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:

• receiving, from an unmanaged device, a request to authenticate a user to a service using a unique identity associated with a managed device;
• mapping the unique identity received from the unmanaged device to the managed device;
• determining, based at least in part on the unique identity, an identity certificate associated with the managed device;
• generating an identity assertion based at least in part on the identity certificate;
• and
• providing the identity assertion to the unmanaged device.