Multi-service scep-certificate based authentication

A method, comprising:

• sending a certificate signing request (CSR) for a token signing certificate to a simple certificate enrollment protocol (SCEP) server;
• receiving the token signing certificate from the SCEP server;
• generating an authentication token that authenticates a user of a computing device with an authentication service;
• signing the authentication token with the token signing certificate to create a signed authentication token;
• and
• sending the signed authentication token to the authentication service to authenticate the user of the computing device with the authentication service.

A system, comprising:

• a computing device comprising a processor and a memory;
• and
• machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:
• receive, from a client device, a certificate signing request (CSR) for a token signing certificate, the CSR comprising a public key;
• verify an identity of a user of the client device;
• issue the token signing certificate, wherein the token signing certificate is signed by a respective private key for a simple certificate enrollment protocol (SCEP) signing certificate;
• and
• send the token signing certificate to the client device.