Application identification

A client device comprising:

• at least a first port and a second port;
• one or more processors;
• and
• one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to:
• receive an identity request for an identity of an application on the client device, the identity request received from the application at the first port and received by an identification agent at the second port;
• access a port list that includes information regarding entities using the first port and the second port of the client device;
• based at least in part on the information from the port list, determine, by the identification agent, the application that is utilizing the first port to communicate the request;
• send, by the identification agent, a query for the identity of the application that is utilizing the first port;
• receive, in response to the query, the identity of the application;
• and
• send the identity of the application to an authentication service on a remote device.

A method comprising:

• receiving, at an authentication service and from an application on a remote client device, an access request to access a resource managed by the authentication service, the access request received via a first communication channel between the authentication service and the remote client device;
• in response to the access request, sending a directive to the application, the directive directing the application to send an identity request for an identity of the application to an identification agent on the remote client device;
• receiving, at the authentication service and from the identification agent, the identity of the application, wherein the identity is received via a second communication channel between the authentication service and the remote client device;
• based at least in part on the identity of the application, making, by the authentication service, an access determination regarding whether to allow the application to access to the resource;
• and
• sending, to the application at the remote client device, a response to the access request, the response based at least in part on the access determination.