Method and system for authenticating a user with an authentication server

A non-transitory computer program comprising computer instructions, which when executed by a computer, implement a method for authenticating a user with an authentication server, in order to access a first user device or an application with said first user device, said method comprising:

• at least one iteration of an authentication phase, wherein said authentication phase comprises
• sending, by an authentication client of said first user device or said application, to said authentication server, an authentication request,
• in response to said authentication request, sending by the authentication server a first message comprising an authentication URL and a transaction identifier,
• opening said authentication URL in a web browser running on a second user device, previously enrolled with said authentication server,
• verifying an identity of said user by said second user device, and
• when said verifying is successful, providing by said second user device to said authentication server, a proof of enrollment stored in said second user device during enrollment of said second user device, in order to authenticate said user.

A system for authenticating a user with an authentication server, in order to access a first user device or an application with said first user device, said system comprising:

• the first user device,
• the authentication server,
• a second user device comprising a web browser;
• and
• an authentication client;
• configured to implement a method for authenticating the user with the authentication server, in order to access the first user device or the application with said first user device, said method comprising
• at least one iteration of an authentication phase, wherein said authentication phase comprises
• sending, by the authentication client of said first user device or said application, to said authentication server, an authentication request,
• in response to said authentication request, sending by the authentication server a first message comprising an authentication URL and a transaction identifier,
• opening said authentication URL in the web browser running on the second user device, previously enrolled with said authentication server,
• verifying an identity of said user by said second user device, and
• when said verifying is successful, providing by said second user device to said authentication server, a proof of enrollment stored in said second user device during enrollment of said second user device, in order to authenticate said user.