Identity experience framework

A method implemented by an application executing on an application service provider device, the application service provider device remote to an interface and a identity policy host, the method comprising:

• providing a call over a network to the identity policy host in response to user interaction with the interface, the call indicating an identity policy of a plurality of identity policies for dynamic deployment on behalf of the application;
• receiving, from the identity policy host over the network, a user interface (UI) defined by the indicated identity policy;
• providing the UI to the interface;
• responsive to additional user interaction with the UI, providing a token request and an identity claim over the network to the identity policy host;
• receiving, from the identity policy host over the network, a token configured to enable access to the application;
• and
• consuming the token to allow access to the application.

A method implemented by a computing system comprising an identity experience framework, the method comprising:

• receiving a call over a network from an application in response to user interaction with an interface, the application executing on an application service provider device remote to the computing system and the interface, the call indicating an identity policy of a plurality of identity policies for dynamic deployment on behalf of the application;
• subsequent to said receiving the call, providing a user interface (UI) to the application over the network based on the indicated identity policy, the UI defined by the indicated identity policy;
• responsive to additional user interaction with the UI, receiving a token request and an identity claim over the network from the application;
• subsequent to verification of the identity claim, providing a token configured to enable access to the application over the network to complete the token request.