Mobile multifactor single-sign-on authentication

A non-transitory computer storage medium which stores a non-browser mobile client application comprising executable code that directs a mobile computing device to perform a process comprising:

• directing, by an authentication module, an independent browser, executable on the mobile computing device, to access a uniform resource locator (URL) associated with an authentication appliance configured to verify, with an identity database, authentication information received from the browser and configured to transmit a browser-accessible token to the browser,
• wherein the non-browser mobile client application comprises the authentication module,
• wherein the independent browser has not been specifically configured to provide identity information for non-browser mobile applications,
• wherein the authentication information is associated with a user of the mobile device, and
• wherein the authentication appliance is configured to provide single-sign-on (SSO) services that comprise accepting, for purposes of authentication, in lieu of the authentication information, a previously created valid browser-accessible token that was the result of a previous authentication between the authentication appliance and a second non-browser mobile client application;
• receiving, at the authentication module, from the independent browser, a URL string comprising a client application identity distinct from the previously created valid browser-accessible token, that indicates the user of the mobile device and that the user of the mobile device has been authenticated by the authentication appliance the URL string configured to invoke the non-browser mobile client application upon receipt by the independent browser, the independent browser receiving the URL string from the authentication appliance in response to authenticating the user,
• wherein at least a portion of the URL string is uniquely associated with the non-browser mobile client application;
• and
• using the client application identity obtain access to a non-browser network-based application service associated with the non-browser mobile client application.