Method for managing user accounts in a hosted application

A non-transitory computer readable medium, comprising a set of instructions, which when run by a computer, causes the implementation of a method for managing user accounts in an application of an application service provider, comprising the following steps, performed by an identity provider sharing a trust relationship with the application service provider:

• receiving a request for proof of authentication in order to authenticate a user attempting to access the application, said user being registered with the identity provider;
• obtaining, from a local database, data about the user, said data comprising authentication data and access rights data;
• authenticating the user by means of the authentication data;
• determining the right to access the application by the user by means of the access rights data;
• determining an existence or absence of a user account associated with the user, by querying an external database managed by the application service provider;
• when the user has the right to access the application and there is no user account associated with the user:
• triggering provisioning of the user account at an entity;
• generating a proof of authentication associated with the user;
• sending said proof of authentication to the application service provider.