A method comprising: sending, by a computing device, an authentication request to a first identity provider; receiving, by the computing device, from the first identity provider, redirection data to redirect the authentication request to a second identity provider; when the computing device has a security agent installed, intercepting, by a security agent executing on the computing device, the authentication request; retrieving, by the security agent, an identifier of the computing device; sending, by the security agent, the authentication request with the identifier of the computing device to the second identity provider; receiving, by the computing device, from the second identity provider, a signed response to the authentication request, wherein the signed response includes the identifier of the computing device; when the computing device does not have a security agent installed, sending, by the computing device, the authentication request to the second identity provider; receiving, by the computing device, from the second identity provider, a signed response to the authentication request; sending, by the computing device, the signed response to the first identity provider; and receiving, by the computing device, a result of the authentication request from the first identity provider; wherein the signed response includes an indication that a security agent managed by the second identity provider is not installed on the computing device, or, wherein the authentication request is sent via a security agent executing on the computing device for validating the identifier by confirming at the second identity provider that the identifier is one of a plurality of identifiers associated with security agents that have been installed on computing devices. sending, by a computing device, an authentication request to a first identity provider; receiving, by the computing device, from the first identity provider, redirection data to redirect the authentication request to a second identity provider; when the computing device has a security agent installed, intercepting, by a security agent executing on the computing device, the authentication request; retrieving, by the security agent, an identifier of the computing device; sending, by the security agent, the authentication request with the identifier of the computing device to the second identity provider; receiving, by the computing device, from the second identity provider, a signed response to the authentication request, wherein the signed response includes the identifier of the computing device; when the computing device does not have a security agent installed, sending, by the computing device, the authentication request to the second identity provider; receiving, by the computing device, from the second identity provider, a signed response to the authentication request; sending, by the computing device, the signed response to the first identity provider; and receiving, by the computing device, a result of the authentication request from the first identity provider; wherein the signed response includes an indication that a security agent managed by the second identity provider is not installed on the computing device, or, wherein the authentication request is sent via a security agent executing on the computing device for validating the identifier by confirming at the second identity provider that the identifier is one of a plurality of identifiers associated with security agents that have been installed on computing devices.