A computing system comprising: a reverse proxy component to: receive a public key certificate from a client computing system; execute a mutual authentication handshake with the client computing system to authenticate the client computing system based on the public key certificate; generate an authentication token based on the public key certificate; and receive a request from the client computing system; and an application (124, 224, 330, 430, 530, 624, 724a, 724b) to: receive the request and the authentication token from the reverse proxy component; request an authorization token from an OAuth server (126, 226, 340, 440, 540, 726) based on the authentication token received from the reverse proxy component; receive the authorization token from the OAuth server (126, 226, 340, 440, 540, 726); store the authorization token received from the OAuth server (126, 226, 340, 440, 540, 726) in association with a session identifier associated with the request received from the client computing system; and transmit a response to the client computing system based on the authorization token received from the OAuth server (126, 226, 340, 440, 540, 726) and the request received from the client computing system. a reverse proxy component to: receive a public key certificate from a client computing system; execute a mutual authentication handshake with the client computing system to authenticate the client computing system based on the public key certificate; generate an authentication token based on the public key certificate; and receive a request from the client computing system; and receive a public key certificate from a client computing system; execute a mutual authentication handshake with the client computing system to authenticate the client computing system based on the public key certificate; generate an authentication token based on the public key certificate; and receive a request from the client computing system; and an application (124, 224, 330, 430, 530, 624, 724a, 724b) to: receive the request and the authentication token from the reverse proxy component; request an authorization token from an OAuth server (126, 226, 340, 440, 540, 726) based on the authentication token received from the reverse proxy component; receive the authorization token from the OAuth server (126, 226, 340, 440, 540, 726); store the authorization token received from the OAuth server (126, 226, 340, 440, 540, 726) in association with a session identifier associated with the request received from the client computing system; and transmit a response to the client computing system based on the authorization token received from the OAuth server (126, 226, 340, 440, 540, 726) and the request received from the client computing system. receive the request and the authentication token from the reverse proxy component; request an authorization token from an OAuth server (126, 226, 340, 440, 540, 726) based on the authentication token received from the reverse proxy component; receive the authorization token from the OAuth server (126, 226, 340, 440, 540, 726); store the authorization token received from the OAuth server (126, 226, 340, 440, 540, 726) in association with a session identifier associated with the request received from the client computing system; and transmit a response to the client computing system based on the authorization token received from the OAuth server (126, 226, 340, 440, 540, 726) and the request received from the client computing system.