A distributed computer-implemented method for providing access to an enterprise application from a telecommunications device, the method comprising: in a client application running in the telecommunications device: requesting a token from an intermediate application gateway, IAG, using a dataset comprising a device identifier, a user identifier, or both a device identifier and a user identifier; in the IAG: preparing the token in response to the request, pushing the token to at least one of a user-centered address associated with the telecommunications device, and a device-centered address of the telecommunications device via a device server in communication with the client application and the IAG and comprising a push technology network element; in the client application: receiving the token; and employing the pushed token in communications addressed to an enterprise application stored on one or more application servers via the device server and the IAG, the device server and the IAG being interposed between the telecommunications device and the one or more application servers; in the IAG: replacing the token in each communication with identification information called for by the enterprise application; and sending the communication with the identification information to the enterprise application. in a client application running in the telecommunications device: requesting a token from an intermediate application gateway, IAG, using a dataset comprising a device identifier, a user identifier, or both a device identifier and a user identifier; in the IAG: preparing the token in response to the request, pushing the token to at least one of a user-centered address associated with the telecommunications device, and a device-centered address of the telecommunications device via a device server in communication with the client application and the IAG and comprising a push technology network element; preparing the token in response to the request, pushing the token to at least one of a user-centered address associated with the telecommunications device, and a device-centered address of the telecommunications device via a device server in communication with the client application and the IAG and comprising a push technology network element; in the client application: receiving the token; and employing the pushed token in communications addressed to an enterprise application stored on one or more application servers via the device server and the IAG, the device server and the IAG being interposed between the telecommunications device and the one or more application servers; receiving the token; and employing the pushed token in communications addressed to an enterprise application stored on one or more application servers via the device server and the IAG, the device server and the IAG being interposed between the telecommunications device and the one or more application servers; in the IAG: replacing the token in each communication with identification information called for by the enterprise application; and sending the communication with the identification information to the enterprise application. replacing the token in each communication with identification information called for by the enterprise application; and sending the communication with the identification information to the enterprise application.