A system, comprising: at least one processor of a user device (102, 444); and a memory that stores one or more programs that are configured to be executed by the at least one processor, the one or more programs including instructions which when executed by the at least one processor, configure the at least one processor to: transmit (204, 316) a first request to authenticate a client application (140, 142, 450, 302), to access an on-premise application, the client application being executed by the at least one processor, the first request sent to an identity provider (112, 304) of a cloud computing service, the first request made through a cloud-based network authentication protocol, the on-premise application subject to a legacy network authentication protocol, the cloud-based network authentication protocol incompatible with the legacy network authentication protocol; in response to the first request, obtain (206, 320) a security token including a security ticket of the legacy network authentication protocol, the security ticket generated by the identity provider of the cloud computing service, the security token associated with the cloud-based network authentication protocol; transmit (208, 322) an authentication request using the legacy network authentication protocol to the on-premise application, the authentication request including the security ticket; and obtain (210, 326) access to the on-premise application. at least one processor of a user device (102, 444); and a memory that stores one or more programs that are configured to be executed by the at least one processor, the one or more programs including instructions which when executed by the at least one processor, configure the at least one processor to: transmit (204, 316) a first request to authenticate a client application (140, 142, 450, 302), to access an on-premise application, the client application being executed by the at least one processor, the first request sent to an identity provider (112, 304) of a cloud computing service, the first request made through a cloud-based network authentication protocol, the on-premise application subject to a legacy network authentication protocol, the cloud-based network authentication protocol incompatible with the legacy network authentication protocol; in response to the first request, obtain (206, 320) a security token including a security ticket of the legacy network authentication protocol, the security ticket generated by the identity provider of the cloud computing service, the security token associated with the cloud-based network authentication protocol; transmit (208, 322) an authentication request using the legacy network authentication protocol to the on-premise application, the authentication request including the security ticket; and obtain (210, 326) access to the on-premise application. transmit (204, 316) a first request to authenticate a client application (140, 142, 450, 302), to access an on-premise application, the client application being executed by the at least one processor, the first request sent to an identity provider (112, 304) of a cloud computing service, the first request made through a cloud-based network authentication protocol, the on-premise application subject to a legacy network authentication protocol, the cloud-based network authentication protocol incompatible with the legacy network authentication protocol; in response to the first request, obtain (206, 320) a security token including a security ticket of the legacy network authentication protocol, the security ticket generated by the identity provider of the cloud computing service, the security token associated with the cloud-based network authentication protocol; transmit (208, 322) an authentication request using the legacy network authentication protocol to the on-premise application, the authentication request including the security ticket; and obtain (210, 326) access to the on-premise application.