An apparatus for enabling a user of a first mobile device to extend user authentication credentials to a second mobile device, the apparatus comprising: a server having a processor that is configured to: authenticate the user via the first mobile device; in response to authenticating the user, issue and send a first identity token to the first mobile device, wherein the first identity token can be utilized to authenticate the user of the first mobile device to a service provider; generate a collaboration credential, wherein generation of the collaboration credential is based on one or more of user authentication and receipt of a collaboration request associated with the first identity token and wherein the collaboration credential is sharable among a plurality of mobile devices; send the collaboration credential to the first mobile device; receive the collaboration credential from the second mobile device; verify the collaboration credential received from the second mobile device; in response to verifying the collaboration credential received from the second mobile device, issue and send a second identity token to the second mobile device, wherein the second identity token can be utilized to authenticate the second mobile device to the service provider; and wherein the processor further is configured to receive, from the first mobile device and in response to sending the collaboration credential to the first mobile device, a collaboration notification that identifies the first mobile device as a source of the collaboration credential and identifies the second mobile device as a recipient of the collaboration credential. a server having a processor that is configured to: authenticate the user via the first mobile device; in response to authenticating the user, issue and send a first identity token to the first mobile device, wherein the first identity token can be utilized to authenticate the user of the first mobile device to a service provider; generate a collaboration credential, wherein generation of the collaboration credential is based on one or more of user authentication and receipt of a collaboration request associated with the first identity token and wherein the collaboration credential is sharable among a plurality of mobile devices; send the collaboration credential to the first mobile device; receive the collaboration credential from the second mobile device; verify the collaboration credential received from the second mobile device; in response to verifying the collaboration credential received from the second mobile device, issue and send a second identity token to the second mobile device, wherein the second identity token can be utilized to authenticate the second mobile device to the service provider; and wherein the processor further is configured to receive, from the first mobile device and in response to sending the collaboration credential to the first mobile device, a collaboration notification that identifies the first mobile device as a source of the collaboration credential and identifies the second mobile device as a recipient of the collaboration credential. authenticate the user via the first mobile device; in response to authenticating the user, issue and send a first identity token to the first mobile device, wherein the first identity token can be utilized to authenticate the user of the first mobile device to a service provider; generate a collaboration credential, wherein generation of the collaboration credential is based on one or more of user authentication and receipt of a collaboration request associated with the first identity token and wherein the collaboration credential is sharable among a plurality of mobile devices; send the collaboration credential to the first mobile device; receive the collaboration credential from the second mobile device; verify the collaboration credential received from the second mobile device; in response to verifying the collaboration credential received from the second mobile device, issue and send a second identity token to the second mobile device, wherein the second identity token can be utilized to authenticate the second mobile device to the service provider; and wherein the processor further is configured to receive, from the first mobile device and in response to sending the collaboration credential to the first mobile device, a collaboration notification that identifies the first mobile device as a source of the collaboration credential and identifies the second mobile device as a recipient of the collaboration credential.