A computer-implemented method comprising: directing, by an authentication module, an independent browser, executable on a mobile computing device, to access a uniform resource locator, URL, of an authentication appliance, wherein a mobile client application without an integrated browser comprises the authentication module, wherein authentication information is associated with a user of the mobile computing device, and wherein the authentication appliance is configured to provide single-sign-on, SSO, services, wherein the services comprise acceptance of, for purposes of authentication, in lieu of the authentication information, a previously created valid browser-accessible token that was the result of a previous authentication between the authentication appliance and one of: a mobile client application or the independent browser; transmitting, by the independent browser, the authentication information to the authentication appliance, the authentication appliance configured to verify, with an identity database, the authentication information; receiving, at the independent browser, from the authentication appliance, the browser-accessible token; registering, by the authentication module, a URL mapping within the independent browser, the URL mapping configured to trigger execution of the mobile client application without the integrated browser when the URL is accessed by the independent browser; receiving, at the authentication module, from the authentication appliance, a client application identity that indicates the user of the mobile computing device and that the user of the mobile computing device has been authenticated by the authentication appliance; and using the client application identity to obtain access to a network-based application service. directing, by an authentication module, an independent browser, executable on a mobile computing device, to access a uniform resource locator, URL, of an authentication appliance, wherein a mobile client application without an integrated browser comprises the authentication module, wherein authentication information is associated with a user of the mobile computing device, and wherein the authentication appliance is configured to provide single-sign-on, SSO, services, wherein the services comprise acceptance of, for purposes of authentication, in lieu of the authentication information, a previously created valid browser-accessible token that was the result of a previous authentication between the authentication appliance and one of: a mobile client application or the independent browser; wherein a mobile client application without an integrated browser comprises the authentication module, wherein authentication information is associated with a user of the mobile computing device, and wherein the authentication appliance is configured to provide single-sign-on, SSO, services, wherein the services comprise acceptance of, for purposes of authentication, in lieu of the authentication information, a previously created valid browser-accessible token that was the result of a previous authentication between the authentication appliance and one of: a mobile client application or the independent browser; transmitting, by the independent browser, the authentication information to the authentication appliance, the authentication appliance configured to verify, with an identity database, the authentication information; receiving, at the independent browser, from the authentication appliance, the browser-accessible token; registering, by the authentication module, a URL mapping within the independent browser, the URL mapping configured to trigger execution of the mobile client application without the integrated browser when the URL is accessed by the independent browser; receiving, at the authentication module, from the authentication appliance, a client application identity that indicates the user of the mobile computing device and that the user of the mobile computing device has been authenticated by the authentication appliance; and using the client application identity to obtain access to a network-based application service.