A computer-readable memory storing a plurality of instructions executable by one or more processors of a mobile device, the plurality of instructions comprising: instructions that cause the one or more processors to receive, by a security agent of the mobile device, a request to access a first remote service provider, the request provided to the security agent by a first local application of the mobile device; instructions that cause the one or more processors to log in a user associated with the first application to a remote authentication service provider, by the security agent transmitting a log in request; instructions that cause one or more processors to receive, by the security agent from the remote authentication service provider in response to the log in request, a first token for accessing the first remote service provider and a second token for accessing a second remote service provider; instructions that cause the one or more processors to provide, to the first local application by the security agent of the mobile device, the first token for accessing the first remote service provider; and instructions that cause the one or more processors to provide, to a second local application associated with the user, by the security agent of the mobile device, the second token for accessing the second remote service provider; wherein the first and second local applications are within a single sign-on group, and wherein the second token provided to the second local application is a second token for enabling the second local application to log in to a second remote service provider associated with the second local application on behalf of the user without the user providing log-in credentials to log in to the second remote service provider associated with the second local application. instructions that cause the one or more processors to receive, by a security agent of the mobile device, a request to access a first remote service provider, the request provided to the security agent by a first local application of the mobile device; instructions that cause the one or more processors to log in a user associated with the first application to a remote authentication service provider, by the security agent transmitting a log in request; instructions that cause one or more processors to receive, by the security agent from the remote authentication service provider in response to the log in request, a first token for accessing the first remote service provider and a second token for accessing a second remote service provider; instructions that cause the one or more processors to provide, to the first local application by the security agent of the mobile device, the first token for accessing the first remote service provider; and instructions that cause the one or more processors to provide, to a second local application associated with the user, by the security agent of the mobile device, the second token for accessing the second remote service provider; wherein the first and second local applications are within a single sign-on group, and wherein the second token provided to the second local application is a second token for enabling the second local application to log in to a second remote service provider associated with the second local application on behalf of the user without the user providing log-in credentials to log in to the second remote service provider associated with the second local application.