A method comprising: enrolling a user device into a management service executed by a management server , wherein enrolling the user device with the management service comprises issuing, by the management service , a management identifier to the user device and whereby the user device is managed via the management service ; receiving, by a resource server , a first request from the user device communicatively coupled to a resource server , wherein the first request is a general request for access to resources hosted by the resource server ; receiving, by the management service , a second request from the resource server to determine whether the user device communicatively coupled to the resource server is authorized to access the resources hosted by the resource server ; determining whether the user device communicatively coupled to the resource server is authorized to access the resources hosted by the resource server based on whether the user device communicatively coupled to the resource server has been issued the management identifier and whether the user device satisfies at least one compliance rule; responsive to a determination that the user device communicatively coupled to the resource server is authorized to access the certain resources hosted by the resource server , providing a response to the resource server indicating which resources hosted by the resource server the user device communicatively coupled to the resource server is authorized; and, responsive to a determination that the user device communicatively coupled to the resource server is not authorized to access certain resources hosted by the resource server , providing a response to the resource server indicating which resources hosted by the resource server the user device communicatively coupled to the resource server is not authorized to access. enrolling a user device into a management service executed by a management server , wherein enrolling the user device with the management service comprises issuing, by the management service , a management identifier to the user device and whereby the user device is managed via the management service ; receiving, by a resource server , a first request from the user device communicatively coupled to a resource server , wherein the first request is a general request for access to resources hosted by the resource server ; receiving, by the management service , a second request from the resource server to determine whether the user device communicatively coupled to the resource server is authorized to access the resources hosted by the resource server ; determining whether the user device communicatively coupled to the resource server is authorized to access the resources hosted by the resource server based on whether the user device communicatively coupled to the resource server has been issued the management identifier and whether the user device satisfies at least one compliance rule; responsive to a determination that the user device communicatively coupled to the resource server is authorized to access the certain resources hosted by the resource server , providing a response to the resource server indicating which resources hosted by the resource server the user device communicatively coupled to the resource server is authorized; and, responsive to a determination that the user device communicatively coupled to the resource server is not authorized to access certain resources hosted by the resource server , providing a response to the resource server indicating which resources hosted by the resource server the user device communicatively coupled to the resource server is not authorized to access. <EOS>