An authentication system comprising: a third-party identity provider, IDP, configured to authenticate a plurality of users through a series of one or more Hypertext Transfer Protocol, HTTP, redirections; a storage device hosting an application ; and a client device configured to send a first request for establishing a secure HTTP session with the storage device in order to access the application, said first request comprising credentials corresponding to a given user; and in response to receiving the first request, the storage device is configured to redirect the first request to the third-party IDP; in response to receiving the redirected first request, the third-party IDP is configured to send notification of successful authentication to the client device in response to verifying the credentials, said notification including a digital signature of the third-party IDP; in response to receiving the notification, the client device is configured to convey the notification to the storage device; in response to receiving the notification from the client device, the storage device is configured to validate the digital signature of the third-party IDP and send a first access token to the client device; in response to receiving the first access token, the client device is configured to establish a secure HTTP session with the storage device using the first access token; and in response to receiving a second request with the first access token from the client device for a secure shell, SSH, session, the storage device is configured to authenticate the client device based on the first access token that corresponds to the previously established secure HTTP session without requiring a password and establish the SSH session. a third-party identity provider, IDP, configured to authenticate a plurality of users through a series of one or more Hypertext Transfer Protocol, HTTP, redirections; a storage device hosting an application ; and a client device configured to send a first request for establishing a secure HTTP session with the storage device in order to access the application, said first request comprising credentials corresponding to a given user; and in response to receiving the first request, the storage device is configured to redirect the first request to the third-party IDP; in response to receiving the redirected first request, the third-party IDP is configured to send notification of successful authentication to the client device in response to verifying the credentials, said notification including a digital signature of the third-party IDP; in response to receiving the notification, the client device is configured to convey the notification to the storage device; in response to receiving the notification from the client device, the storage device is configured to validate the digital signature of the third-party IDP and send a first access token to the client device; in response to receiving the first access token, the client device is configured to establish a secure HTTP session with the storage device using the first access token; and in response to receiving a second request with the first access token from the client device for a secure shell, SSH, session, the storage device is configured to authenticate the client device based on the first access token that corresponds to the previously established secure HTTP session without requiring a password and establish the SSH session. <EOS>