Patent ID: 8683565

Claim:
A method comprising: obtaining access for a user to an external service in a networked environment, wherein the user has access to a client that is capable of communicating with a home server of an organization in a first domain and with a foreign server in a second domain, the second domain being different from the first domain by: detecting a request of the client in the home server; maintaining in the home server, a shared secret common to the organization in the first domain and the external service, and an authentication script; identifying in the home server, a pointer to the authentication script in the request; responsive to the request, performing, in the home server, by the authentication script: obtaining at least one detail related to the user, comprising an identifier that specifies the user within the organization; passing, without intervention from the client, the at least one detail and the shared secret or a derivative of the shared secret from the home server to the foreign server; receiving in the home server, without intervention from the client, redirecting information from the foreign server; forming in the home server, based on the request and the redirecting information, a response to the client, the response being configured to redirect the client to a temporary address at which the client can obtain access data to the external service; and sending the response from the home server to the client.