Patent ID: 8484711

Claim:
A computer implemented method for providing access to an application resident on an application server, the method comprising: receiving, from a user-operated computing device over a first communication channel, a login session request at the application, the login session request comprising identity data for the user-operated computing device; intercepting, via an access control module resident on the application server, the login session request; transmitting, from the access control module over the first communication channel, a redirect command indicating that no session exists for the user-operated computing device with the application; redirecting, via the user-operated computing device, the login session request to a proxy gateway over a second communication channel, wherein the proxy gateway has an application-specific access management agent for facilitating authentication of the identity data; receiving, at the access control module, a proxy request from the proxy gateway over a third communication channel, the proxy request comprising authenticated identity data for the user-operated computing device; validating, at the access control module, that the proxy request was sent over the third communication channel from the proxy gateway; transmitting, to the user-operated computing device, from the access control module via the proxy gateway over the third and second communication channels respectively, a response to the proxy request comprising a session cookie generated by the access control module; and receiving, from the user-operated computing device, over the first communication channel at the access control module, the session cookie for establishing a session between the user-operated computing device and the application.