Patent ID: 8875259

Claim:
A computer program product, comprising a non-transitory computer usable medium having a computer readable program code embodied therein, the computer readable program code adapted to be executed to cause a computer to implement a method comprising: receiving a request to access an on-demand service from a requestor associated with one of a plurality of entities of the on-demand service, wherein the requestor has transmitted a valid username and password from a device for accessing the on-demand service; determining that the request to access the on-demand service is from a potentially risky source including that the device of the requestor is unrecognized using stored information associated with at least one of a plurality of users or the one of the plurality of entities; and managing access to the on-demand service by the requestor as a condition of permitting the requestor to access the on-demand service from the device, wherein managing the access to the on-demand service includes: providing a message containing a valid token to a predetermined location that corresponds to the valid username provided by the requestor, wherein the predetermined location is separate from the unrecognized device of the requestor, after providing the message containing the valid token to the predetermined location, receiving a second request to access the on-demand service from the unrecognized device, the second request including the valid token, and in response to receiving the second request including the valid token, verifying a machine identifier of the unrecognized device and permitting access to the on-demand service by the unrecognized device.