Patent ID: 8832857

Claim:
A method of detecting that a computing device associated with a first user is unsecured, comprising: during a session established with the first user, receiving a request from the computing device and made by a second user, the request being a request to access an identity provider where the first user has an account but has not yet authenticated for the session; following authentication of the second user at the identity provider, automatically invoking a federated single sign-on (F-SSO) to the identity provider on behalf of the second user; receiving results from the invoked F-SSO; analyzing information returned in the results to detect an authentication anomaly that indicates the computing device is being used by the second user during the session established with the first user and thus is unsecured; and upon detecting an authentication anomaly, initiating an anomaly workflow; wherein at least one of the receiving, invoking, analyzing and initiating steps are carried out in software executing in a hardware element.