Patent ID: 8544074

Claim:
A method comprising: obtaining a system security token for a user when the user signs in to an enterprise network using domain-joined credentials, the domain-joined credentials including an identifier of the user; automatically transmitting a request for authentication to a home security authority of the user, the request including the system security token, the home security authority of the user associated with a first realm, and the user having an account with the first realm; receiving a partner security token in response to transmitting the request for authentication; submitting the partner security token to a non-home security authority associated with a network service responsive to the user navigating to the network service, the non-home security authority and the network service associated with a second realm, and the user not having an account with the second realm, the first realm and the second realm being members of a federation; receiving from the non-home security authority a security token for accessing the network service, the user having an account with the home security authority but not with the non-home security authority; and accessing the network service using the security token received from the non-home security authority and without presenting a login user interface of the non-home security authority or the home security authority to the user.