Patent ID: 8346265

Claim:
A method comprising: receiving an authentication request, from a first secure intranet network in which a network service is provided, for an independently controlled second secure intranet network, with which a mobile user is associated, to authenticate the mobile user for local access to the network service from within the first secure intranet network, the authentication request being received at the second secure intranet network and comprising a request by the first secure intranet network for the second secure intranet network to authenticate the mobile user for local access to the network service from within the first secure intranet network; the second secure intranet network authenticating the mobile user according to user identity records at the second secure intranet network; and the second secure intranet network providing to the first secure intranet network an indication of a result of the authentication, the method further comprising: creating at the second secure intranet network a digital user identity to be used by the mobile user in the first secure intranet network, where the mobile user is successfully authenticated, wherein the providing comprises providing the user identity to the first secure intranet network.