Patent ID: 8332917

Claim:
A computer-implemented method comprising: receiving a first role selection from a client device, wherein the first role selection is selected from a plurality of roles, and wherein each of the roles includes one or more user accounts provisioned to access one or more software applications; notifying an authorization service of the first role selection; receiving, from the authorization service, a first authentication challenge that is based upon the first role selection received from the client device; transmitting the first authentication challenge to the client device; receiving a first authentication submission from the client device; authenticating the first authentication submission; and in response to authenticating the first authentication submission: granting the client device access to one or more of the software applications using the provisioned user accounts included in the first role selection; and recording audit data of usage of the software applications by the client device, wherein the audit data includes identification of the provisioned user accounts used to access the software applications using the first role selection, and wherein the recording further comprises: receiving, from the authorization service, an audit level that is based on the received first role selection; and gathering the audit data based on the received audit level.