Patent ID: 8863251

Claim:
A method, comprising: receiving a request to access an on-demand service from a client at one of a plurality of entities of the on-demand service; determining that a source of the request to access the on-demand service provides a risk of access, the determination being based at least in part on both: received information associated with at least one of a plurality of users, and stored information of the one of the plurality of entities of on-demand service to which the access is requested; in response to the request to access the on-demand service and the determination that the source of the request provides the risk of access, managing the risk of access to the on-demand service by the client utilizing a processor by: generating a message utilizing a valid username associated with the client as well as contact information for the client stored locally at the on-demand service, where the message is generated in response to the receipt of the entry of the valid username and a valid password by the client; providing via the message a valid token to the client as a condition of permitting access to the on-demand service by the client, wherein the valid token is provided to the client by the on-demand service; receiving a second request to access the on-demand service from the client at another one of the plurality of entities; and in response to receiving the second request to access the on-demand service, and after providing the valid token to the client, verifying a machine identifier of a device associated with the client as a condition of permitting access to the on-demand service by the client.