Patent ID: 8898732

Claim:
A method, comprising: loading, by a computing device, a managed browser, the managed browser being configured to provide at least one managed mode in which one or more policies are applied to the managed browser, the one or more policies being configured to limit at least one function of the managed browser; receiving, by the computing device, from a user of the computing device, a single sign-on (SSO) credential that is associated with at least one user account; obtaining, by the computing device, enterprise data from one or more enterprise resources based on the SSO credential; and providing, by the computing device, access to the obtained enterprise data via the managed browser, wherein obtaining the enterprise data from the one or more enterprise resources based on the SSO credential includes: receiving an authentication challenge from at least one enterprise resource of the one or more enterprise resources; determining, based on at least one policy of the one or more policies, whether to provide the SSO credential to the at least one enterprise resource in response to the authentication challenge; and based on determining to provide the SSO credential to the at least one enterprise resource in response to the authentication challenge, providing the SSO credential to the at least one enterprise resource, wherein providing access to the obtained enterprise data via the managed browser includes enforcing at least one policy of the one or more policies based on the SSO credential, wherein the at least one enforced policy of the one or more policies is configured to limit access to the obtained enterprise data, and wherein enforcing the at least one policy of the one or more policies includes imposing one or more behavior limitations on the managed browser based on identity information associated with the SSO credential and state information associated with the computing device.