Systems and methods for improved authentication

1. An authentication method to provide single-sign on (“SSO”) to a first application that is not SSO enabled, comprising:

receiving, at an authentication server, a request to authenticate the first application executing on a user device;

assigning a unique request token to the request from the first application;

loading a script to a component that executes on the user device and displays content within the first application, wherein the script:

includes the unique request token, and

causes a portal application executing on the user device to launch, wherein the portal application provides SSO access to the first application by authenticating the user, and wherein the portal application displays icons corresponding to a plurality of applications available to the user;

receiving, at the authentication server from the portal application, an authentication request that includes the unique request token and an access token accessible to the portal application;

validating the authentication request; and

authenticating the user at the first application.

2. The method of claim 1 , wherein the script causes the portal application to confirm enrollment of the user device.

3. The method of claim 1 , wherein the component implements a WebView class of an operating system.

4. The method of claim 1 , wherein validating the authentication request comprises requesting a refreshed access token from the portal application.

5. The method of claim 1 , further comprising redirecting the user to an authentication interface for the authentication server after a predetermined time period elapses without having authenticated the user at the first application.

6. The method of claim 1 , wherein the first application is not within the plurality of applications selectable from within the portal application.

7. A non-transitory, computer-readable medium comprising instructions that, when executed by a processor of a computing device, perform stages for providing single-sign on (“SSO”) authentication to a first application that is not SSO enabled, the stages comprising:

receiving, at an authentication server, a request to authenticate the first application executing on a user device;

assigning a unique request token to the request from the first application;

loading a script to a component that executes on the user device and displays content within the first application, wherein the script:

includes the unique request token, and

causes a portal application executing on the user device to launch, wherein the portal application provides SSO access to the first application by authenticating the user, and wherein the portal application displays icons corresponding to a plurality of applications available to the user;

receiving, at the authentication server from the portal application, an authentication request that includes the unique request token and an access token accessible to the portal application;

validating the authentication request; and

authenticating the user at the first application.

8. The non-transitory, computer-readable medium of claim 7 , wherein the script causes the portal application to confirm enrollment of the user device.

9. The non-transitory, computer-readable medium of claim 7 , wherein the component implements a WebView class of an operating system.

10. The non-transitory, computer-readable medium of claim 7 , wherein validating the authentication request comprises requesting a refreshed access token from the portal application.

11. The non-transitory, computer-readable medium of claim 7 , the stages further comprising redirecting the user to an authentication interface for the authentication server after a predetermined time period elapses without having authenticated the user at the first application.

12. The non-transitory, computer-readable medium of claim 7 , wherein the first application is not within the plurality of applications selectable from within the portal application.

13. A system for providing single-sign on (“SSO”) authentication to a first application that is not SSO enabled, comprising:

an authentication server having a processor and memory storage;

wherein the memory storage contains a non-transitory, computer-readable medium comprising instructions that, when executed by the processor, carry out stages comprising:

receiving, at an authentication server, a request to authenticate the first application executing on a user device;

assigning a unique request token to the request from the first application;

loading a script to a component that executes on the user device and displays content within the first application, wherein the script:

includes the unique request token, and

causes a portal application executing on the user device to launch, wherein the portal application provides SSO access to the first application by authenticating the user, and wherein the portal application displays icons corresponding to a plurality of applications available to the user;

receiving, at the authentication server from the portal application, an authentication request that includes the unique request token and an access token accessible to the portal application;

validating the authentication request; and

authenticating the user at the first application.

14. The system of claim 13 , wherein the script causes the portal application to confirm enrollment of the user device.

15. The system of claim 13 , wherein validating the authentication request comprises requesting a refreshed access token from the portal application.

16. The system of claim 13 , the stages further comprising redirecting the user to an authentication interface for the authentication server after a predetermined time period elapses without having authenticated the user at the first application.

17. The system of claim 13 , wherein the first application is not within the plurality of applications selectable from within the portal application.