Single sign on (SSO) capability for services accessed through messages

1. A system for implementing single sign on (SSO) for third-party services accessible through received messages, the system comprising:

a client device comprising a processor and a memory;

a first application executable in the client device, wherein, when executed, the first application causes the client device to at least:

receive an email message associated with a third-party service, the email message including a selectable component configured to redirect a user to the third-party service upon selection, the third-party service requiring authentication of the user for access to content;

send a request for the content associated with the third-party service in response to a selection of the selectable component;

initialize a second application configured to intercept traffic between a network and the first application; and

render a user interface comprising the content associated with the third-party service in response to providing a SSO token to the third-party service for authentication, and

the second application executable in the client device, wherein, when executed, the second application causes the client device to at least:

intercept an authentication request from the third-party service;

redirect the authentication request and a device certificate associated with the client device to an identity manager to obtain the SSO token; and

receive the SSO token from the identity manager.

2. The system of claim 1 , wherein, when executed, the first application causes the client device to receive a user request to enable a SSO connector configured to interact with authenticating services.

3. The system of claim 2 , wherein, when executed, the first application causes the client device to send a request to the SSO connector for certificate data associated with the client device, the certificate data including a device certificate.

4. The system of claim 2 , wherein the SSO connector is configured to comply with an administrator-defined authentication mechanism.

5. The system of claim 1 , wherein the selectable component is an embedded uniform resource locator (URL).

6. The system of claim 1 , wherein, when executed, the first application causes the client device to at least:

generate a prompt requesting the user to select the selectable component; and

display the prompt on a display of the client device.

7. The system of claim 1 , wherein the second application provides the SSO token to the first application in response to receiving the SSO token from the identity manager.

8. A method for implementing single sign on (SSO) for third-party services accessible through received messages, the method comprising:

receiving, by a first application installed on a client device, an email message associated with a third-party service, the email message including a selectable component configured to redirect a user to a third-party service upon selection, the third-party service requiring authentication of the user for access to content;

sending, by the first application, a request for the content associated with the third-party service in response to a selection of the selectable component;

initializing, by the first application, a second application configured to intercept traffic between a network and the first application;

intercepting, by the second application, an authentication request from the third-party service;

redirecting, by the second application, the authentication request and a device certificate associated with the client device to an identity manager to obtain a SSO token;

receiving, by the second application, the SSO token from the identity manager; and

rendering, by the first application, a user interface comprising the content associated with the third-party service in response to providing the SSO token to the third-party service for authentication.

9. The method of claim 8 , further comprising receiving, by the first application, a user request to enable a SSO connector configured to interact with authenticating services.

10. The method of claim 9 , further comprising sending, by the first application, a request to the SSO connector for certificate data associated with the client device, the certificate data including a device certificate.

11. The method of claim 9 , wherein the SSO connector is configured to comply with an administrator-defined authentication mechanism.

12. The method of claim 8 , wherein the selectable component is an embedded uniform resource locator (URL).

13. The method of claim 8 , further comprising:

generating, by the first application, a prompt requesting the user to select the selectable component; and

displaying, by the first application, the prompt on a display of the client device.

14. The method of claim 8 , wherein the second application provides the SSO token to the first application in response to receiving the SSO token from the identity manager.

15. A non-transitory computer readable medium for implementing single sign on (SSO) for third-party services accessible through received messages, the non-transitory computer readable medium comprising machine-readable instructions that, when executed by a processor of a client device, cause the client device to at least:

receive, by a first application executed by the client device, an email message associated with a third-party service, the email message including a selectable component configured to redirect a user to a third-party service upon selection, the third-party service requiring authentication of the user for access of content;

send, by the first application executed by the client device, a request for the content associated with the third-party service in response to a selection of the selectable component;

initialize, by the first application executed by the client device, a second application, the second application being configured to intercept traffic between a network and the first application;

intercept, by the second application executed by the client device, an authentication request from the third-party service;

redirect, by the second application executed by the client device, the authentication request and a device certificate associated with the client device to an identity manager to obtain a SSO token;

receive, by the second application executed by the client device, the SSO token from the identity manager; and render, by the first application executed by the client device, a user interface comprising the content associated with the third-party service in response to providing the SSO token to the third-party service for authentication.

16. The non-transitory computer readable medium of claim 15 , wherein the machine-readable instructions, when executed by the processor of the client device, further cause the client device to at least receive, by the first application, a user request to enable a SSO connector configured to interact with authenticating services.

17. The non-transitory computer readable medium of claim 16 , wherein the machine-readable instructions, when executed by the processor of the client device, further cause the client device to at least send, by the first application, a request to the SSO connector for certificate data associated with the client device, the certificate data including a device certificate.

18. The non-transitory computer readable medium of claim 15 , wherein the selectable component is an embedded uniform resource locator (URL).

19. The non-transitory computer readable medium of claim 15 , wherein the machine-readable instructions, when executed by the processor of the client device, further cause the client device to at least:

generate, by the first application, a prompt requesting the user to select the selectable component; and

display, by the first application, the prompt on a display of the client device.

20. The non-transitory computer readable medium of claim 15 , wherein the second application provides the SSO token to the first application in response to receiving the SSO token from the identity manager.