Communicating with client device to determine security risk in allowing access to data of a service provider

1. A method comprising:

receiving, via a processor from an identity broker, a request regarding access by a client device to a service provided by a service provider;

in response to receiving the request, determining a first security state of the client device representing a risk of compromise associated with the client device;

determining that the first security state of the client device is a secure state representing a risk level below a threshold risk;

in response to determining that the first security state of the client device is the secure state, sending to the identity broker an indication that the client device is in the secure state indicating to the identity broker permission to authorize direct access by the client device to the service provider, wherein the identity broker is configured to, in response to receiving the permission, send a communication to the service provider that approves the direct access by the client device;

determining that the client device has changed to a new security state; and

in response to determining that the client device has changed to the new security state, replacing a component of an application in the client device corresponding to the new security state.

2. The method of claim 1 , wherein the determination of the first security state includes transmitting a request for a first context to the client device.

3. The method of claim 2 , further comprising receiving the first context from the client device, the first context representing information related to the security of the client device, and determining the first security state based on the first context.

4. The method of claim 3 , wherein the first context includes information about an operating system of the client device.

5. The method of claim 3 , further comprising determining a second security state, and in response to determining the second security state transmitting a second indication representing whether to permit access between the client device and the service provider.

6. The method of claim 5 , wherein the determined second security state indicates compromise of the client device.

7. The method of claim 3 , further comprising determining that a component on the client device responsible for collecting information related to the first context is not initiated, and sending a request to the client device to initiate the component.

8. A system comprising:

at least one processor; and

memory storing instructions configured to instruct the at least one processor to:

receive, from an identity broker, a request regarding access by a client device to a service provided by a service provider;

in response to receiving the request, determine a first security state of the client device representing a risk of compromise associated with the client device;

determine that the first security state of the client device is a secure state representing a risk level below a threshold risk;

in response to determining that the first security state of the client device is the secure state, send to the identity broker an indication that the client device is in the secure state indicating to the identity broker permission to authorize direct access by the client device to the service provider, wherein the identity broker is configured to, in response to receiving the permission, send a communication to the service provider that approves the direct access by the client device;

determine that the client device has changed to a new security state; and

in response to determining that the client device has changed to the new security state, replace a component of an application in the client device corresponding to the new security state.

9. The system of claim 8 , wherein the determination of the first security state includes transmitting a request for a first context to the client device.

10. The system of claim 9 , wherein the instructions are further configured to instruct the processor to receive the first context from the client device, the first context representing information related to the security of the client device, and determining the first security state based on the first context.

11. The system of claim 10 , wherein the first context includes information about an operating system of the client device.

12. The system of claim 10 , wherein the instructions are further configured to instruct the processor to determine a second security state, and in response to determining the second security state transmit a second indication representing whether to permit access between the client device and the service provider.

13. The system of claim 12 , wherein the determined second security state indicates compromise of the client device.

14. The system of claim 10 , wherein the instructions are further configured to instruct the processor to determine that a component on the client device responsible for collecting information related to the first context is not initiated, and send a request to the client device to initiate the component.

15. A non-transitory computer-readable storage medium storing computer-readable instructions, which when executed, cause a computing device at least to:

receive, from an identity broker, a request regarding access by a client device to a service provided by a service provider;

in response to receiving the request, determine a first security state of the client device representing a risk of compromise associated with the client device;

determine that the first security state of the client device is a secure state representing a risk level below a threshold risk;

in response to determining that the first security state of the client device is the secure state, send to the identity broker an indication that the client device is in the secure state indicating to the identity broker permission to authorize a direct access by the client device to the service provider, wherein the identity broker is configured to, in response to receiving the permission, send a communication to the service provider that approves the direct access by the client device;

determine that the client device has changed to a new security state; and

in response to determining that the client device has changed to the new security state, replace a component of an application in the client device corresponding to the new security state.

16. The non-transitory computer-readable storage medium of claim 15 , wherein the determination of the first security state includes transmitting a request for a first context to the client device.

17. The non-transitory computer-readable storage medium of claim 16 , wherein the instructions further cause the computing device to receive the first context from the client device, the first context representing information related to the security of the client device, and determine the first security state based on the first context.

18. The non-transitory computer-readable storage medium of claim 17 , wherein the first context includes information about an operating system of the client device.

19. The non-transitory computer-readable storage medium of claim 17 , wherein the instructions further cause the computing device to determine a second security state, and in response to determining the second security state transmit a second indication representing whether to permit access between the client device and the service provider.

20. The non-transitory computer-readable storage medium of claim 19 , wherein the determined second security state indicates compromise of the client device.

21. The non-transitory computer-readable storage medium of claim 17 , wherein the instructions further cause the computing device to determine that a component on the client device responsible for collecting information related to the first context is not initiated, and send a request to the client device to initiate the component.