| CPC H04L 9/3213 (2013.01) [H04L 9/3228 (2013.01)] | 20 Claims |

|
1. A device comprising:
one or more processors configured to:
receive, from a first service, a first access request to request access to a second service on behalf of a user, wherein the first access request includes a user identifier of the user and a first service identifier of the first service;
based on determining that the user has granted authorization to the first service to access the second service on behalf of the user, generate a proxy authentication token based on the first access request; and
send a second access request to the second service, wherein the second access request includes the first service identifier and the proxy authentication token.
|