Systems and methods for associating an operating system user account with a single sign-on identifier

Abstract

In one embodiment, a method includes receiving a first notification indicating that a user has logged into a client computing device associated with the user, the first notification comprising a unique user identifier, a unique device identifier, and a client username, validating the first notification using a public key associated with the client computing device, determining whether a pairing record between a tuple of the client username and the unique device identifier and a single sign-on (SSO) identifier associated with the user exists in a database associated with the computing system, creating a temporary pairing record corresponding to a combination of the unique user identifier, the unique device identifier, and the client username into the database, receiving a request to log in to an SSO-protected resource determining whether the temporary pairing record exists in the database, and creating, in response to the determination that the temporary pairing record exists, the pairing record between the tuple of the client username and the unique device identifier and the SSO identifier.