Abstract: Disclosed herein is a technique for authenticating an application operating on a client device with an authentication server device based on user credentials associated with an identity provider. In particular, the authentication server device facilitates the authorization process between the application and the identity provider without exposing, to the application, either the user credentials or an authorization code generated by the identity provider.