Abstract: A request associated with access to a restricted computer resource by a computer application of a device is received via a first communication medium. It is determined that the request is provided by the device with an IP address not included in a group of authorized IP addresses. A registration secret is generated. A representation associated with the registration secret is provided via a second communication medium. A token signed using the registration secret is received. In response to successfully validating the token, a communication secret is generated and associated with an identifier associated with the device. The communication secret is provided for use by the computer application of the device to access the restricted computer resource.