Secure information exchange in federated authentication

Methods, apparatuses, systems, and computer-readable mediums for sharing user credentials in federated authentication are described herein. An identity provider may receive a user credential from a user device. The identity provider may receive, from a relying party, a request for an access token. The identity provider may encrypt the user credential based on 5 a nonce that is uniquely generated for the relying party. The identity provider may send a response to the relying party. The response may include the access token, the encrypted user credential, and the nonce. C) m00 0t ;t'j ~co C U) U) U) C " - jU)W j0 U)~~F' U)U L I'IJ) L.. 4=. L. CDwl)a o o 0 C.) 0)-7C U) ~~oU cna 0. ca 0 CL 0- CL ) (DLCU 0. 0 a> C.. tCO -M 0 CU w N > Co0 .C) n LOLO I- Cc 00 C C) C) toU CD t o 20CE1 - . LO( CL CL -0 CI-: - CD C#? C9 C9 0- 3: o2ca 002 LOU UD LOU CDLO CDL ! 0- 0 0-0o -a -a -a