User Identifier Based Device, Identity and Activity Management System

The present disclosure generally relates to user and device Authentication. More specifically, the present disclosure relates to a technique of single sign-on (SSO) authentication. An apparatus embodiment of a single sign-on (SSO) authentication system comprises a service provider node configured to provide access to at least one service over a network; an identity authenticator accessible over the network; a user terminal including an authentication component configured to build a secure association with the identity authenticator; and a user agent configured to access the service provider node to request a service of the provided at least one service. The service provider node is further configured to request a user identifier from a user and to request the identity authenticator for verification of a given user identifier. The identity authenticator is further configured to connect to the authentication component of the user terminal to verify the user identifier and to provide the service provider node with verification information indicating the verification of the given user identifier. A corresponding identity authenticator, user terminal and method are also provided.