1. A method comprising: receiving, at a server, a request from a client device to access a web application; passing the request to the web application; receiving a response from the web application; augmenting the response with policy data and a single sign-on application to create an augmented response; and returning the augmented response to the client device.