1. A method comprising: receiving, at a server, a request from a client device to access a web application; passing the request to the web application; receiving a response from the web application; augmenting the response with policy data and a single sign-on application to create an augmented response; and returning the augmented response to the client device; wherein the single sign-on application is configured to: identify a platform associated with the client device; and execute one or more operations that are specific to the associated platform; wherein the single sign-on application executes in a client browser and is further configured to: request a policy associated with the web application; match a page received from the web application to the policy; request, from the server, credentials associated with a user to access the web application; receive one or more credentials from the server and inject the received credentials into one or more fields on the page based on the policy; and submit the received credentials to the web application; and wherein the single sign-on application is further configured to invoke an automated logon chooser process that submits the received credentials to the single sign-on application such that, upon the single sign-on application detecting a successful logon with one of the received credentials, the single sign-on application sends an update request to the server to update the credentials associated with the user for the web application using the received credentials associated with the successful logon.