1. A method comprising: receiving, at a server computing system from a browser on a client computing system, a request to access a first web page; in response to the receiving the request, sending, from the server computing system to the client computing system, a second web page including an embedded executable program configured to run within the browser on the client computing system, wherein the embedded executable program, when executed on the client computing system, is operable to obtain a ticket-granting ticket stored on the client computing system and send the ticket-granting ticket to the server computing system; receiving, at the server computing system from the embedded executable program on the client computing system, the ticket-granting ticket; determining whether a user associated with the ticket-granting ticket is authorized to access the first web page; and in response to determining that the user is authorized to access the first web page, granting the requested access to the first web page.