1. A method comprising: receiving credentials for a user at a first domain receiving a request from the user at the first domain to redirect to a second domain; redirecting the user to the second domain; generating a token based on the user credentials on the first domain; sending the token to the user and storing the token; receiving a request from the user at the second domain, the request including the token; comparing the received token to the stored token and conditionally authenticating the user at the second domain based on the token comparison.