5. The method of claim 1 , further comprising: receiving a login request from said client at said second server; challenging said client to provide authentication data; receiving said authentication data; processing said authentication data to authenticate said client; generating said first single-use domain token; generating an authentication response; and providing said authentication response and said first single-use domain token to said client.
1. A method for controlling access to protected resources within a distributed data processing system, the method comprising: using a processor configured to perform data processing operations; receiving at a first server from a client a first single-use domain token associated with said client and a request to access a protected resource; validating said single-use domain token; generating a client authorization credential request; sending to a second server said client authorization credential request, said first single-use domain token, and a second single-use domain token associated with said first server, wherein said first server and said second server are operated within a common domain; receiving a single-use service token from said second server, said single-use service token associated with said client; processing said single-use service token to generate a response to said request; refreshing said single-use service token; and providing said response and said refreshed single-use service token to said client.