A method and a system for allowing computer-executable applications to
efficiently and securely obtain credentials required to access data from
a protected Web service utilizes an ID token. The ID token is associated
with an IP address of a user's computer, and is validated before
providing the credentials to the user's computer.