SINGLE SIGN-ON FOR REMOTE DESKTOPS

• US 20130239204A1
• Filed: 04/30/2013
• Published: 09/12/2013
• Est. Priority Date: 09/15/2011
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Das, Manuvir, Yadav, Sudarshan, Kandhare, Arvind, Ranjan, Shivesh, Narang, Jimmy
• Granted Patent: US 8,856,917 B2
• Time in Patent Office: Days
• US Class Current: 726/18
• CPC Class Codes: G06F 2009/45562 Creating, deleting, cloning virtual machine instances
• CPC Class Codes: G06F 9/452 Remote windowing, e.g. X-Window System, desktop virtualisation protocols for virtual reality H04L67/131
• CPC Class Codes: H04L 63/0838 using one-time-passwords

Abstract

A mechanism is provided for automatically logging into a cloud based system that does not accept token log-on credentials generated by a single sign-on service. In an embodiment, a one-time password is automatically generated and persisted. The generated password is used to log in automatically to a cloud based system that does not accept tokens generated by the web-ID providers and for connecting to other services. Examples of such systems may include Windows, Linux, and iOS.

Claims

1. A method for managing a virtualized computing infrastructure, the method comprising:

instantiating one or more remote desktop configurations and making available, to a plurality of users via a remote network connection, the remote desktop configurations, wherein the remote desktop configurations each comprise an operating environment and software applications to be included in the operating environment;

receiving a request for a remote desktop session from one of the plurality of users, the remote desktop session conforming to one of the one or more remote desktop configurations;

in response to authentication of the one of the plurality of users, generating a one-time password for the one of the plurality of users based on identification information for the one of the plurality of users;

instantiating the requested remote desktop session and loading data and applications associated with the remote desktop session; and

persisting the one-time password for a duration of the remote desktop session and allowing access to said applications based on the one-time password until the one of the plurality of users indicates that the remote desktop session is to be terminated.

2. The method of claim 1, wherein said one of the plurality of users is authenticated by a web-based authentication service.

3. The method of claim 1, further comprising receiving indication from the web-based authentication service that the one of the plurality of users is authenticated.

4. The method of claim 3, wherein said generating is based on identification information provided by said web-based authentication service.

5. The method of claim 1, further comprising storing said one time password in a local credential store.

6. The method of claim 1, further comprising allowing said one of the plurality of users to access a second remote desktop session using the one-time password.

7. The method of claim 1, wherein said one-time password is deleted when a virtual machine hosting said remote desktop session is terminated.

8. A computing system comprising:

a computing device comprising at least one processor;

a memory communicatively coupled to said processor when said system is operational;

said memory having stored therein computer instructions that upon execution by the at least one processor cause;

instantiating one or more remote desktop configurations that makes available, to a plurality of users via a remote network connection, remote desktop configurations each comprising an operating environment and software applications to be included in the operating environment;

receiving a request for a remote desktop session from one of the plurality of users, the remote desktop session conforming to one of the one or more remote desktop configurations;

in response to authentication of the one of the plurality of users, generating a one-time password for the one of the plurality of users based on identification information for the one of the plurality of users;

instantiating the requested remote desktop session and loading data and applications associated with the remote desktop session;

persisting the one-time password for a duration of the remote desktop session and allowing access to said applications based on the one-time password until the one of the plurality of users indicates that the remote desktop session is to be terminated.

9. The computing system of claim 8, wherein said one of the plurality of users is authenticated by a web-based authentication service.

10. The computing system of claim 8, further comprising receiving indication from the web-based authentication service that the one of the plurality of users is authenticated.

11. The computing system of claim 10, wherein said generating is based on identification information provided by said web-based authentication service.

12. The computing system of claim 8, further comprising storing said one-time password in a local credential store.

13. The computing system of claim 8, further comprising allowing said one of the plurality of users to access a second remote desktop session using the one-time password.

14. The computing system of claim 8, wherein said one-time password is deleted when a virtual machine hosting said remote desktop session is terminated.

15. A computer readable storage device storing thereon computer executable instructions for managing a virtualized computing infrastructure, the computer readable storage medium comprising:

instructions for instantiating one or more remote desktop configurations that makes available, to a plurality of users via a remote network connection, remote desktop configurations each comprising an operating environment and software applications to be included in the operating environment;

instructions for receiving a request for a remote desktop session from one of the plurality of users, the remote desktop session conforming to one of the one or more remote desktop configurations;

instructions for generating a one-time password for the one of the plurality of users in response to authentication of the one of the plurality of users, the one-time password generated based on identification information;

instructions for instantiating the requested remote desktop session and loading data and applications associated with the remote desktop session;

instructions for persisting the one time password for the duration of the remote desktop session and allowing access to said applications until the one of the plurality of users indicates that the remote desktop session is to be terminated.

16. The computer readable storage medium of claim 15, wherein said one of the plurality of users is authenticated by a web-based authentication service.

17. The computer readable storage medium of claim 15, further comprising instructions for receiving indication from the web-based authentication service that the one of the plurality of users is authenticated.

18. The computer readable storage medium of claim 17, wherein said generating is based on identification information provided by said web-based authentication service.

19. The computer readable storage device of claim 15, further comprising instructions for storing said one-time password in a local credential store.

20. The computer readable storage medium of claim 17, wherein said generating is based on identification information provided by said web-based authentication service.