UNIFIED WORKSPACE FOR THIN, REMOTE, AND SAAS APPLICATIONS

• US 20120054625A1
• Filed: 08/26/2011
• Published: 03/01/2012
• Est. Priority Date: 08/30/2010
• Status: Active Grant

• Current Assignee: Vmware LLC (Broadcom, Inc.)
• Original Assignee: VMware, Inc. (Broadcom, Inc.)
• Inventors: PUGH, William, EAKES, Michael, BERNANDER, Ojvind, GUNDAVARAM, Pradyumna
• Granted Patent: US 8,990,699 B2
• Time in Patent Office: Days
• US Class Current: 715/736
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

Application-manager software authenticates a user of a client device over a channel. The authentication operation is performed using a directory service. The application-manager software presents a plurality of applications in a GUI displayed by the client device. The plurality of applications depends on the authentication, the client device, and the channel. And the plurality of applications includes a thin application and a software-as-a-service (SaaS) application. The application-manager software receives a selection as to an application from the user. If the selection is for the SaaS application, the application-manager software provisions the SaaS application. The provision includes automatically logging the user onto an account with a provider of the SaaS application using a single sign-on and connecting the user to the account so that the user can interact with the SaaS application. If the selection is for the thin application, the application manager software launches the thin application.

Claims

1. A method for providing applications to a user, the method comprising operations of:

authenticating a user of a client device over a channel, wherein the authentication operation is performed using a directory service;

presenting a plurality of applications in a graphical user interface (GUI) displayed by the client device, wherein the plurality of applications depends at least in part on the authentication, the client device, and the channel and wherein the plurality of applications includes a thin application and a software-as-a-service (SaaS) application;

receiving a selection as to an application from the user;

provisioning the SaaS application, if the selection is for the SaaS application, wherein the provisioning includes automatically logging the user onto an account with a provider of the SaaS application using a single sign-on protocol and connecting the user to the account so that the user can interact with the SaaS application; and

launching the thin application, if the selection is for the thin application, wherein each operation of the method is executed by one or more processors.

2. The method of claim 1, wherein the thin application is a sandboxed application.

3. The method of claim 1, wherein the plurality of applications further includes a remote application.

4. The method of claim 3, wherein the remote application is a desktop virtualization application.

5. The method of claim 1, wherein the SaaS application is a web application.

6. The method of claim 1, wherein the plurality of applications displayed to the user depends at least in part on the geolocation of the user.

7. The method of claim 6, further comprising the operation of gathering statistics on use of the plurality of applications displayed to the user and the geolocation of the use.

8. The method of claim 1, wherein the provisioning operation is performed just-in-time (JIT).

9. The method of claim 1, wherein the directory service is an Active Directory (AD) service.

10. A computer-readable storage medium, which is non-transitory, storing a program that when executed, instructs one or more processors to perform the following operations:

authenticate a user of a client device over a channel, wherein the authentication operation is performed using a directory service;

presenting a plurality of applications in a graphical user interface (GUI) displayed by the client device, wherein the plurality of applications depends at least in part on the authentication, the client device, and the channel and wherein the plurality of applications includes a thin application and a software-as-a-service (SaaS) application;

receiving a selection as to an application from the user;

provisioning the SaaS application, if the selection is for the SaaS application, wherein the provisioning includes automatically logging the user onto an account with a provider of the SaaS application using a single sign-on and connecting the user to the account so that the user can interact with the SaaS application; and

launching the application, if the selection is for the thin application.

11. The computer-readable storage medium of claim 10, wherein the thin application is a sandboxed application.

12. The computer-readable storage medium of claim 10, wherein the plurality of applications further includes a remote application.

13. computer-readable storage medium of claim 12, wherein the remote application is a desktop virtualization application.

14. The computer-readable storage medium of claim 10, wherein the SaaS application is a web application.

15. The computer-readable storage medium of claim 10, wherein the plurality of applications displayed to the user depends at least in part on the geolocation of the user.

16. The computer-readable storage medium of claim 15, further comprising the operation of gathering statistics on use of the plurality of applications displayed to the user and the geolocation of the use.

17. The computer-readable storage medium of claim 10, wherein the provisioning operation is performed just-in-time (JIT).

18. The computer-readable storage medium of claim 10, wherein the directory service is an Active Directory (AD) service.

19. A method for providing applications to a user, the method comprising operations of:

authenticating a user of a client device over a channel, wherein the authentication operation is performed using a directory service;

presenting a plurality of applications in a graphical user interface (GUI) displayed by the client device, wherein the plurality of applications depends at least in part on the user authentication, the client device, and a geolocation of the client device and wherein the plurality of applications includes a sandboxed application and a software-as-a-service (SaaS) application;

receiving a selection as to an application from the user;

provisioning the SaaS application, if the selection is for the SaaS application, wherein the provisioning includes automatically logging the user onto an account with a provider of the SaaS application using a single sign-on and connecting the user to the account so that the user can interact with the SaaS application; and

launching the sandboxed application, if the selection is for the sandboxed application, wherein each operation of the method is executed by one or more processors.

20. The method of claim 20, wherein the plurality of applications displayed to the user further includes a virtualized desktop application.