Citrix Systems, Inc.

Other

Ashish Gujarathi

Ricardo Fernando Feijoo

Thomas Michael Kludy

Thierry Duchastel

Juliano Maldaner

Andrew John Ogle

Felipe Leon

Harold Teramoto

Vikas Nambiar

Santiago Acosta

Georgy Momchilov

Deepak A Sharma

Tom Kludy

Marcos Alejandro Di Pietro

Xiaodong Huang

Raymond Matthew Sampson

Krishna Kumar

Santosh Sampath Gummunur Chiranjeevi

Luis Atencio

Michael East

Andrew Ogle

Described embodiments provide systems, methods, non-transitory computer-readable medium for initiating one-factor or multi-factor authentication. A device comprising one or more processors and coupled to memory. The device can receive a request to authenticate a user to enable access to an application by the user. The request can originate from an Internet Protocol (IP) address external to a network hosting the application. The device can determine that a previous request to authenticate the user originated from the IP address and was approved based on successful completion of multi-factor authentication by the user. The device can provide, responsive to the determination, the user with access to the application using one-factor authentication instead of the multi-factor authentication.

Secondary multifactor authentication

Described embodiments provide systems, methods, non-transitory computer-readable medium for using a single sign-on (SSO) to access an application. A client application on a client device in communication with an identity provider and an application on a remote computing device. The client application can authenticate a user via an identity provider to establish an authentication session. The client application can identify a request to access a uniform resource locator (URL) of the application hosted on the remote computing device. The client application can determine that a configuration of the client application identifies a remapped URL for the URL is available. The client application can access the remapped URL instead of the URL to cause the user to use the authentication session of the identity provider and be redirected from the identity provider to a link of the application on the remote computing device.

Remapping of uniform resource locators for accessing network applications

Methods and systems for token transfer are described herein. A remote computing device may receive, from a mobile computing device, a public key of a public-private key pair. The public key may be associated with a first application of the mobile computing device. The first application may be configured to send credentials to a second application of the mobile computing device. The second application may be isolated from other applications executable on the mobile computing device. The remote computing device may receive, from the first application, a token. The token may have been previously issued to the first application and may have been encrypted, using the public key, by the first application. The remote computing device may send, to the second application, the token to enable the second application to authenticate with a plurality of services that interact with the second application.

Enhanced token transfer

Described embodiments provide systems, methods, computer readable media for accessing services via identity providers. A computing device may transmit, responsive to a request from a client to access a service, a value to the client. The client may be configured to access the service using an access token. The computing device may receive, from the client, a signature, the signature generated using the value, a device identifier, and a first encryption key. The computing device may determine, using the value and a second encryption key, the device identifier from the signature. The computing device may identify a status of the client according to the device identifier. The computing device may provide, responsive to the status, a new access token to permit access to the access and a refresh token to obtain subsequent access tokens.

Authenticating access to computing resources

Described embodiments provide systems and methods for selecting a version of an application to launch for a client device according to a context of the client device. A computing device can receive a request from a client device to launch an application. The request can include an identifier that indicates multiple versions of the application are accessible in which to launch the application. The computing device can select, using the identifier, a version of the application according to a context of the client device. The computing device can provide the client device with access to the selected version of the application, so as to enable the client device to launch a version of the application compatible with the context of the client device.

Selecting a version of an application

System and methods discussed for automatically generating conversation-based reports from email threads for easier and more intuitive user-consumption may include a parser, configured to identify all related emails, extract relevant portions of each email including embedded or in-line comments within quoted portions, and generate a single report document that presents the conversation in chronological order. Duplicate portions of each email are automatically removed and excluded from the report, reducing memory and bandwidth requirements, and also making the report more intuitive and easier to read. Attachments to the email may be included in the report, with additional deduplication to further reduce memory and bandwidth requirements.

Enhance a mail application to format a long email conversation for easy consumption

Methods and systems for recording, tracking, and analyzing digital software usage in a distributed database that is used by multiple participants are described herein. A single usage event may occur, and may be identified by a client device. The usage event may be emitted to one or more nodes, which may include an aggregator node and/or one or more validator nodes. A block in a distributed database may be created to record the usage event. A mixed-mode mechanism may be used by one or more devices to validate the usage event.

Mobile auditable and tamper-resistant digital-system usage tracking and analytics

A mobile computing device is configured to allow a user to launch native SaaS applications from different vendors using a single-sign-on without having to modify or hook the native SaaS applications. A VPN application operates as man-in-the-middle (MITM) for identity provider requests from SaaS services. The VPN application is initially authenticated with the identity provider, and receives an IDP authentication token which is stored. The IDP authentication token is used for authentication requests from SaaS services.

Single-sign-on for third party mobile applications

Systems and methods for accessing single-tenant databases comprising a multi-tenant aware cluster manager in communication with instances of single-tenant databases are described. The cluster manager can establish a uniform resource locator (URL) unique for each tenant to access the cluster manager. Each of the instances of single-tenant databases can include data for a corresponding tenant. The cluster manager can receive a request from a client to access a database corresponding to the first tenant. The request can include the URL established for the first tenant. The cluster manager can identify the first tenant based on the URL of the request. The cluster manager can obtain, responsive to identification of the first tenant, a tenant context of the first tenant from a storage. The cluster manager can access, using the first tenant context and responsive to the request, a first instance of the single-tenant databases corresponding to the first tenant.

Methods for enhancing a legacy single tenant application system to a multi-tenant application system with minimal changes

Described embodiments may provide deployment of updates to multiple entities. A canary deployment manager may receive a request to deploy an update in canary deployments. The canary deployment manager may determine, for each entity of a plurality of entities, a support score based on support issues experienced by each entity. The canary deployment manager may determine, for each entity, a monitoring score based on at least one performance or availability issue experienced by each entity. The canary deployment manager may generate, for each entity, based on the support score of each entity and the monitoring score of each entity, a canary score used to identify a canary deployment to which to assign each entity. The canary deployment manager may select a subset of the plurality of entities to assign to a first canary wave of the canary deployments based on the respective canary scores of each of the subset.

Method for optimized canary deployments for improved customer experience

The embodiments are directed to methods and devices for creating one or more network groups. The methods and devices can define a network group with one or more properties. The methods and devices can identify a plurality of isolated networks, and can assign the plurality of isolated networks to the defined network group. The methods and devices can assign machines to at least one of the plurality of isolated networks, wherein the network group enables unrestricted routing.

Methods and systems for creating and managing network groups

Methods, systems, and computer-readable media for using a multi-tenant web relay service to provide secure access to on-premises web services from a tenant-specific cloud service are described herein. In one or more embodiments, a multi-tenant web relay service may receive from a tenant-specific cloud service a connection request to an on-premises web service hosted within a tenant datacenter. The connection request may comprise data indicating a display-friendly name of the web service and the tenant datacenter. Responsive to receiving the request, the web relay service may forward the connection request to the on-premises web service via a rendezvous support service and a web relay agent. Responsive to receiving the connection request, the on-premises web service may generate a response which may be relayed back to the tenant-specific cloud service by the multi-tenant web relay service.

Growing community of inventors

Parkland, FL, United States of America

Ashish Gujarathi