Abstract: Systems and methods for reconfiguring application windows in a display. An example method includes displaying a first application window and a second application window; receiving a drag input for moving the first application window; based on the drag input entering an invocation region, displaying a layout menu with a plurality of display layouts, each of the display layouts including one or more snap zones; receiving a hover of the first application window over a particular snap zone of a particular display layout of the plurality of display layouts; based on the hover of the first application window over the particular snap zone, displaying a zone-indicator pane corresponding to the particular snap zone; receiving a drop input of the first application window over the particular snap zone; and in response to the drop input, resizing and repositioning the first application window according the particular snap zone.

Abstract: In non-limiting examples of the present disclosure, systems, methods and devices for generating pivot tables are provided. A pivot table service may receive an indication to generate a pivot table. The pivot table service may transform a plurality of fields in an existing table in a software application from a first order to a semantic hierarchical order by applying a set of cardinality relationship rules to the plurality of fields. The pivot table service may identify a plurality of blocks comprising one or more fields from the semantic hierarchical order. Fields from each block may be populated and positioned in a pivot table that is being generated based on a cardinality value of each block.

Abstract: Methods, systems, and computer program products for using a confidence measure to automatically identify a diagnostic analyzer that applies to a diagnostic artifact. A plurality of diagnostic analyzers are each configured to analyze diagnostic artifacts relating to prior executions of software entities. A confidence measure is calculated for each diagnostic analyzer. Each confidence measure indicates a likelihood that the diagnostic analyzer applies to a particular diagnostic artifact. Calculating each confidence measure comprises applying one or more heuristics specific to the diagnostic analyzer against the particular diagnostic artifact, with an outcome of application of each heuristic contributing to the confidence measure for the respective diagnostic analyzer.

Abstract: A method and system for intelligently organizing one or more groups of relevant files may include retrieving a user data signal including user-specific data, analyzing the user data signal to identify a parameter relating to file relevance, identifying one or more relevant files in a storage medium based on the parameter at least one of a user category property, a lifecycle stage property, a relevant activity property, or an activity level property of one or more files in the storage medium, organizing the one or more relevant file into the one or more groups of relevant files, and providing for display data relating to the one or more groups of relevant files.

Abstract: A method for proactively providing information to a user about an event involving the user includes receiving user input indicating a request to display a search page and displaying the search page in response to the user input. In addition, event information may be automatically obtained and displayed on the search page in response to the user input. Some examples of event information that may be provided include participant information about a participant in the event other than the user, file information about a file that is relevant to the event, and conversation information about a conversation that is relevant to the event.

Abstract: Example systems described herein are configured to limit inadvertent actuations of a touchpad. The system may include a touchpad, mechanically-activated switch(es), a locking assembly, and a controller. The touchpad is configured to receive a touch input from a user. The mechanically-activated switch(es) are adjacent to the touchpad. The mechanically-activated switch(es) are configured to be activated when a depression force associated with the touch input exceeds a force threshold. The locking assembly is configured to selectively inhibit the touchpad from depressing the mechanically-activated switch(es) depending on whether one or more inhibiting criteria are satisfied. For instance, the inhibiting criteria may take into consideration an inferred intent of the user, an input mode of the touch input, and/or the depression force associated with the touch input.

Abstract: One example provides an integrated computing device, comprising one or more computing clusters, and one or more network controllers, each network controller comprising a local data notification queue to queue send message notifications originating from the computing clusters on the integrated computing device, a remote data notification queue to queue receive message notifications originating from network controllers on remote integrated computing devices, a local no-data notification queue to queue receive message notifications originating from computing clusters on the integrated computing device, and a connection scheduler configured to schedule sending of data from memory on the integrated computing device when a send message notification in the local data notification queue is matched with a receive message notification in the remote data notification queue, and to schedule sending of receive message notifications from the local no-data notification queue.

Abstract: Generally discussed herein are devices, systems, and methods for transparency and control in a user data migration process. A method can include displaying, by a display device, a user interface (UI) including a first display region including text indicating that a legacy application is being replaced by an upgraded application and that a user can select what data from the legacy application is ported over to the upgraded application, receiving, by the UI and from the user, data indicating what portion of data from the legacy application is to be ported over to the upgraded application, and porting over only the portion of the data from the legacy application indicated by the user.

Abstract: Systems and methods for entity recommendation can make use of rich data by allowing the items to be recommended and the recipients of the recommendation (e.g., users) to be modeled as “complex entities” composed of one or more static sub-entities and/or a dynamic component, and by utilizing information about multiple relationships between the sub-entities as reflected in bipartite graphs. Generating recommendations from such information may involve creating vector representations of the sub-entities based on the bipartite graphs (e.g., using graph-based convolutional networks), and combining these vector representations into representations of the items and users (or other recipients) to be fed into a classifier model.

Abstract: In examples, a requestor device requests data from a data platform. A response from the data platform may include a version identifier indicating a version of data used to process the request and a device identifier indicating the server device that processed the request. Accordingly, the requestor device may include the version identifier and device identifier in a subsequent request, such that the request is routed to the server device accordingly. In examples, the server device may evaluate the version identifier to determine whether the request is associated with a different version of the data, as may occur when the data of the server device has since been updated. Similarly, the requestor device may evaluate a version identifier from the data platform as compared to that of a previously received response to determine whether the response is associated with a different version of data than that of a previous response.

Abstract: The disclosed techniques optimize the use of computing resources and user engagement by controlling a user interface that displays renderings of meeting participants concurrently with two presentation areas. The participants can include one group of users or multiple groups of users. The two presentation areas are each reserved for content that can be controlled by different users or a single user. In some embodiments, a system can allow users to control the content, e.g., change the content, change a display of a particular page, etc. In some embodiments, individual groups of users can each control specific content in a respective display area. By displaying at least two display areas that each can be independently controlled by one person or multiple people, a system can improve user engagement and improved efficiencies with respect to computing resources.

Abstract: Embodiments of the present disclosure include systems and methods for providing hierarchical and shared exponent floating point data types. First and second shared exponent values are determined based on exponent values of a plurality of floating point values. A third shared exponent value is determined based the first shared exponent value and the second shared exponent value. First and second difference values are determined based on the first shared exponent value, the second shared exponent value, and the third shared exponent value. Sign values and mantissa values are determined for the plurality of floating point values. The sign value and the mantissa value for each floating point value in the plurality of floating point values, the third shared exponent value, the first difference value, and the second difference value are stored in a data structure for a shared exponent floating point data type.

Abstract: A transform-by-pattern (TBP) system is configured to proactively suggest relevant TBP programs based on inputted source dataset and target dataset without requiring users typing in examples. The TBP system has access to multiple TBP programs, each of which includes a combination of a source pattern, a target pattern, and a transformation program that is configured to transform data that fits into the target pattern into data that fits into the source pattern. When a source dataset and a target dataset are received from a user, the TBP system identifies a subset of the source dataset and a subset of the target dataset as related data. The TBP system then identifies one or more applicable TBP programs amongst the multiple TBP programs, and suggest or apply at least one of the one or more applicable TBP programs.

Abstract: Systems and methods for contextual memory capture and recall are provided. The contextual memory capture and recall systems and methods help a user create, store, and recall memory information associated with an identified activity. The contextual memory capture and recall systems and methods are capable of identifying user activities where a memory inquiry may be desirable, creating a memory inquiry with a recommended memory action based on the activity, providing the memory inquiry to the user, and automatically linking an accepted memory action, along with any received memory information for the memory action, with the identified activity.

Abstract: A communal computing device, such as an interactive digital whiteboard, can become unlocked if a user is near the device. The communal computing device may use a sensor such as a camera to capture images of a person and obtain an identifier from a personal device such as a smartphone. A cloud-based provider that is trusted by both the communal computing device and the personal device may associate both the image and the identifier of the personal device with the same user identity. Obtaining the user identity from multiple, different sources provides a secure technique for the communal computing device to recognize a user without the user directly interacting with the communal computing device. If the sensor no longer detects the user or the personal device is no longer detected, then the communal computing device may log off the user. The personal device may be used to confirm log off.

Abstract: Techniques are described herein that are capable of providing a recommendation of an admin change (i.e., an admin change recommendation) in an enterprise. A type of intended admin change that an administrator is to perform with regard to an enterprise is determined. The type is cross-referenced with information indicating admin changes made by administrator(s) in environment(s) of enterprise(s) and values of metrics resulting therefrom to identify subsets of the information to which the type corresponds. A causal relationship is inferred between admin change(s) made after an admin change of the type and an increase in value(s) of metric(s) that are indicated by information in the subsets. A recommended admin change is recommended to be performed by the administrator based at least in part on a causal relationship between the recommended admin change and an increase in at least one of the value(s) of at least one of the respective metric(s).

Abstract: A system provides a notification associated with joining a communication session based on trigger events that occur at a time other than a scheduled start time for the communication session. For example, the notification informs a user who organizes the communication session of a predefined join event that occurs when another user joins the communication session. The predefined join event may occur at a time that is different than a scheduled start time (e.g., before the scheduled start time). Moreover, the notification can include an embedded control that, when activated by the organizing user, causes a device of the organizing user to transmit a join request to join the device to the communication session.

Abstract: A method may include receiving an indication that a recalculation operation is to be completed for data stored in a data file; determining that a currently assigned number of threads for execution of the recalculation operation is lower than a target number of threads for the recalculation operation; requesting an additional thread for execution of the recalculation operation; beginning execution of the recalculation operation using the currently assigned number of threads; receiving an indication that the additional thread is available for execution of the recalculation operation; updating the currently assigned number of threads to include the additional thread; and continuing execution of the recalculation operation using the updated currently assigned number of threads.

Abstract: A set of high level test logic is configured to include a set of insertion points. The high-level test logic can be controlled to insert test conditions into a data center configuration. It can also be configured to execute remediation actions that are to be taken, and validation actions to be performed in order to determine whether the remediation action works against the test conditions. Different instances of the high-level test logic can be configured for different environments and different test conditions.

Abstract: The present disclosure relates to systems, methods, and computer-readable media for deploying cloud-native services across a plurality of cloud-computing platforms. For example, systems disclosed herein identify resource identifiers associated with cloud-computing services (e.g., types of services) to be deployed on one or more resources capable of executing or otherwise providing cloud-native services. The systems disclosed herein further generate resource bindings including deployment specifications that include data for deploying cloud-native services on corresponding platform resources (e.g., cloud resources, edge resources). Using the resource bindings, the systems disclosed herein can deploy cloud-native services across multiple platforms via control planes configured to manage operation of resources on the different platforms.

Abstract: Systems and methods are provided that enable a general framework for partitioning application-defined jobs in a scalable environment. The general framework decouples partitioning of a job from the other aspects of the job. As a result, the effort required to define the application-defined job is reduced or minimized, as the user is not required to provide a partitioning algorithm. The general framework also facilitates management of masters and servers performing computations within the distributed environment.

Abstract: Methods, systems, and computer program products are provided that automatically scale an application between private and public cloud computing platforms, while simultaneous enforcing policies ensuring private data is persistently stored on the private cloud computing platform, but not the public cloud computing platform. A traffic manager on the public platform routes traffic to instances of a web app executing on a private platform. A traffic monitor on the private platform monitors performance criteria of the private platform, and reports traffic telemetry to the traffic manager. Based on the traffic telemetry, the traffic manager may instantiate one or more instances of the web app on the public platform to handle traffic. Private data gathered by such instantiated instance(s) is persisted to storage in the private platform, but not in the public platform.

Abstract: An apparatus and method for synchronizing a triggered system to a triggering system by tracking the timing of rising and falling edges of a clock signal at the triggered system and using the tracked timing values for phase shift adjustment of a time base at the triggered systems.

Abstract: Personalized information from venues of interest to a user is provided to the user. The information may comprise messages, notifications, or other information determined to be relevant to the user, and may be timely provided to the user in an appropriate format such that the user is better able to respond to the information. A set of venues that are relevant to the user and corresponding information sources associated with the venue are determined. Information published by these sources may be analyzed for relevance to the user, and the relevant information items may be provided to the user via notifications or applications and services. Further, the notifications may be scheduled for presentation to the user at appropriate times, such as prior to a predicted visit of the venue. One embodiment includes a venue-information clearinghouse for receiving information from venues and making it available for user applications or services.

Abstract: A non-fungible physical fabric token (NFPFT) system includes a piece of smart fabric coupled to a physical item. The piece of smart fabric includes a grid of cells configured to receive and persistently store one or more datasets. The NFPFT system also includes a verification and authentication device configured to receive a first dataset associated with the physical item and a second dataset associated with a non-fungible token (NFT) recorded in a decentralized system. The NFT is associated with the physical item. The verification and authentication device is further configured to cause the first dataset and the second dataset to be persistently stored in the grid of cells of the smart fabric.

Abstract: Embodiments of the present disclosure include systems and methods for reducing hardware resource utilization by residual neural networks. In some embodiments, a first matrix is received at a layer included in a neural network. The first matrix is compressed to produce a second matrix. The second matrix has a reduced dimensionality relative to a dimensionality of the first matrix. The second matrix is processed through a network block in the layer included in the neural network. The processed second matrix is expanded to produce a third matrix. The third matrix has a dimensionality that is equal to a dimensionality of the first matrix. The third matrix is added to the first matrix to produce a fourth matrix.

Abstract: Data from data sources may be processed at an edge device. The edge device may generate a local processing result, filter the data, and/or prioritize the data. Accordingly, data is transmitted from the edge device to the data platform, where it may be processed further. For example, a local processing result may be processed at the data platform, such that processing is performed without all of the data source data. In examples, at least a part of such data may remain at an edge device. The edge device may maintain a manifest of data stored by the edge device. The data platform may generate an aggregated manifest using manifests from associated edge devices, such that it may be determined where data is stored. As a result, the data platform may redirect requests to an associated edge device when it is determined that requested data is remote from the data platform.

Abstract: The techniques disclosed herein enable systems to centralize access to various digital items irrespective of the location of those digital items. To achieve this, items that are stored at their original location, e.g., within a cloud storage platform, can be selected by a user for storage at a centralized location such as a favorites section. These items are selected using an interface control which can be an operating system component of an item keeping system that is accessible in any context or application. The item keeping system can generate an item alias for selected items which is then stored in the centralized location. In addition, item aliases can be moved to various destinations by the user to enable customized item storage for items of varying types, origin, and location. In addition, functionality of the interface control can be modified to suite selected items.

Abstract: Embodiments detect cyberattack campaigns against multiple cloud tenants by analyzing activity data to find sharing anomalies. Data that appears benign in a single tenant's activities may indicate an attack when the same or similar data is also found for additional tenants. Attack detection may depend on activity time frames, on how similar certain activities of different tenants are to one another, on how unusual it is for different tenants to share an activity, and on other factors. Sharing anomaly analysis may utilize hypergeometric probabilities or other statistical measures. Detection avoidance attempts using entity randomization are revealed and thwarted. Authorized vendors may be recognized, mooting anomalousness. Although data from multiple tenants is analyzed together for sharing anomalies while monitoring for attacks, tenant confidentiality and privacy are respected through technical and legal mechanisms. Mitigation is performed in response to an attack indication.

Abstract: Methods of secure resource authorization for external identities using remote principal objects are performed by systems and devices. An external entity creates a user group and defines entitlements to an owning entity's secure resource as a set of permissions for the group. An immutable access template with the permissions and an access policy for the secure resource are provided to the owning entity for approval. On approval, a remote principal object is created in the owner directory according to the permissions and access policy. A remote principal that is a group member requests access via an interface to the owner domain using external domain credentials. The identity of the remote principal is verified against the remote principal object by a token service. Verification causes generation and issuance of a token, with the enumerated entitlements, to the remote principal interface affecting a redirect for access to the secure resource.

Abstract: In examples, a schema augmentation system for exploratory research leverages intelligence from a machine learning model to augment such tasks by leveraging intelligence derived from machine learning capabilities. Augmenting tasks include schematization of content, such as information units and groupings of information units. Based on the schematization of such content, semantic proximities for information units are determined. The semantic proximities may be used to identify and present potentially relevant information units, for example to accelerate the exploratory research task at hand. As such, users engaged in consumption of heterogeneous content (e.g., across client applications and/or content sources), may receive machine-augmented support to find potential information units.

Abstract: A feature is updated on a computing device. One or more composite image files are accessed that correspond to updates to be implemented in the computing device. The composite image files are signed containers. A runtime in-memory merge of the composite image files is performed. The merged composite image files are exposed as a read-only volume. The features are made available to the computing device. A system boot using the read-only volume can be initiated.

Abstract: A method and system for automatic dubbing method is disclosed, comprising, responsive to receiving a selection of media content for playback on a user device by a user of the user device, processing extracted speeches of a first voice from the media content to generate replacement speeches using a set of phenomes of a second voice of the user of the user device, and replacing the extracted speeches of the first voice with the generated replacement speeches in the audio portion of the media content for playback on the user device.

Abstract: Described herein are systems and methods for supporting multicast for virtual networks. In some embodiments, a native multicast approach can utilized in which packet replication is performed on a host node of a virtual machine (VM) with a multicast data packet encapsulated in uniquely address unicast packets. In some embodiments, a network virtual appliance can be utilized. A multicast packet sent from the VM can be unicasted to the network virtual appliance. The multicast appliance can then replicate the packet into multiple copies and send the packets to the receivers in the virtual network as unicast data packets encapsulating the multicast packet.

Abstract: Adaptive phase unwrapping for a time-of-flight camera. A scene is illuminated with modulation light having two or more frequencies that do not have a common integer denominator. The modulation light that is reflected off objects within the scene is received at a sensor array. The received modulation light is then processed and weighted in the complex domain to determine unwrapped phases for each of the two or more frequencies of modulation light.

Abstract: A system is provided for maintaining a safe operating area while also providing a suitable forward bias voltage to drive a laser diode. The system can monitor a voltage that is applied to a laser diode driver using a threshold that is based on the fabrication process of the laser diode driver. For example, a system can utilize a first threshold for a laser diode driver that is fabricated utilizing a 10 nm process and utilize a second threshold for another laser diode driver that is fabricated utilizing a 20 nm process. The threshold can also be based on a color of the laser or a desired operation mode. The system can monitor a voltage applied to a laser diode using different thresholds while controlling a bleed current to ensure that the laser diode is forward biased while mitigating the risk of silicon breakdown of the laser diode driver.

Abstract: Systems and methods related to efficient system on chip (SoC) power delivery with adaptive voltage headroom control are described. A method for adaptively controlling voltage headroom for a system includes, in response to either a detection of a headroom violation by a per core voltage regulator headroom monitor or a detection of a voltage droop by a per core droop detector, independently throttle operating frequency of a respective core clock signal. The method further includes, in response to meeting a predetermined criterion: (1) lowering the operating frequency of the respective core clock signal, (2) monitoring headroom violation events and droop events at the lowered operating frequency, and (3) if monitored headroom violation events or monitored droop events continue to meet the predetermined criterion, changing the voltage set point associated with the motherboard voltage regulator to a second voltage set point corresponding to a higher voltage.

Abstract: The technology described herein obfuscates image content using a local neural network and a remote neural network. The local network runs on a local computer system and a remote classifier runs in a remote computing system. Together, the local network and the remote classifier are able to classify images, while the image never leaves the local computer system. In aspects of the technology, the local network receives a local image and creates a transformed object. The transformed object may be generated by processing the image with a local neural network to generate a multidimensional array and then randomly shuffling data locations within a multidimensional array. The transformed object is communicated to the remote classifier in the remote computing system for classification. The remote classifier may not have the seed used to deterministically scramble the spatial arrangement of data within the multidimensional array.

Abstract: A wearable computing device, including a device body configured to be affixed to a body of a user. The wearable computing device may further include an inertial measurement unit (IMU) and a processor. The processor may receive kinematic data from the IMU while the device body is affixed to the body of the user. The processor may perform a first coordinate transformation on the kinematic data into a training coordinate frame of a training wearable computing device. At a first machine learning model trained using training data including training kinematic data collected at the training wearable computing device, the processor may compute a training-frame velocity estimate for the wearable computing device based on the transformed kinematic data. The processor may perform a second coordinate transformation on the training-frame velocity estimate to obtain a runtime-frame velocity estimate and may output the runtime-frame velocity estimate to a target program.

Abstract: The present disclosure relates to systems and methods for transmitting Standard Dynamic Range (SDR) content. The systems and methods may use a modified Electro-Optical Transfer Function (EOTF) curve to convert nonlinear color values of SDR content into optical output values of modified SDR content. The systems and methods may encode the modified SDR content using eight bits while preventing banding. The systems and methods may transmit the encoded data to a client device for presentation on a display.

Abstract: The present disclosure provides techniques for management of user interface elements based on historical configuration data. Use of historical configuration data to render user interface elements improves usability of graphical user interfaces by maintaining a consistent user experience. The states of user interface objects in a hosting environment are retained as historical configuration data and linked to a hosting environment profile. When the same or similar hosting environment is detected, the user interface elements are rendered based on the historical configuration data. For example, the last positions of windows in a particular monitor topology are stored as historical configuration data linked to that monitor topology. The windows are returned to their previous positions when a computing device is next configured with the same or similar monitor topology.

Abstract: Systems and methods cross device application discovery and/or control. Cross device application discovery and/or control can provide for simple detection and activation of applications on remote devices. Cross device application discovery and/or control can provide for the control of remote applications in a master and slave configuration. Responsive to an activation message, an application can execute a task in an application, the task being displayed on a target device. Responsive to an activation message, an application can execute a task in an application on a target device, a task context data for the task being streamed to the source device for presentation on a display. Cross device application discovery and/or control can be enabled on a single operating system, or across a plurality of operating systems.

Abstract: A method and system for securing an anonymous discovery service may include receiving a request from a client device, the request being directed to an anonymous Autodiscover service, identifying a source from which the request originated from within the client device, and responsive to the source being of a first type of sources, transmitting a first response to the client and responsive to the source being of a second type of sources transmitting a second response to the client. The first response does not return a Uniform Resource Locator (URL) to a service endpoint, the second response returns a URL to a service endpoint. Furthermore, the anonymous discovery service may be a discovery service that requires no authentication.

Abstract: A computing apparatus of an insight interfacing system receives from a user a request for a dataset comprising a plurality of subspaces of a multi-dimensional data structure. Insights are received based on the received request then presented on a display device. Also, a chart may be presented based on the received request. The computing apparatus receives a selection of at least a portion of the presented one or more insights or a portion of the chart, then receives contextual insights based on the selected portion and presents the contextual insights on the display device.

Abstract: A process automatically generates configuration information used to build a target computing environment based on an image that depicts an architecture of the target computing environment. First, the process generates an original graph data structure having nodes and edges that respectively represent services and connectors detected in the image. The system then determines attributes of the target computing environment based on the original graph data structure. At least in part, the attributes describe a context in which the target computing environment is used, such as the type of industry associated with the target computing environment. The process then modifies the original graph data structure based on the attributes that have been determined, to produce a modified graph data structure. Finally, the process provides the configuration information to a deployment system, which uses the configuration information to deploy the target computing environment on a computing platform.

Abstract: A data processing system implements displaying a tabbed user interface comprising a plurality of tabs for navigating among a plurality of electronic documents; determining a first tab of the plurality of tabs is associated with a first tab group according to a first grouping criterion; and causing a first tab group control element to be displayed proximate to the first tab, the first tab group control element providing a set of tools for accessing content associated with the first tab group and for creating new tabs associated with the first tab group

Abstract: Methods and systems for generating multi-operator data transformation pipelines. An example method includes accessing raw data for transformation; receiving a selection of a target table or target visualization, wherein the target table or target visualization is for data other than the raw data; extracting table properties and target constraints; and based on the extracted table properties and target constraints, synthesizing one or more multi-operator data transformation pipelines for transforming the raw data to a generated table or generated visualization.

Abstract: In embodiments of multi-device pairing and combined display, mobile devices have device touchscreens, and housing bezels of the mobile devices can be positioned proximate each other to form a combined display from the respective device touchscreens. An input recognition system can recognize an input to initiate pairing the mobile devices, enabling a cross-screen display of an interface on the respective device touchscreens, such as with different parts of the interface displayed on different ones of the device touchscreens. The input to initiate pairing the mobile devices can be recognized as the proximity of the mobile devices, as a gesture input, as a sensor input, and/or as a voice-activated input to initiate the pairing of the mobile devices for the cross-screen display of the interface.

Abstract: The disclosed technology is generally directed to web authentication. In one example of the technology, authentication of a broker is obtained with an identity provider. Obtaining the authentication includes at least communication between the broker and a top-level frame and communication between the broker and the identity provider. The broker is executing in a descendant frame of the top-level frame. The top-level frame and the broker are hosted on different domains. At the broker, from an embedded application that is executing on another descendant frame of the top-level frame, a token request is received. Via the broker, a token is requested from the identity provider. The token is associated with an authorization of secure delegated remote access of at least one resource by the embedded application. At the broker, from the identity provider, the token is received. Via the broker, the token is provided to the embedded application.

Abstract: Techniques of dynamic authentication scheme selection in distributed computing systems are disclosed herein. One example technique includes analyzing a received authentication request for an indicator of an authentication scheme that is supported by a computing service submitting the authentication request. The example technique can also include determining whether the authentication scheme associated with the indicator is also supported by the authentication service and in response to determining that the authentication scheme associated with the indicator is also supported by the authentication service, initiating an authentication process with the computing service according to the authentication scheme that is supported by both the computing service and the authentication service. As such, the authentication scheme can be dynamically selected at the authentication service for the received authentication request.