Abstract: A system and method for providing multifactor authentication. A disclosed method includes receiving a request at a server to launch a new session for an application on a client device, generating a plurality of codes, each of the plurality of codes associated with a respective identifier, and forwarding the plurality of codes via a short messaging service (SMS) message to a user associated with the client device. The method further includes sending the respective identifier associated with a given code of the plurality of codes to the application and receiving a submitted code entered into the application from the client device. Once received, the method compares the submitted code with the given code associated with the respective identifier and authenticates the user in response to the submitted code matching the given code.

Abstract: Systems and methods for enhancing user engagement with network applications include client application executed by a client device, the client application comprising an embedded browser, in communication with one or more application servers providing a plurality of network applications. The embedded browser is configured to access a first network application and a second network application. The client application is configured to: track interactions of a user via the embedded browser with the first network application and the second network application, each interaction having a corresponding score; generate an aggregate score for the user from the scores of each tracked interaction; transmit, to a first application server, the aggregate score for the user; and receive, from the first application server, a score table comprising a plurality of scores of users including the aggregate score for the user. The embedded browser is further configured to display the score table to the user.

Abstract: A computer system includes a virtual server to provide virtual computing sessions, and a client device to access one of the virtual computing sessions via a communications network. The client device includes a wireless transceiver connected to a cellular network. A server communicates with the client device via the cellular network based on the client device losing connectivity to the communications network. The cellular network provides a backup communications channel for the server to restore connectivity for the client device to access one of the virtual computing sessions via the communications network.

Abstract: A server includes a memory and a processor to receive from a client device a screenshot of an application page from an application. The application page includes a form requiring data to be filled in by a user of the client device. A form template is extracted from the screenshot, with the extracted form template not including form field values. The extracted form template is compared to a private form template database for a match. The private form template database includes private form templates from different applications, with each private form template having form field values previously filled in for the user. Form field values from a matched private form template are provided to the client device for the client device to populate the form in the screenshot.

Abstract: Techniques process, in a user device, pointer input from an input device. Such techniques involve providing the input from the input device to a remote desktop session which is hosted on equipment that is remote from the user device. Such techniques further involve detecting an event on the user device, the event being indicative of deactivation of the remote desktop session. Such techniques further involve, in response to detecting the event, providing the input from the input device to at least one local application executable on the user device to enable continued processing of the input from the input device with use of the at least one local application instead of the remote desktop session.

Abstract: Virtual application and desktop delivery may be optimized by supplying application metadata and user intent to the device between a client and a server hosting resources for the delivery. The data packets used to deliver the virtual application or desktop may be also tagged with references to the application. By supplying the metadata and tagging packets with the metadata, an intermediary network device may provide streams of data packets at the target QoS. In addition, the device may apply network resource allocation rules (e.g., firewalls and QoS configuration) for redirected content retrieved by the client out of band relative to a virtual channel such as the Internet. The network resource allocation rules may differ for different types of resources accessed. The device may also control a delivery agent on the server to modify communication sessions established through the virtual channels based on network conditions.

Abstract: A system for optimizing network traffic is described. The system includes a transport communication protocol (TCP) controller configured to acquire data regarding a flow of a plurality of data packets over a link and to determine TCP characteristics for the flow, a traffic prioritization module configured to assign a flow priority to the flow, and a traffic priority controller configured detect congestion on the link and determine a congestion window size for the flow based on the flow priority and the TCP characteristics.

Abstract: A computing system may include a server, client computing devices, a gateway device in communication between the server and the client computing devices, and a local device to be coupled to a given client computing device and to be operable in a given virtual desktop instance associated with the given client computing device, thereby generating client initialization packets. The gateway device may be configured to when the local device is coupled to the given client computing device, determine whether a client packet from a plurality of client initialization packets is within a client mapping table, replace the client packet with a client mapping ID number to define compressed client initialization packets, and send the compressed client initialization packets to the server. The server may be configured to replace the client mapping ID number with the client packet in the compressed client initialization packets based upon a server mapping table.

Abstract: Improving distribution of traffic from clients to servers is provided. A device intermediary to a plurality of clients and a plurality of servers can receive a request from a client of the plurality of clients to access one of the plurality of servers. The device can determine a hash value based on at least a portion of the request received from the client. The device can identify an index of a plurality of indices listing the plurality of servers repeated a plurality of times in a deterministic shuffled order. The device can apply a cache array routing protocol (CARP) algorithm to a second plurality of servers listed in a subset of the plurality of indices around the index. The device can select a server from the second plurality of servers with a highest hash value based on the application of the CARP algorithm.

Abstract: A resource link engine may aggregate, from one or more communication services, data including a plurality of messages exchanged between a plurality of users. The resource link engine may compute, for each resource link included in the plurality of messages, a first relevance score of the resource link for a user and/or a second relevance score of the resource link for a group of users including the user. The resource link engine may identify, based on the first relevance score and/or the second relevance score, one or more resource links relevant to the user. In response to detecting the user interacting with a browser at a device, the resource link engine may provide, to the device, the resource links identified as being relevant to the user. Related systems, methods, and articles of manufacture, including computer program products, are provided.

Abstract: Methods and systems are described for cross-cloud call detection. The system may include detecting an instruction configured to call a resource. The instruction may include a name indicative of the resource and one or more values. The resource is configured to construct code using the one or more values. The system may determine the resource is incompatible with a service based on at least the name and the one or more values of the instruction. A conversion of source code is halted when the resource is incompatible with the service.

Abstract: A computing system includes a memory and a processor. The processor is configured to generate a color scheme by determining distances between colors in a source set of colors to be used in the color scheme, and determining positions of colors in a target set of colors that can be replaced with the colors in the source set of colors. Deltas are determined between distances in the replaced colors and the distances in the source set of colors for the determined positions. One of the positions to be used as the color scheme is selected based on the deltas being minimized with respect to the deltas for the other determined positions.

Abstract: A computing device may include a memory and a processor cooperating with the memory and configured to receive connection leases providing instructions for connecting to computing sessions, and request connections to the computing sessions including the connection leases. Each connection lease may comprise a first component unique to a published resource, and a second component referenced by the first component and shared in common with a plurality of different published resources in other connection leases, with the second component being updateable independent of the first component.

Abstract: Described embodiments provide systems and methods for replaying a service graph of a plurality of microservices. A device stores a plurality of snapshots of a service graph of a plurality of microservices generated for each of a plurality time increments over a time period. Each of the plurality of snapshots of the service graphs include metrics at a respective time increment from execution of each of the plurality of microservices. The device receives a request to replay the service graph. Responsive to the request, the device displays at least two or more of the plurality of snapshots of the service graph in sequence corresponding to two or more of the plurality of time increments.

Abstract: A system for maintaining a state of a session of a network application across different client device is disclosed. A first client application establishes sessions of a user to a network application. Each of the sessions is accessed via a first embedded browser of a first client application. The first client application stores a state of the sessions to a workspace service in association with the user, and a context of the user to a workspace hub. A second client application establishes the sessions to the network application based on the state of the sessions obtained via the workspace service that are each accessed via a second embedded browser of the second client application. The second client application updates the state of the sessions to a second state based on detection of a state change and a context of the user obtained from the workspace hub.

Abstract: In some implementations, a method may involve determining, by a computing system, that a first message sent by a system of record for delivery to a client device is indicative of a first action that can be taken with respect to the system of record. The computing system may determine at least one user interface (UI) element that is selectable to cause the system of record to take the first action, and may generate, based at least in part on the first message being indicative of the first action, at least one command that causes the client device to present the at least one UI element.

Abstract: A computing device, method, and computer-readable medium storing instructions for determining user availability for one or more messaging applications are provided. For example, the computing device includes a processor for receiving user activity information from a client device including system interaction information and scheduled activity information for a user of the client device. The system interaction information includes information related to the user's current interaction with applications in the distributed workspace and the scheduled activity information includes information pulled from, for example, a calendar and/or scheduling application associated with the user. The processor processes the user activity information to determine a current user status for the user and output the current user status for the user of the client device to additional users of the one or more messaging applications.

Abstract: Described embodiments provide systems and methods for establishing an end-to-end cryptographic context. A service node may be located intermediary between a client and server which provides a service to the client. At least one network device may be located intermediary between the service node and the server. The service node may obtain information for validating the service. The service node may establish an end-to-end cryptographic context between the service node and server through the network device(s). A first network device of the network device(s) may share a cryptographic context with the service node, which existed prior to establishment of the end-to-end cryptographic context. The service node may transmit a message to the network device encrypted using the first cryptographic context. The encrypted message may inform the first network device to pass through traffic that is encrypted using the end-to-end cryptographic context.

Abstract: Methods and systems for automatic image capture are described herein. A user device may determine a reference orientation of the user device. The user device may monitor orientations of the user device as the user device is moved and/or rotated. Based on the reference orientation and the monitored orientations, the user device may determine to automatically capture images. The user device may organize captured images into a file for storing and/or sharing.

Abstract: A computer system including a memory, a network interface, and at least one processor is provided. The at least one processor can transmit, via the network interface, a first message to a server application to initiate a handshake process; receive, via the network interface, a first copy of a security certificate from the server application; determine whether the first copy is valid; store, in response to a determination that the first copy is valid, the first copy in the memory; establish an initial secure connection to the server application; transmit, via the network interface, a second message to the server application to request a subsequent secure connection to the server application; receive, via the network interface, a second copy of the security certificate from the server application; determine whether the second copy matches the first copy; and establish the subsequent secure connection to the server application.