Abstract: A method, computer program product, and computer system for providing, by a computing device, a session of an application, wherein the session may include a sub-session configured to exchange data with a plurality of endpoint devices. The computing device may receive a stream of data from an endpoint device outside the plurality of endpoint devices and that controls the session. The computing device may provide data to at least one of the plurality of endpoint devices, wherein the data may include the stream of data from the endpoint device that controls the session and another stream of data from a different endpoint device of the plurality of endpoint devices.

Abstract: A technique for performing authentication to a hybrid-cloud service includes selectively applying varying authentication requirements based on whether a client device can be confirmed to be connected to a private intranet. The technique includes operating a set of local agents on one or more computing machines on the intranet. When a client device requests access to the hybrid-cloud service, the client device attempts to contact one or more of the local agents. If the client device succeeds in contacting a local agent, then the client device is confirmed to be connected to the private intranet and receives relatively trusting treatment during authentication. However, if the client device fails to contact at least one local agent, the client device is not confirmed to be connected to the private intranet and receives relatively less trusting treatment.

Abstract: A computing system may include a plurality of first client devices associated with customers, a plurality of second client devices associated with support agents, and server configured to communicate with the first and second client devices. The server may establish support sessions between the first client devices and the second client devices via a communications network based upon customer support requests from the first client devices, collect customer feedback data on the support agents from the first client devices responsive to the support sessions, collect support agent feedback data on the customers from the second client devices responsive to the support sessions, rank the support agents based upon the customer feedback, rank the customers based upon the support agent feedback, and assign the support agents to customers as customer requests are received based upon the rankings of available support agents and the rankings of the customers making the customer requests.

Abstract: Methods and systems for securing a data connection for communicating between two end-points are described herein. One of the end-points may be a server and the other of the end-points may be a client that wants to communicate with the server. The data connection may be secured based on a previously-established secure connection and/or a self-signed or self-issued certificate. In some variations, by using the previously-established secure connection and/or a self-signed or self-issued certificate, the secure communication between the server and the client may be conducted without using a third-party authentication service and without requiring a third-party CA to issue a certificate for the server.

Abstract: The present disclosure is directed towards systems and methods of detecting a cause of anomalous load balancing among a plurality of servers. A device intermediary to a plurality of clients and a plurality of servers collects values of a plurality of counters. The device identifies a server of the plurality of servers that is an outlier. The device can identify a counter of the plurality of counters that is an outlier based on at least a comparison of values of each of the plurality of counters for each of the plurality of servers. The device can provide, responsive to the determination, an indication that a value of the counter is a factor causing the server to have uneven load balancing during the time interval.

Abstract: A computer system is provided. The computer system includes a memory and at least one processor configured to recognize one or more intent keywords in text provided by a user; identify an intent of the user based on the recognized intent keywords; select a workflow context based on the identified intent; determine an action request based on analysis of the text in association with the workflow context, wherein the action request comprises one or more action steps and the action steps comprise one or more data points; obtaining a workspace context associated with the user; and evaluate the data points based on the workspace context.

Abstract: Methods, systems, and computer-readable media for creating and managing cloud servers and services using a multi-tenant multi-session catalog with machine-level isolation are described herein. In one or more embodiments, a cloud service provider may receive requests from one or more tenants for predefined numbers of servers. The cloud service provider may initialize a plurality of servers, wherein the plurality of servers is less than a sum of the totality of server requests, and create a catalog of unassigned servers of the plurality of servers. Responsive to a logon request from a user of a tenant, the cloud service provider may assign a server from the catalog of unassigned servers to the tenant, remove the server from the catalog of unassigned servers, broker the user of the tenant to connect to the server, and limit access to the server to only users of the tenant.

Abstract: Methods and systems for a unified application notification framework are described herein. A server may receive a notification from a service provider. The service provider may be associated with an application executable on a virtual machine. The virtual machine may be part of a virtual environment that includes a user interface. The server may determine an identifier for the received notification. The identifier may indicate the application on the virtual machine associated with the service provider. The server may provide the received notification to the user interface for display to a user. The received notification may be displayed without execution of the application on the virtual machine.

Abstract: Described embodiments provide a method, computer program product, and computer system for identifying, by a computing device, that an image is captured. A face in the image may be identified. An eye of the face in the image may be detected. A pupil of the eye included in the image may be detected, wherein the pupil may include objects reflected by the pupil. The objects reflected by the pupil may be augmented by augmenting the pupil in the image.

Abstract: Described embodiments provide systems and methods for running virtual machines based by probing installation media. A media probe executing on one or more processors may identify an installation media for configuring a virtual machine on a type of operating system. The media probe may detect the type of operating system from the installation media. A virtualization manager executing on the one or more processors may determine a virtualization mode for configuration of the virtual machine based on the type of operating system detected from the installation media. The virtualization manager may create the virtual machine in accordance with the virtualization mode determined based on the type of operating system.

Abstract: Techniques are disclosed for integrated booking of rooms and media resources, such as display devices. An example methodology implementing the techniques includes responsive to an activation of an access Uniform Resource Locator (URL) on a computing device, receiving information associated with a booking of a room and a display device, generating a token for accessing the display device and providing to the computing device the token and an address of the display device. The method also includes, responsive to receiving the token from the display device, authenticating the token and, responsive to authenticating the token, allowing use of the display device.

Abstract: A network service, program product and method that manages secure web application delivery. A service is disclosed that includes an interface configured to receive a request for a secure web application from a plug-in integrated into a web browser on a client computing device, wherein the request further includes a user credential token. Also included is a token processor that evaluates the user credential token and determines an associated customer domain server provided by a back-end service and a transport service that establishes a secure channel with the customer domain server, and forwards the request to the associated customer domain server and receives back a text-based data package. Once generated, the text-based data package is forwarded to the plug-in in response to the request.

Abstract: A computer system is provided. The computer system includes a memory, a network interface, and at least one processor configured to monitor a user interface comprising a plurality of user interface elements; detect at least one changed element within the plurality of user interface elements; classify, in response to detecting the at least one changed element, the at least one changed element as either indicating or not indicating an error; generate, in response to classifying the at least one changed element as indicating an error, an error signature that identifies the at least one changed element; identify, using the error signature, a remediation for the error; and provide the remediation in association with the at least one changed element.

Abstract: A platform for delivering secure web applications to a client browser. A software plug-in is provided configured for integration into a web browser. The plug-in includes: a request hook that intercepts web browser requests associated with a secure web application; a request processing system that redirects an request to access the secure web application to a network service, and then redirects subsequent HTTP requests to interact with the secure web application to the network service; and a package manager that receives a text-based data package from a customer domain server in response to the initial request and renders the secure web application in the web browser, and receives an updated text-based data package from the customer domain server in response to the subsequent HTTP request and renders updates to secure web application in the web browser.

Abstract: A computer system is provided. The computer system includes a memory and at least one processor coupled to the memory. The at least one processor is configured to scan session data representative of operation of a user interface comprising a plurality of user interface elements; detect, at a point in the session data, at least one changed element within the plurality of user interface elements; classify, in response to detecting the at least one changed element, the at least one changed element as either indicating or not indicating an error; store an association between the error and the point in the session data; and provide access to the point in the session data via the association.

Abstract: Systems and methods for accessing single-tenant databases comprising a multi-tenant aware cluster manager in communication with instances of single-tenant databases are described. The cluster manager can establish a uniform resource locator (URL) unique for each tenant to access the cluster manager. Each of the instances of single-tenant databases can include data for a corresponding tenant. The cluster manager can receive a request from a client to access a database corresponding to the first tenant. The request can include the URL established for the first tenant. The cluster manager can identify the first tenant based on the URL of the request. The cluster manager can obtain, responsive to identification of the first tenant, a tenant context of the first tenant from a storage. The cluster manager can access, using the first tenant context and responsive to the request, a first instance of the single-tenant databases corresponding to the first tenant.

Abstract: The present disclosure is related to systems and methods of monitoring data of a network application. An embedded browser of a client application on a client device may initiate a request to access a network application hosted on a server. The client application may, responsive to the request, establish a secure session to communicate data of the network application to the client application for rendering in a display region of the embedded browser. The client application may decrypt the data communicated via the established secure session to monitor the network application.

Abstract: A mobile computing device is configured to allow a user to launch native SaaS applications from different vendors using a single-sign-on without having to modify or hook the native SaaS applications. A VPN application operates as man-in-the-middle (MITM) for identity provider requests from SaaS services. The VPN application is initially authenticated with the identity provider, and receives an IDP authentication token which is stored. The IDP authentication token is used for authentication requests from SaaS services.

Abstract: Methods and systems for providing data analytics and generating real-time and historical views of network events using a single processing pipeline, managed by a single code base, are presented. A computing device may receive a stream of data indicative of a plurality of events occurring on a network. The computing device may process the stream of data to generate intermediate data and batch data using the single processing pipeline. The intermediate data may be available to generate historical views and the batch data may include a plurality of intermediate data for a time interval. The computing device may generate a historical view of the events based on a subset of intermediate data and the batch data. Finally, the computing device may provide the historical view to a processing layer to enable the computing device to respond to requests for information about the network.

Abstract: An Internet of Things (IoT) topology analyzer includes an input to passively receive packets exchanged between IoT devices operating within a network and at least one IoT server connected to the network. A processor is coupled to the input and is configured to determine a number of IoT devices operating within the network based on the received packets, with the number of IoT devices used to define an IoT topology of the network.