Abstract: Method, systems, and computer-readable media for receiving, from an application instance operating on a client device, information that indicates a client device identifier, a wireless proximity beacon identifier, and a proximity of the identified client device to the identified wireless proximity beacon. From the received information, a determination is made whether the proximity of the identified client device to the identified wireless proximity beacon satisfies a threshold proximity. Based at least on the determination, an action is determined that the application instance operating on the identified client device is permitted to perform while the proximity of the identified client device to the identified wireless proximity beacon satisfies the threshold proximity. Information is transmitted to the identified client device that enables the application instance operating on the identified client device to perform the action.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for providing workflows to remote environments. In some implementations, data storage storing multiple workflows is accessed, where each of the workflows indicates a set of computer operations to be performed. Catalog data identifying workflows, from among the multiple workflows, that are available is provided to a computer system. A request for a workflow from among the workflows identified by the catalog data is received from the computer system. The requested workflow is sent to the computer system in response to the request.

Abstract: Methods, systems, apparatus, including computer programs encoded on computer storage medium, for deploying an enterprise platform environment. In one aspect, the method may include providing a provisioning console, wherein the provisioning console includes a plurality of configurable enterprise platform configuration settings, receiving a provisioning request to generate a customized enterprise platform based on user-defined settings for each of the plurality of configurable enterprise platform configuration settings, generating an enterprise platform deployment package based on the user-defined settings, and provisioning cloud-based resources to establish an enterprise platform based on the enterprise platform deployment package.

Abstract: Database report subscription technology, in which subscriptions are delivered to multiple, different recipients on a customized basis. In response to detection of an event that triggers generation and delivery of a database report, customized versions of the report are generated for the multiple, different recipients based on a definition of the data used to generate the report included in the subscription, report parameters that define presentation aspects of the report included in the subscription, and profile data associated with at least one of the multiple, different recipients. The customized versions of the report include at least a first version of the report and a second version of the report that differs from the first version of the report and the customized versions of the report are delivered to the multiple, different recipients.

Abstract: A system enables use of credentials, including determining that a user has been authorized by a first credential-issuing organization and enabling the user to use a first credential issued by the first credential-issuing organization based on the determination that the user has been authorized by the first credential-issuing organization. Trust data indicating whether the user should be enabled to use a second credential issued by a second credential-issuing organization as a result of the user having been authorized by the first credential-issuing organization is accessed. A determination is made that the accessed trust data indicates that the user should be enabled to use the second credential issued by the second credential-issuing organization as a result of the user having been authorized by the first credential-issuing organization, and the user is enabled to use the second credential.

Abstract: Methods, systems, and apparatus, including computer-readable storage devices, for task scheduling in a multiprocessor system. The processors of a multiprocessor system are partitioned into two groups, a first group of processors that preferentially execute new, short-running tasks and a second group of processors that preferentially execute suspended, long-running tasks. A scheduler of the multiprocessor system maintains queues of new and suspended tasks, suspends tasks, and assigns tasks to the processors according to their group preference. By designating different processors to preferentially execute new, short-running tasks or suspended, long-running tasks, the multiprocessor system may more efficiently manage workloads that contain a mixture of task types.

Abstract: Methods, systems, and apparatus, including computer-readable medium storing executable instructions, for credential management using wearable devices. In some implementations, an authentication request for a user is received. It is determined that a wearable device previously associated with the user is in proximity to the electronic device. In response to determining that the wearable device associated with the user is in proximity to the electronic device, a notification is sent to the wearable device for output by the wearable device. Approval data is received indicating user interaction with the wearable device approving authentication in response to the notification. Data indicating approval of the authentication request is provided in response to receiving the approval data from the wearable device.

Abstract: Methods, systems, and apparatus, including computer programs stored on computer-readable media, for providing contextually relevant database content and display contextually relevant links. Techniques are described for monitoring conditions of a computing device and detecting when database content is relevant to a current context of the computing device. In some implementations, a first computing device is monitored to detect actions of the first computing device that involve calendar data for a user. In response, a determination that text corresponding to the calendar appointment includes a term associated with a particular entity is made. Data for a user information card including information related to the particular entity is obtained. The first computing device is then caused to display the user information card or an interactive control configured to initiate display of the user information card with a link element that launches an application or a web page.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for proximity-based access. In some implementations, a computing device detects an attempt to access the computing device while the computing device is in a secured state. In response to detecting the attempt to access the computing device, the computing device sends a first message to a server system over a network. After sending the message, the computing device receives a second message from the server system over the network, the second message comprising authentication data for the computing device. The computing device determines that a mobile device that was previously designated as an authentication factor for accessing the computing device is located within a predetermined level of proximity of the computing device, and the computing device grants access to the computing device.

Abstract: Data engine integration and data refinement are described. The actions include receiving, by a data refinement engine, a request for data. The actions include determining a first amount of processing to be performed by the data refinement engine and a second amount of processing to be performed by one or more processors of a data source that include a plurality of data nodes. The actions include transmitting, by the data refinement engine, code to the plurality of data nodes of instructions associated with the second amount of processing. The actions include receiving, by the data refinement engine and from the plurality of data nodes, unprocessed first data and processed second data. The actions include processing, by the data refinement engine, the unprocessed first data. The actions include, in response to the request for data, transmitting, by the data refinement engine, the processed first data and the processed second data.

Abstract: In some embodiments, a web-browser-based presentation and report requests over a network may be facilitated. A request for a first report may be obtained from a user system through a web browser. The first report request may comprise a selection of one or more template or filter combinations for formatting the first report. Control of the web browser may be returned to enable a user to use the web browser to perform one or more other tasks while the first report request is being processed. The one or more other tasks may comprise requesting another report or other task. The first report request may be processed by obtaining and formatting the first report in accordance with the one or more selected template or filter combinations of the first report request. The formatted first report may be transmitted over the network to the web browser of the user system.

Abstract: A system and method for performing a universal search for resources across platforms in an enterprise system are described. A search server may receive one or more characters of a search query input at a user device of a user that is a member of an organization and identify one or more resources having metadata or content that includes the one or more characters. For each identified resource, the server may determine a category to which the identified resource belongs, receive source access data indicating resource access patterns of users in the organization, and rank the one or more resources based on the resource access data. The server may provide, to the user device, search result data for display that indicates the ranked one or more resources.

Abstract: Database query analysis technology, in which an input query is received that relates to multiple attribute classes of data records. An index that is descriptive of the data records in data storage is accessed and relative positions in the accessed index for the multiple attribute classes are identified. The accessed index is processed based on more than one of the multiple attribute classes and the identified relative positions, and the processed index is used to identify groups of data records that are included in the data records in the data storage and that share common values for the multiple attribute classes in the input query. Metrics corresponding to the data records included in each of the identified groups of data records are accessed, computations are performed on the accessed metrics, and a report is generated that reflects results of the computations.

Abstract: A user of a mobile device is authenticated in a manner that enables the user access to a credential that has been issued by a credential-issuing organization. One or more keys are identified that are associated with the credential and that enable access to one or more physical resources associated with the credential-issuing organization. A physical orientation of the user's mobile device is determined. A display arrangement of one or more control icons that enable usage of the one or more keys is determined based on a physical orientation of the one or more physical resources relative to the determined physical orientation of the mobile device. The one or more control icons are displayed in accordance with the determined display arrangement.

Abstract: One or more computers receive a request from a user to change a configuration of a computing environment provided by one or more servers. In response to receiving the request and before performing the requested change in the configuration of the environment, the computers determine an estimated measure of performance that represents a level of performance of the computing environment if changed according to the request and provide data indicating performance measures indicating the estimated measure of performance for the environment corresponding to the change in the configuration of the environment. After providing the data indicating the estimated performance measures, the computers receive data indicating user input confirming the request to change the configuration of the environment, and perform the requested change in the configuration of the computing environment.

Abstract: An application executed on a first device presents a user interface on a device display. The application is associated with a validation system used by the device. Based on receiving a first user input, the application controls the first device to scan, using a first communication protocol, for other devices that are located within a first communication range of the first device. Based on the scan, the application discovers a second device located within the first communication range of the first device. The application receives, from the second device, an identification information that uniquely identifies a user associated with the second device on the validation system. The application validates the identification information by communicating with a validation server. Based on validating the identification information, the application displays an indication that the second device associated with the user is located within the first communication range of the first device.

Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for enterprise connectivity are described. In one aspect, a method includes the actions of receiving, by a data analysis server and from a web client running on a first device, a request to begin a web session, where the data analysis server is configured to generate queries to a data storage device based on user input to the web client. The actions further include receiving a request to generate a dashboard interface that provides a visualization of a portion of data in the data storage device. The actions further include generating the dashboard interface and a corresponding dashboard file that is viewable outside of the web client. The actions further include transmitting the dashboard file to a second device that includes a data analysis application that is configured to view the dashboard file.

Abstract: An application executed on a first device presents a user interface on a device display. The application is associated with a validation system used by the device. Based on receiving a first user input, the application controls the first device to scan, using a first communication protocol, for other devices that are located within a first communication range of the first device. Based on the scan, the application discovers a second device that is located within the first communication range of the first device. The application receives, from the second device, an identification information that uniquely identifies a user associated with the second device on the validation system. The application validates the identification information by communicating with a validation server. Based on validating the identification information, the application displays an indication that the second device associated with the user is located within the first communication range of the first device.

Abstract: Database query analysis technology, in which an input query is received that relates to multiple attribute classes of data records. An index that is descriptive of the data records in data storage is accessed and relative positions in the accessed index for the multiple attribute classes are identified. The accessed index is processed based on more than one of the multiple attribute classes and the identified relative positions, and the processed index is used to identify groups of data records that are included in the data records in the data storage and that share common values for the multiple attribute classes in the input query. Metrics corresponding to the data records included in each of the identified groups of data records are accessed, computations are performed on the accessed metrics, and a report is generated that reflects results of the computations.

Abstract: The subject matter described in this specification includes a computer-readable medium storing instructions that cause one or more processors to perform various operations including receiving, from a first client device associated with a user account of a first user, a request for sharing a key. The key is associated with the user account of the first user, and permits access to a resource. The operations include generating, at a server, one or more representations of the key, transmitting the representations of the key to the first client device, and receiving, from a second client device associated with a user account of a second user, a request to access the key. The request to access the key is derived from one of the one or more representations of the key. The operations further include communicating, to the second client device, a message indicating whether access to the key has been granted.