Abstract: An architecture for realizing a customer system on a cloud computing platform is defined in terms of a plurality of architecture types, each type (AT) defined by plural architecture type units (ATUs), each ATU comprising a set of ATU Details. The ATU Details are ordered into a series of discrete stages. Maturity of the architecture is determined as a single architecture pulse (AP) numeric value for each architecture type. The pulse reflects the extent to which the ATUs of the architecture type have reached a requisite level of quality, and an extent to which the ATUs are created in a sequence consistent with the series of discrete stages. The AP pulse values may be combined to form a single success platform pulse (SPP) for tracking overall condition of the platform architecture with a single numerical value.

Abstract: Methods and systems are provided for synchronizing and sharing a file. A set of access privileges is configured within a cloud collaboration site to define a sharing configuration to allow sharing of the file between a group of computing devices comprising a first computing device and one or more second computing devices. A sync client automatically creates a sync folder on the first computing device that is used for storing files added to the sync folder. When a file is updated at the first computing device and added to the sync folder, the updated file is automatically synchronized at the cloud collaboration site so that the updates are accessible by the one or more second computing devices. The updated file is automatically pushed from the cloud collaboration site to the one or more second computing devices to share the updated file in accordance with the sharing configuration.

Abstract: Methods, devices and systems for providing a user interface in an on-demand software service environment are described. Some implementations involve receiving an indication of a component definition to instantiate. The component definition may be a portion of a component definition data structure. Such implementations may also involve instantiating the provided component, instantiating all remaining attributes of the component definition data structure to produce a component instance data structure and transmitting an intermediate representation of the indicated component to a client device. The intermediate representation may comprise a version of the component instance data structure. The intermediate representation may allow the client device to create an instance of the component in memory.

Abstract: The technology disclosed relates to a platform for ultra-fast, ad-hoc data exploration and faceted navigation on integrated, heterogeneous data sets. The disclosed method of declarative specification of visualization queries, display formats and bindings represents queries, widgets and bindings combined on a dashboard in real time, with flexible display options for analyzing data and conveying analysis results.

Abstract: Computing systems and related methods are provided for retrieving data residing behind a firewall. One exemplary method involves a server receiving a first request from a data transfer client, maintaining the first request in a first queue of requests associated with a data transfer agent coupled to the network via a firewall, and providing the first request from the first queue to the data transfer agent in response to a second request received from the data transfer agent. The server receives a first response from the data transfer agent, maintains the first response in a second queue of responses associated with the data transfer client, and provides the first response from the second queue to the data transfer client in response to a third request received from the data transfer client.

Abstract: A method for providing access to a data item in a multi-tenant database system is disclosed. The method comprises storing a data item as a first data object in a first tenant domain in the database system wherein the data item comprises a knowledge-based item and the first data object has a first data object identifier (ID). The method further comprises generating a platform object with polymorphic lookup, storing database ID information for the data item in the platform object, the database ID information for the data item including the first data object ID, providing a first entity in a second tenant domain with access to the data item by linking the platform object to a first tenant-specific object accessible by the first entity, and providing for display in a user interface a link that is mapped to the data item via the platform object and the first tenant-specific object.

Abstract: Computer-implemented methods and systems are provided. The system includes a data store that is configured to store events in an event table, a temporary events file storage system (TEFSS), and a cluster of application servers. The cluster includes a first application server that generates events, and a second application server that includes an events file uploader service. When the first application server is unable to directly write events to the data store, an indirect events writer generates events file(s), and writes the events file(s) to the TEFSS. Each events file includes a plurality of events flushed from an in-memory buffer service at the first application server. When the events file uploader service determines that the first application server is inactive, it reads the events file(s) from the TEFSS, and writes the events from each of the events files to the data store.

Abstract: Disclosed are systems, apparatus, methods, and computer readable media for discontinuing the following of records in an on-demand database service environment. In one embodiment, one or more records are identified according to one or more designated criteria. The records are stored in a database. The records are being followed by one or more users in an on-demand database service environment such that updates to the records are capable of being stored as feed items in one or more feed tables in the database. The feed items are capable of being published in an information feed displayed on one or more devices associated with the one or more users. The following of the identified one or more records by the one or more users is discontinued.

Abstract: Disclosed are systems, apparatus, and methods for integrating a service console application by providing communication between a first and second network domain. In various implementations, first data is received at a second network domain, where the first data includes one or more functions. A first message may be received at the second network domain, the first message being provided at the second network domain in response to the one or more functions being invoked, and the message identifying the one or more functions. Responsive to receiving the message, the one or more functions may be executed at a computing device associated with the second network domain. Responsive to executing the one or more functions, a second message may be sent to the first domain indicating that the one or more functions have been executed, where the second message is operable to invoke and execute one or more call back functions.

Abstract: In accordance with disclosed embodiments, there are provided methods, systems, and apparatuses for implementing a cross instance user authentication architecture in an on-demand service environment including, for example, means for receiving a login request at a global Virtual Internet Protocol (VIP) address for the host organization from a client device; forwarding the login request received at the global VIP address to one of a plurality of datacenters within the host organization; determining the selected datacenter is a non-home-geo datacenter for a user associated with the login request received from the client device; establishing a back-end link from the non-home-geo datacenter to a home-geo datacenter for the user; forwarding the login request from the non-home-geo datacenter to the home-geo datacenter via the back-end link for authentication of the client device at the home-geo datacenter responsive to the login request received from the computing device; and returning a response to the client device

Abstract: Systems, methods, and computer-readable media for pinning query execution plans are described. A database system may obtain a query, and determine a organization identifier and/or user identifier associated with the query. The database system may identify an optimized plan among a set of query plans that correspond with the query, and may generate a query execution plan based on the query and the optimized plan. The database system may determine a pinned plan that is associated with the optimized plan, and may generate a query execution plan based on the pinned plan when the pinned plan is associated with the optimized plan and corresponds with the organization identifier and/or the user identifier. The database system may generate a query execution plan using optimization functions when the pinned plan is not associated with the pinned plan, or the organization identifier and/or the user identifier. Other embodiments may be described and/or claimed.

Abstract: The technology disclosed for configuring a transcoder-router to direct incoming communications to desired receivers includes receiving a selection by a user from an icon-based GUI, of an incoming voice, video, image, short message, or email media type to configure for routing. Incoming communications gets routed in the context of the incoming media type, with the transducer-router receiving a combination of routing conditions with which to determine the routing of the incoming media type: a time zone against which routing schedules are measured; a time window for the routing schedules that covers both time of day and day of week; and available receiver devices for the routing under the selected combination of the incoming media type, time zone and time window. The disclosed systems and methods include committing routing rules based on the user selections to tangible machine readable memory; and using the committed rules to route incoming media type messages.

Abstract: Computer-implemented methods and systems are provided for writing events to a data store. An application server generates events, the data store that stores the events, and a temporary events file storage system (TEFSS) temporarily stores groups of events as events files. When events are unable to be written directly to the data store, an indirect events writer is invoked that includes event capture threads each being configured to generate a particular events file, and write it to the TEFSS. Each events file includes a plurality of events flushed from an in-memory buffer service. An events file uploader service reads the events file(s) from the TEFSS, and then writes the events from each of the events files to the data store.

Abstract: Methods and systems are provided for controlling the execution of business logic that allows features to be turned on or off at run time for each particular user entity of a plurality of user entities. Prior to run time a library is configured based on an administrator's interaction with an interactive control panel at a computer of the system. For each particular user entity and for each particular code block of an object that comprises a plurality of code blocks each corresponding to a particular feature and having an enabling predicate associated with that particular code block, the library can be configured by defining an on/off state for each feature of that particular code block via an enabling predicate associated with that particular feature. The library can then be cached in a custom settings cache of the system for use at run time.

Abstract: In an example, a database system may be configured to validate relational database instructions using a plurality of validators. In some examples, validation may be pre-production for relational database instructions based on simulated user inputs and/or file, such as plan files (e.g., PL/SQL (procedural language/structured query language) files). In some examples, validation may be in production for relational database instructions based on system views of a database engine.

Abstract: In an example, a database system may be configured to validate relational database instructions using a plurality of validators. In some examples, validation may be pre-production for relational database instructions based on simulated user inputs and/or file, such as plan files (e.g., PL/SQL (procedural language/structured query language) files). In some examples, validation may be in production for relational database instructions based on system views of a database engine.

Abstract: In a computing system, methods for secure OS level login authentication for internal users to access servers. Some or all servers in a group each utilize a local ID Service for generating and validating a challenge responsive to an OS login request. The challenge is processed in a centralized secure server HSM. Rather than copying individual user public keys to each host in the data center, we need only copy the public key of the HSM to each host in the group. When a user attempts OS level login to a host, it encrypts the challenge using the public key of the HSM and forwards the request for processing in the HSM. There, it decrypts the challenge using the private key in the HSM and re-encrypts the challenge with the public key of the individual user. The user's mobile device, previously registered, is required to complete the authentication process.

Abstract: An ID service on an app server interacts with a corresponding identity app installed on a user device such as a smart phone. At setup, the ID service receives the user's public key and only a segment of the corresponding private key. A special challenge message is created and partially decrypted using the private key segment on the server side, and then decryption is completed on the client app using the remaining segment(s) of the private key to recover the challenge. A token authenticator based on the result of the decryption is sent back to the identity service, for it to verify validity of the result and, if it is valid, enable secure login without requiring a password.

Abstract: The technology disclosed describes systems and methods for implementing extensible browser executable components, such as popup controls for action, checkbox and radio button dropdown menus, modals, dialogs, date pickers and autocompletes. The disclosed technology systems and methods can also be used for rendering executable components for mobile application interfaces. The technology further discloses systems and methods for providing support for developers whose goal is to render specific implementations of browser executable components. The technology disclosed also describes systems and methods for bypassing suppression of DOM click event bubbling for a popup controls for action, checkbox and radio button dropdown menus, modals, dialogs, date pickers and autocompletes; and discloses systems and methods for implementing modal interaction between an iframe and a popup control.

Abstract: A system and apparatus for enhancing the functionality and utility of an authentication process for web applications is disclosed.