Abstract: The techniques disclosed herein provide an enhanced single sign-on flow for secure computing resources, such as a virtual machine or hosted applications. In some configurations, the techniques process different types of security data, e.g., credentials, tokens, certificates, and reference objects at specific computing entities of a system to provide a single sign-on flow for providing access to secure computing resources from a client computing device. In one illustrative example, a select type of security data, such as a certificate, is generated from a token and a claim at a particular computing resource, such as an agent operating on a virtual machine. In another example, a signed version of the certificate can be stored and verified at the virtual machine. By generating certificates at such particular computing resources, the computing resource can verify a person's credentials using a secure single sign-on flow without requiring the person to provide credentials multiple times.

Abstract: Embodiments are directed to providing direct access to graphical user interface (GUI) frame buffers and to associating input hardware with a login session. In one scenario, a computer system registers a plug-in software module with a remote desktop client. The registering includes requesting one or more frame buffers rendered for display on a computer system display. The computer system determines that a session has been established between a computer system user and the remote desktop client. The computer system then receives the requested frame buffers and displays the frame buffers on the computer system display and/or sends the received frame buffers to various registered third parties.

Abstract: A method includes determining if a server supporting an application and a client having remote desktop access to the server are on a same physical computing device. Upon determining that the server and the client are on the same physical computing device, graphics data related to the application is stored from the server to shared memory that is accessible by the server and by the client. Information to enable the client to retrieve the graphics data stored by the server in the shared memory is communicated from the server to the client.

Abstract: A method includes determining if a server supporting an application and a client having remote desktop access to the server are on a same physical computing device. Upon determining that the server and the client are on the same physical computing device, graphics data related to the application is stored from the server to shared memory that is accessible by the server and by the client. Information to enable the client to retrieve the graphics data stored by the server in the shared memory is communicated from the server to the client.

Abstract: A shared resource computing (SRC) system that provides a mechanism for creating a shared session among individual sessions is described. In an ad hoc peer model, a session is created by individual users. One individual session assumes an administrative session role and invites other user sessions to join the shared session. Local environments from the individual sessions are published and the resources of the individual sessions form linked device groups that allow the resources to be aggregated for the shared session.

Abstract: A method includes determining if a server supporting an application and a client having remote desktop access to the server are on a same physical computing device. Upon determining that the server and the client are on the same physical computing device, graphics data related to the application is stored from the server to shared memory that is accessible by the server and by the client. Information to enable the client to retrieve the graphics data stored by the server in the shared memory is communicated from the server to the client.

Abstract: Embodiments are directed to providing direct access to graphical user interface (GUI) frame buffers and to associating input hardware with a login session. In one scenario, a computer system registers a plug-in software module with a remote desktop client. The registering includes requesting one or more frame buffers rendered for display on a computer system display. The computer system determines that a session has been established between a computer system user and the remote desktop client. The computer system then receives the requested frame buffers and displays the frame buffers on the computer system display and/or sends the received frame buffers to various registered third parties.

Abstract: A method includes determining if a server supporting an application and a client having remote desktop access to the server are on a same physical computing device. Upon determining that the server and the client are on the same physical computing device, graphics data related to the application is stored from the server to shared memory that is accessible by the server and by the client. Information to enable the client to retrieve the graphics data stored by the server in the shared memory is communicated from the server to the client.

Abstract: Described herein are various techniques and principles for determining how to assign control of peripherals and assigning control of peripherals. In some embodiments, determining how to assign control of peripherals comprises reviewing connections of peripherals to the computing device and evaluating rules to determine management points in the connections. In some cases, the connections of peripherals to the computing device may be organized into a hierarchy corresponding to a hierarchy of physical connections of the peripherals, including physical connections of peripherals located remote from the computing device and possibly connected through another computing device. When management points are identified among the connections, control of peripherals associated with the management points may be assigned in the same way. For example, access rights to each of the peripherals may be assigned to a same user session.

Abstract: A server in a Shared Resource Computing (SRC) system runs applications and manages licenses for those applications across multiple sessions and/or user terminals. Plug-ins created by an SRC App Store translate the licensing requirements of various applications into terms that can be monitored and enforced by the SRC App Store. When payments are necessary to comply with the licensing requirements, the SRC App Store manages the payments. The SRC App Store also enforces the licensing requirements by providing feedback regarding enforcement consequences.

Abstract: A shared resource computing (SRC) system that provides a mechanism for creating a shared session among individual sessions is described. In an ad hoc peer model, a session is created by individual users. One individual session assumes an administrative session role and invites other user sessions to join the shared session. Local environments from the individual sessions are published and the resources of the individual sessions form linked device groups that allow the resources to be aggregated for the shared session.

Abstract: Described herein are various techniques and principles for determining how to assign control of peripherals and assigning control of peripherals. In some embodiments, determining how to assign control of peripherals comprises reviewing connections of peripherals to the computing device and evaluating rules to determine management points in the connections. In some cases, the connections of peripherals to the computing device may be organized into a hierarchy corresponding to a hierarchy of physical connections of the peripherals, including physical connections of peripherals located remote from the computing device and possibly connected through another computing device. When management points are identified among the connections, control of peripherals associated with the management points may be assigned in the same way. For example, access rights to each of the peripherals may be assigned to a same user session.