Abstract: A method includes obtaining, by an application running on a computing device, a single sign-on (SSO) username of a user who is using the device, without input from the user. The method further includes passing the SSO username to an identity provider (IdP) so as to authenticate the user to the application via an SSO process, thereby causing the IdP to send information about the user to the application, and performing a function, by the application, based on the information. Other embodiments are also described.

Abstract: A method for protecting a computer which includes a processor configured to access a set of files, the method including the processor detecting a first request to access a given file. in response to the first request, a notification of the first request is conveyed by the processor to a server prior to executing the first request. In response to receiving the notification, a second request to retrieve metadata from the given file is conveyed by the server to the computer. In response to receiving the second request, the requested metadata is retrieved from the given file by the processor. The retrieved metadata is conveyed by the computer to the server, and in response to receiving the conveyed metadata, a decision as to whether to authorize the first request is conveyed from the server to the computer. Finally, the processor responds to the first request in accordance with the decision.

Abstract: A method includes, in a browser running on a computing device, detecting that an administrator of a given web-based application (WBA) among multiple WBAs, has logged-in to the given WBA. While the administrator is logged-in: (i) a user whose access privileges to the given WBA are required to be changed is automatically identified, and (ii) the access privileges of the user in the given WBA by the browser, are changed on behalf of the logged-in administrator.

Abstract: Methods, storage systems and computer program products implement embodiments of the present invention method for protecting a client computer, which includes a processor and a display. The method includes analyzing a web page that was downloaded to the client computer, and identifying, by the processor, a password input field in the web page. After rendering the password input field to the display, an input to the password input field is captured, and the captured input is evaluated against a specified password policy. Finally, an alert is generated upon detecting a violation of the specified password policy.

Abstract: A method includes obtaining, by an application running on a computing device, a single sign-on (SSO) username of a user who is using the device, without input from the user. The method further includes passing the SSO username to an identity provider (IdP) so as to authenticate the user to the application via an SSO process, thereby causing the IdP to send information about the user to the application, and performing a function, by the application, based on the information. Other embodiments are also described.