Abstract: A method may include generating, by a cloud computing service, a user virtual machine from an image virtual machine and a template comprising a uniform resource locator (URL) of a bootstrap script by: downloading, in the user virtual machine and from the URL, the bootstrap script, and executing the bootstrap script to install a bootstrap agent as a startup service in the user virtual machine. The cloud computing service may limit execution of the bootstrap script in the user virtual machine to generating the user virtual machine. The bootstrap script may include instructions to install the bootstrap agent. The method may further include executing, by the user virtual machine, the startup service to install packages.

Abstract: A method may include sending, to a provisioning service and by an application executing on a virtual machine, a local authentication token for a user of the virtual machine. The provisioning service may use the local authentication token to generate a portable access token. The method may further include receiving, from the provisioning service, the portable access token, and launching, by the application and for the user, a session in a web service by sending the portable access token to an application programming interface (API) of the web service.