Thinfinity Workspace includes a very powerful feature that allows you to create 1-time disposable links. These links can be used to perform all kinds of integrations.
The following are just some examples of what you can accomplish using OT URL:
– Automate Profile connections: Securely start RemoteApps or Remote Desktop Connections
– Protect your environment by using encrypted one-time disposable links
– Embed an RDP connection into a public web page
– Start a connection to a Remote Application Profile with different parameters.
Thinfinity Workspace offers a mechanism to generate One-Time-URL connections that expire after a given period of time.
The One-Time-URL feature is designed to work with the
Access Profiles and Authentication Methods Security Levels.
There are some situations in which the One-Time-URL might be useful:
Giving access to a Remote Desktop to external users without having to provide internal Authentication methods
Generating temporary access to a Remote Desktop Connection
Integrating the Configuration Manager on a Single-Sign-On Scheme along with external applications.
You have to configure an ApiKey on the Primary Broker Server in order to use this method. How it works:
1. First, you need to ask Thinfinity® Workspace to generate the URL for you. Call Thinfinity® Workspace server following this URL format:
http(s)://Thinfinity:Port/ws/oturl/get?<queryString>
2. The queryString should be built with all parameters listed below:
apikey= <apikey> &apiuser= <apiuser> &model= <model> &plen= <passlen> &expires= <expires>
On the table below, you can see a description for each required parameter:
Parameter | Description |
apiKey | The ApiKey is a secret value, known only by Thinfinity® Remote Workspace and the corporate application. Find out more about it on the ApiKey topic. |
apiuser | Use this parameter to identify the user within Thinfinity® Remote Workspace. The value should be the user or email registered in your website. The users are seen in the Analytics Web Service. |
model | Send the profile key of the profile you want to connect to. The profile's settings will work as a template for the One-Time-URL connection that will be established. You can modify these settings by adding more parameters to the One-time-URL. |
plen | The plen parameter carries the password length. |
expires | Through this parameter you can set an expiration(in minutes) for the URL. Expires = 30 means that the URL won't work anymore after 30 minutes from the URL generation. |
On the next topics, you can find out other parameters you can use to Configure the connection and Enable features.
3. If Thinfinity Workspace gets to authenticate with the parameters sent on the queryString, it will return a One-Time-URL that will allow you to establish an RDP connection with the remote desktop.
/oturl.html?key=w7NJNschBdJD9e6G6luWhOCalM$oFW7guqC6jE1IQah3AJm3&pass=BOWZB8FG
Concatenate the Thinfinity Workspace address to the generated URL, following this format below:
http(s)://Thinfinity:Port/oturl.html?key=w7NJNschBdJD9e6G6luWhOCalM$oFW7guqC6jE1IQah3AJm3&pass=BOWZB8FG
This way, the URL will be ready to be used. You can redirect your application to the desktop connection through it, or even send it to an external user by email.
You will find an HTML/ajax example included with the Thinfinity Workspace installation. The page is named oturltest.html and implements the features covered on this topic for you to test them. For more information on how to use it go here.
In conclusion, One-Time URL further increases the security of your shared applications and Remote Desktop connections, providing your Workspace environment with enhanced privacy and avoiding user data breach.