Single sign-on from desktop to network

An apparatus comprising:

• one or more processors;
• and
• memory storing instructions that, when executed by the one or more processors, cause the apparatus to:
• authenticate a website to be a trusted website, wherein the website is being accessed through a hosted desktop;
• generate a one-time-use token that authorizes the trusted website to obtain an identity token corresponding to a user, wherein the identity token corresponding to the user is associated with establishment of a single-sign-on on behalf of the user with the trusted website;
• send the one-time-use token to the trusted website;
• and
• upon receiving, from the hosted desktop, a request for verifying whether the one-time-use token is authentic and not already used, verify whether the one-time-use token is authentic and not already used.

A non-transitory computer-readable medium storing instructions that, when executed, cause:

• authenticating a website to be a trusted website, wherein the website is being accessed through a hosted desktop;
• generating a one-time-use token that authorizes the trusted website to obtain an identity token corresponding to a user, wherein the identity token corresponding to the user is associated with establishment of a single-sign-on on behalf of the user with the trusted website;
• sending the one-time-use token to the trusted website;
• and
• upon receiving, from the hosted desktop, a request for verifying whether the one-time-use token is authentic and not already used, verifying whether the one-time-use token is authentic and not already used.