Unified workspace for thin, remote, and SAAS applications

A system comprising:

• one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising:
• receiving a user request for a software as a service (SaaS) application;
• and
• in response to the user request, provisioning the SaaS application for a user, the provisioning the SaaS application comprising:
• generating a random password configured for single sign-on for the user;
• providing a request to the SaaS application to create an account for the user;
• updating a single sign-on service with received user account information including the random password;
• provisioning the SaaS application for the user;
• and
• creating a SaaS account in an application entitlement object store with a new provision key that provides single sign-on access to the SaaS application to the user using the random password and without providing the random password to the user.

One or more non-transitory computer storage media encoded with computer program instructions that when executed by one or more computers cause the one or more computers to perform operations comprising:

• receiving a user request for a software as a service (SaaS) application;
• and
• in response to the user request, provisioning the SaaS application for a user, the provisioning the SaaS application comprising:
• generating a random password configured for single sign-on for the user;
• providing a request to the SaaS application to create an account for the user;
• updating a single sign-on service with received user account information including the random password;
• provisioning the SaaS application for the user;
• and
• creating a SaaS account in an application entitlement object store with a new provision key that provides single sign-on access to the SaaS application to the user using the random password and without providing the random password to the user.