Web browser-based secure equipment access

An apparatus, comprising:

• one or more network interfaces;
• a processor coupled to the one or more network interfaces and configured to execute one or more processes;
• and
• a memory configured to store a process that is executable by the processor, the process when executed configured to:
• receive a login request from a web browser executed by a client endpoint in a first network;
• provide a one-time password generated by the apparatus to the web browser that causes the client endpoint to invoke a local handler process associated with an access service executed by the client endpoint or to invoke access by the web browser to a particular uniform resource locator on the client endpoint;
• receive a remote connection request from the access service that includes the one-time password associated with a target endpoint to access the target endpoint in a second network;
• and
• configure, based on the remote connection request, a remote access connection between the client endpoint in the first network and the target endpoint in the second network.

A tangible, non-transitory, computer-readable medium storing program instructions that cause a device to execute a process comprising:

• receiving, at the device, a login request from a web browser executed by a client endpoint in a first network;
• providing, by the device, a one-time password generated by the device to the web browser that causes the client endpoint to invoke a local handler process associated with an access service executed by the client endpoint or to invoke access by the web browser to a particular uniform resource locator on the client endpoint;
• receiving, at the device, a remote connection request from the access service that includes the one-time password associated with a target endpoint to access the target endpoint in a second network;
• and
• configuring, by the device and based on the remote connection request, a remote access connection between the client endpoint in the first network and the target endpoint in the second network.