Establishing endpoint agent device binding for cloud service communications

At least one non-transitory computer-readable medium comprising instructions that, when executed by at least one processor, perform a method comprising:

• receiving, from a user agent of a device, a signal to initiate a connection between the user agent and a cloud service;
• establishing a transport layer security (TLS) tunnel with the user agent;
• allocating, to the connection between the user agent and a cloud service, a unique subdomain of a domain hosted by a gateway server;
• providing, to the user agent, a redirect to the unique subdomain;
• receiving, from an authenticator of the device, validation that the user agent initiated a connection directed to the unique subdomain;
• and
• sending an instruction to the gateway server to permit establishment of a second TLS tunnel between the user agent the gateway server.

A method comprising:

• establishing a transport layer security (TLS) tunnel with a user agent in response to receiving a request from the user agent to connect to a cloud service;
• generating a subdomain of a domain hosted by a gateway, the subdomain being associated with the request from the user agent;
• and
• sending a redirect to the user agent to connect to the subdomain.