Scaling private application access support per client

A non-transitory computer-readable storage medium having computer readable code stored thereon for programming at least one processor at a broker to perform steps of:

• responsive to a user and associated user device executing a client connector being authenticated, receiving a notification from the client connector;
• determining private applications accessible by the user based on policy, wherein the private applications are located in one of a public cloud, a private cloud, and an enterprise network;
• and
• sending a Top-Level Domain+1 (TLD+1) list of the accessible private applications to the user device, wherein the TLD+1 includes a TLD and a domain name.

A broker in a cloud-based system comprising:

• one or more processors and memory storing instructions that, when executed, cause the one or more processors to
• responsive to a user and associated user device executing a client connector being authenticated, receive a notification from the client connector;
• determine private applications accessible by the user based on policy, wherein the private applications are located in one of a public cloud, a private cloud, and an enterprise network;
• and
• send a Top-Level Domain+1 (TLD+1) list of the accessible private applications to the user device, wherein the TLD+1 includes a TLD and a domain name.