Credential sharing between multiple client applications

A system adapted to share user credentials between remote access client applications, comprising:

• at least one processor;
• and
• at least one memory communicatively coupled to said at least one processor, the memory having stored therein computer-executable instructions for:
• receiving from a user via a terminal services web access web page a request to launch a remote access client application;
• instantiating a credential repository, wherein the credential repository comprises the user's authentication credentials stored in encrypted form such that only applications executing on behalf of the user during a current session can decrypt the credentials in the credential repository, wherein different user authentication credentials are stored independently for different sets of resources, the resources defined by a combination of a unique identifier and a list of trusted certificates for verifying authenticity of connection requests;
• validating the request to launch a remote access client application;
• attaching at least one of said authentication credentials to the request and sending the request to a resource associated with the remote access client application;
• and
• deleting the credential repository upon receiving a logoff indication.

A computer readable storage device storing thereon computer executable instructions for sharing user credentials between remote access client applications, the medium comprising instructions for:

• receiving from a user a request to initiate a logon session and launch a first remote access client application;
• instantiating a credential repository for the user comprising the user's authentication credentials and associating the user's authentication credentials with a list of resources available to the user, the list of resources available to the user being predetermined and received from a host providing a remote access user interface, wherein different user authentication credentials are stored independently for different sets of resources and wherein the resources are defined by a combination of a unique identifier and a list of trusted certificates for verifying authenticity of connection requests;
• validating the request to launch the first remote access client application;
• attaching a first user credential to the request and sending the request to a first resource associated with the first remote access client application;
• redirecting a request to launch a second remote access client application to the credential repository;
• validating the request to launch the second remote access client application;
• and
• attaching a second user credential to the request to launch a second remote access client application and sending the request to a second resource associated with the second remote access client application.