Systems and methods for accessing a virtual desktop

A non-transitory computer-readable storage medium having computer-executable instructions stored thereon that, when executed by one or more computing devices, cause the computing devices to perform operations comprising:

• receiving a request from a first user to access a first access-protected virtual desktop of a plurality of access-protected virtual desktops;
• receiving one of an authentication token or a reference to the authentication token, wherein the authentication token indicates that the first user successfully logged in to an authentication portal by submitting access credentials to the authentication portal;
• determining that the first user has permission to access the first access-protected virtual desktop;
• generating smartcard credentials for the first user, wherein the smartcard credentials comprise a private key, a digital certificate, and a personal identification number (PIN) for the first user;
• storing the smartcard credentials in a virtual smartcard;
• authorizing the client computing device to log into the first access-protected virtual desktop using the smartcard credentials stored in the virtual smartcard, without entering additional access credentials;
• receive a request from the first user to access a second access-protected network resource of the plurality of access-protected network resources, the second access-protected network resource having different access permissions from the first access-protected network resource;
• determine that the first user has permission to access the second access-protected network resource from one of the authentication token or a reference to the authentication token;
• and
• associate the virtual smartcard with the second access-protected network resource to allow the first user to access the second access-protected network resource using the smartcard credentials without entering additional access credentials, wherein:
• the plurality of access-protected network resources and the one or more devices are included within a domain.

A method of authorizing a first user to access access-protected virtual desktops, the method comprising:

• receiving, by a first computing device, a request from the first user to access a first access-protected virtual desktop of a plurality of access-protected virtual desktops;
• receiving, by the first computing device, one of an authentication token or a reference to the authentication token, wherein the authentication token indicates that the first user successfully logged in to an authentication portal by submitting access credentials to the authentication portal;
• determining that the first user has permission to access the first access-protected virtual desktop;
• generating smartcard credentials for the first user, wherein the smartcard credentials comprise a private key, a digital certificate, and a personal identification number (PIN) for the first user;
• storing the smartcard credentials in a virtual smartcard;
• and
• associating the virtual smartcard with the first access-protected virtual desktop to allow the first user to log in to the first access-protected virtual desktop using the smartcard credentials without entering additional access credentials;
• receiving a request from the first user to access a second access-protected network resource of the plurality of access-protected network resources, the second access-protected network resource having different access permissions from the first access-protected network resource;
• determining that the first user has permission to access the second access-protected network resource from one of the authentication token or a reference to the authentication token;
• and
• associating the virtual smartcard with the second access-protected network resource to allow the first user to access the second access-protected network resource using the smartcard credentials without entering additional access credentials, wherein:
• the plurality of access-protected network resources and the first computing device are included within a domain.