US 12,284,170 B2
Day zero user access to enterprise resources
Nikolay Poturnak, Palo Alto, CA (US); Gourav Mukherjee, Bangalore (IN); Jagjit Singh Sethi, Sunnyvale, CA (US); and Anshul Sharma, Bangalore (IN)
Assigned to Omnissa, LLC, Mountain View, CA (US)
Filed by Omnissa, LLC, Mountain View, CA (US)
Filed on Sep. 9, 2021, as Appl. No. 17/469,942.
Claims priority of application No. 202141031667 (IN), filed on Jul. 14, 2021.
Prior Publication US 2023/0016358 A1, Jan. 19, 2023
Int. Cl. H04L 29/06 (2006.01); G06F 3/0482 (2013.01); G06Q 10/105 (2023.01); H04L 9/40 (2022.01)
CPC H04L 63/083 (2013.01) [G06F 3/0482 (2013.01); G06Q 10/105 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system for enabling a new employee of an enterprise to access resources of the enterprise, the system comprising:
at least one computing device including at least one processor and memory, wherein the at least one processor is configured to execute instructions stored in the memory to at least:
invoke an application programming interface (API) of a human resources system to acquire a new employee record from a data store associated with the human resources system, the new employee record indicating that the new employee has been hired;
create a record corresponding to the new employee in a directory service utilized by the enterprise, and assign the record in the directory service to a user group within the directory service that is designated for new employees;
generate a one-time link that includes a unique identifier as a uniform resource locator (URL) query string, the one-time link providing access to a portal of the enterprise that includes an application catalog comprising a plurality of applications that may be installed on a client device of the new employee;
transmit the one-time link to the client device and then, upon the new employee accessing the one-time link at the client device, validate the one-time link and then expire the one-time link; and
provide the portal to the client device after validating the one-time link and then redirect the client device to a site or access application through which a selected application of the application catalog is installed onto the client device.