The Microsoft RDS connector facilitates your Application Workspace System to communicate directly with the RDS infrastructure. This connector allows Application Workspace to launch RemoteApps or full desktop sessions without needing RDWeb as the front-end interface.
Credential Templates and SSO
Application Workspace manages authentication using credential templates, which you can assign to packages or actions.
The credential template enables Single Sign-On (SSO), so users don’t need to manually enter credentials when launching RDS-hosted apps. For more information, see SSO for Microsoft RDS.
Application Workspace Web Portal or Application Workspace Launcher
Users access applications via the Application Workspace Web Portal or the Application Workspace Launcher installed on their device.
These interfaces present the apps in a single place, and when a user clicks an app, Application Workspace handles the connection and authentication behind the scenes.
Direct RDP Launch
Application Workspace can launch .rdp files directly or initiate RemoteApp sessions using the RDS connector, bypassing RDWeb entirely.
This method is especially useful in environments where RDWeb is not exposed externally or where a more customised user experience is desired.
Security considerations
To enhance security when integrating Application Workspace with Microsoft RDS, we recommend that you configure the connector using a service account with least privilege access. Rather than granting broad administrative rights, Application Workspace supports using a standard domain user account with only the necessary permissions to query and launch RemoteApps. This includes specific WMI permissions on the RDS Broker and membership in local groups such as Performance Log Users. For more information, see Least Privilege - Microsoft RDS Connector.