One-Time URLs (OTURL)

Thinfinity® Workspace provides a secure mechanism for generating OTURLs that expire after a specified period. This feature is intended for scenarios where temporary or limited access to remote desktops is required.

How OTURL relates to Access Profiles

An OTURL generates a time-limited URL based on an existing Access Profile that you point at with the model parameter. It does not create temporary or anonymous profiles.

When to Use OTURL

The OTURL feature is useful in scenarios such as:

Granting external users access to a remote desktop without exposing internal authentication methods.
Creating temporary RDP connections with a defined expiration time.
Integrating Thinfinity Workspace with external applications in SSO workflows via the Configuration Manager.

Configuring OTURLs

To create an OTURL, follow these steps.

Find the API key on the Primary Broker Server

You can find the API Key of the Primary Broker in the settings.ini file located here:

C:\ProgramData\Cybele Software\Thinfinity\Workspace\DB

Request a One-Time URL from the Thinfinity Workspace Server

Use the following format:

http(s)://<ThinfinityHost>:<Port>/ws/oturl/get?<queryString>

The query string should include the following required parameters:

apikey=<yourApiKey>&apiuser=<apiUser>&model=<model>&plen=<passwordLength>&expires=<expirationTime>

Parameter	Description
`apikey`	The API key configured on the Primary Broker.
`apiuser`	The user initiating the request.
`model`	Specifies the Access Profile model to use.
`plen`	Length of the password to be generated.
`expires`	Time (in minutes) before the OTURL expires.

Check the OTURL format received

If the request is valid, Thinfinity Workspace returns an OTURL with the following format:

/oturl.html?key=w7NJNschBdJD9e6G6luWhOCalM$oFW7guqC6jE1IQah3AJm3&pass=BOWZB8FG

Construct the complete URL

To construct the complete URL, concatenate it with your Thinfinity Workspace address:

http(s)://<ThinfinityHost>:<Port>/oturl.html?key=w7NJNschBdJD9e6G6luWhOCalM$oFW7guqC6jE1IQah3AJm3&pass=BOWZB8FG

This URL can be used by an application to redirect the user to the remote desktop, or it can be sent via email to an external user for temporary access.

Testing OTURL

A sample HTML/AJAX page named oturltest.html is included with the Thinfinity Workspace installation. It demonstrates how to generate and consume One-Time URLs using the parameters discussed above.

Reference

For detailed guidance on customizing and deploying OTURL functionality in your environment, see How to use Thinfinity Remote Workspace One-Time URL Test application.