Private application distribution mechanisms and architectures

Abstract

Private AppExchanges within an on-demand services environment in which multiple tenants have corresponding tenant identifiers (IDs) and the on-demand services environment is provided by an entity separate from the client entities. Access to a listing of apps is provided to a remote device based on a tenant ID associated with the user. The listing of apps for each tenant ID is controlled by an administrative entity associated with each respective tenant ID and. A download request is received from the remote device for a selected app from the listing. The remote device is allowed access only to the listing of apps having a tenant ID corresponding to the tenant ID for the remote device. Download access is granted to the remote device for a selected app in response to the download request. The code for the selected app is transmitted from a storage device to the remote device.

1 - 16 . (canceled) 
     
     
         17 . A method for providing app listings within an on-demand services environment provided by one or more processors coupled with at least one memory device, the method comprising:
 providing, with the one or more processors, to a remote device, access to a listing of apps, wherein the listing of apps is stored in a database within the on-demand services environment, the listing of apps provided is based on an identifier associated with a user of the remote device and the listing of apps is specific to one or more groups to which the user belongs, and the listing of apps is based on an authorization utilized to access the on-demand services environment without additional authorization specific to the listing of apps;   receiving a request, with the one or more processors, from the remote device for a selected app from the listing;   granting access, with the one or more processors, to the remote device for the selected app in response to the request, wherein the access for the selected app is associated with the identifier for the user of the remote device;   receiving, with the one or more processors, from the remote device, a request for authorization to use the selected app; and   transmitting, with the one or more processors, authorization to use the selected app if the user of the remote device is authorized to use the selected app.   
     
     
         18 . The method of  claim 17  wherein the listing of apps is based on the identifier to provide user-specific listings of apps for individual users that are specific to one or more groups to which the user belongs and not available to other groups of users 
     
     
         19 . The method of  claim 17  wherein the listing of apps is provided by language to multiple political jurisdictions. 
     
     
         20 . The method of  claim 17  wherein authorization is further dependent upon assessed risk associated with the remote device. 
     
     
         21 . The method of  claim 17  wherein authorization is further dependent upon assessed risk associated with the user. 
     
     
         22 . The method of  claim 17  wherein the access granted is conditional access. 
     
     
         23 . The method of  claim 17  wherein the listing of apps is further dependent upon app type. 
     
     
         24 . A non-transitory computer-readable medium having stored thereon instructions that, when executed by one or more processors, cause the one or more processors to provide app listings within an on-demand services environment provided by one or more processors coupled with at least one memory device in which users can only access authorized data, when executed, are configurable to cause the one or more processors to:
 provide, with the one or more processors, to a remote device, access to a listing of apps, wherein the listing of apps is stored in a database within the on-demand services environment, the listing of apps provided is based on an identifier associated with a user of the remote device and the listing of apps is specific to one or more groups to which the user belongs, and the listing of apps is based on an authorization utilized to access the on-demand services environment without additional authorization specific to the listing of apps;   receive a request, with the one or more processors, from the remote device for a selected app from the listing;   grant access, with the one or more processors, to the remote device for the selected app in response to the request, wherein the access for the selected app is associated with the identifier for the user of the remote device;   receive, with the one or more processors, from the remote device, a request for authorization to use the selected app; and   transmit, with the one or more processors, authorization to use the selected app if the user of the remote device is authorized to use the selected app.   
     
     
         25 . The non-transitory computer-readable medium of  claim 24  wherein the listing of apps is based on the identifier to provide user-specific listings of apps for individual users that are specific to one or more groups to which the user belongs and not available to other groups of users. 
     
     
         26 . The non-transitory computer-readable medium of  claim 24  wherein the listing of apps is provided by language to multiple political jurisdictions. 
     
     
         27 . The non-transitory computer-readable medium of  claim 24  wherein authorization is further dependent upon assessed risk associated with the remote device. 
     
     
         28 . The non-transitory computer-readable medium of  claim 24  wherein authorization is further dependent upon assessed risk associated with the user. 
     
     
         29 . The non-transitory computer-readable medium of  claim 24  wherein the access granted is conditional access. 
     
     
         30 . The non-transitory computer-readable medium of  claim 24  wherein the listing of apps is further dependent upon app type. 
     
     
         31 . A system having one or more processors to provide app listings within an on-demand services environment provided by one or more processors coupled with at least one memory device in which users can only access authorized data the one or more processors configurable to:
 provide, with the one or more processors, to a remote device, access to a listing of apps, wherein the listing of apps is stored in a database within the on-demand services environment, the listing of apps provided is based on an identifier associated with a user of the remote device and the listing of apps is specific to one or more groups to which the user belongs, and the listing of apps is based on an authorization utilized to access the on-demand services environment without additional authorization specific to the listing of apps;   receive a request, with the one or more processors, from the remote device for a selected app from the listing;   grant access, with the one or more processors, to the remote device for the selected app in response to the request, wherein the access for the selected app is associated with the identifier for the user of the remote device;   receive, with the one or more processors, from the remote device, a request for authorization to use the selected app; and   transmit, with the one or more processors, authorization to use the selected app if the user of the remote device is authorized to use the selected app.   
     
     
         32 . The system of  claim 31  wherein the listing of apps is based on the identifier to provide user-specific listings of apps for individual users that are specific to one or more groups to which the user belongs and not available to other groups of users 
     
     
         33 . The system of  claim 31  wherein the listing of apps is provided by language to multiple political jurisdictions. 
     
     
         34 . The system of  claim 31  wherein authorization is further dependent upon assessed risk associated with the remote device. 
     
     
         35 . The system of  claim 31  wherein authorization is further dependent upon assessed risk associated with the user. 
     
     
         36 . The system of  claim 31  wherein the access granted is conditional access.