Microsoft ClickOnce

secure web app

Microsoft ClickOnce

Microsoft ClickOnce is a technology which merges ‘web’ with ‘desktop’ applications. The user is presented with a web page, which downloads an initial manifest, which in turn downloads/synchronises the remainder of the application.

Microsoft ClickOnce

Microsoft ClickOnce is a technology which merges ‘web’ with ‘desktop’ applications. The user is presented with a web page, which downloads an initial manifest, which in turn downloads/synchronises the remainder of the application.

Typically a ClickOnce application will, once loaded, start consuming resources from its (http) Origin (e.g. REST API’s, databases, etc).

Setup a ClickOnce application as any other Web Application. Then, on each Desktop that will access it, follow the below instructions.

ClickOnce Application Deployment: Streamlining Windows App Installation and Updates

Agilicus Agent

  1. Download the Agilicus Agent (Windows) to the Downloads
  2. Run without arguments. Enter your domain (e.g. the CNAME you setup during the sign-up phase)
  3. If a browser pops up, sign-in as normal

At this stage you are done. The user will see a new menu item on their Start Menu (called ‘Refresh’), they can run this any time the Administrator has added new applications that have for some reason not synced. They can also run this to resynchronise Shared fileystems, including re-supplying a second-factor authentication challenge.

Microsoft ClickOnce Deployment: Streamlining Application Installation and Updates with Agilicus AnyX

Chrome Extension

Microsoft ClickOnce Deployment: Streamlining application installation and updates with Agilicus AnyX, enhancing security and simplifying user experience. Learn how to deploy ClickOnce applications effectively using Agilicus AnyX for secure and manageable software distribution.

Agilicus recommends installing the Agilicus ClickOnce Chrome Extension. This makes the end-user experience ‘native’, no interaction is required. The user will open https://DOMAIN/ as normal. This DOMAIN will be wrapped by the Agilicus’s OpenID Connect Proxy, which enforces authentication and authorisation in advance and hands it off to a previously installed Agilicus Agent which will interact with Chromes Native Messaging. The net effect will be “click” and “run” occur automatically with no user interaction, with single-sign on.

Most Chrome users can install the Extension from the Chrome Web Store. If for some reason you do not see the extension, below are the instructions to side-load it. Install and enable the extension.

By default the extension may (depending on your settings) only enable on Click or on specific sites. You may check the extension settings as at right.

Chrome Extension Side-load (Optional)

Note: you only need these instructions if you wish a newer version than published, or you cannot see the entry in the Chrome Web Store.

ClickOnce Deployment: Securely access internal applications from anywhere with Agilicus AnyX. This image illustrates the ClickOnce deployment process, highlighting how AnyX enhances security and enables seamless remote access to Microsoft ClickOnce applications.
  1. Download the Extension from www.agilicus.com to your desktop
  2. In Chrome, open ‘chrome://extensions’ in a new tab
  3. Drag the file from your desktop into the Chrome page
  4. Install the Registry key from www.agilicus.com
  5. Restart the Chrome browser

When done, you can check the Extension is installed on the chrome://extensions page (image shown to right).

To diagnose if the Registry ‘allow’ key is set, you can navigate to ‘chrome://policy’ and you should see a policy installed as below image under ExtensionInstallAllowlist

ClickOnce Deployment Process: User clicks link, application installs and runs, Microsoft Authenticode verifies publisher. Streamlined app deployment from web servers. Agilicus AnyX Guide.