We have a component called 'Connector', which acts as a proxy between the user and the server, this component handles the authentication part of the RDP and SSH protocols.

The whole process is transparent for the user, the user clicks to connect to a server and 'magically' the authenticated session is on the user's browser window.