System, method and computer program product for enabling access to a resource of a multi-tenant on-demand database service utilizing a token

1. A method, comprising:

receiving, at a first domain, a request from a user to make a resource accessible;

generating a token that includes a randomly generated identifier and a time-to-live;

storing the token in a record including a user identification, tenant identification, and information for accessing the resource;

sending to the user the token and an instruction to transmit the token to a second domain;

receiving, at the second domain, a request access the resource, the request including the token;

determining that the request to access the resource includes the token;

verifying the token by determining that the token is stored and the token has not expired; and

permitting access to at least one record containing the token by executing computer code.

2. The method of claim 1 , wherein the request to access the resource includes a request to download the resource.

3. The method of claim 1 , wherein the token is automatically generated on-demand in response to the receipt of the request to make the resource accessible.

4. The method of claim 1 , wherein the token includes a randomly generated identifier.

5. The method of claim 1 , wherein the first domain includes a first server and the second domain includes a second server.

6. The method of claim 1 , wherein the request to access the resource is received from a device of the user.

7. The method of claim 1 , wherein the token is verified utilizing the second domain.

8. The method of claim 7 , wherein access to the resource by the user is prevented in response to a failure of the verification of the token.

9. The method of claim 1 , wherein the token to live and is verified by determining that the token is stored and that the token has not expired.

10. A computer program product, comprising a non-transitory computer usable medium having a computer readable program code embodied therein, the computer readable program code adapted to be execute to cause a computer to implement a method. the method comprising:

receiving, at a first domain, a request from a user to make a resource accessible;

generating a token that includes a randomly generated identifier and a time-to-live;

storing the token in a record including a user identification, tenant identification, and information for accessing the resource;

sending to the user the token and an instruction to transmit the token to a second domain;

receiving, at the second domain, a request to access the resource, the request including the token;

determining that the request to access the resource includes the token;

verifying the token by determining that the token is stored and the token has not expired; and

permitting access to at least one record containing the token by executing computer code.

11. An apparatus, comprising:

a first processor for:

receiving, at a first domain, a request from a user to make a resource accessible;

generating a token that includes a randomly generated identifier and a time-to-live;

storing the token in a record including a user identification, tenant identification, information for accessing the resource;

sending to the user the token and an instruction to transmit the token to a second domain;

a second processor for:

receiving, at the second domain, a request to access the resource, the request including the token;

determining that the request to access the resource includes the token;

verifying the token by determining that the token is stored and the token has not expired; and

permitting access to at least one record containing the token by executing computer code.

12. The method of claim 1 , wherein the user is a member of a tenant of a multi-tenant on-demand database service.

13. The method of claim 1 , wherein the executable computer code includes computer code executable to perform an action providing the requested access to the resource.

14. The method of claim 1 , further comprising sending the token to a device of the user.

15. The method of claim 1 , further comprising sending a uniform resource locator (URL) of the second domain to a device of the user.

16. The method of claim 1 , further comprising sending to the user an instruction to transmit the token to the second domain.

17. The method of claim 1 , further comprising using the token to identify the executable computer code to provide access to the at least one record.