Shield API

The Workspace Control Shield API resides on the Application Server and adds a security layer to Ivanti Workspace components. It handles Domain user validation, generates security tokens for valid users, and verifies these tokens before executing any commands or database queries.

The Shield API stores database connection details in the local registry of the Application Server. As a result, components like the Workspace Control Console and Workspace Control Agent no longer store or access database connection details directly. Instead, all database interactions are handled exclusively by the Shield API, which executes queries on behalf of these components.

The Shield API runs two separate w3wp.exe processes—one for the Authentication API and another for the Resource API.