Multi-Hop Passthough authentication

Enterprise Scenario is as follows: User logs on his/her "home" RAS Portal and gets published full desktop. On published desktop he/she has most of their apps but some special apps are on completely different RAS farms (not under control of same IT team and physically in totally different locations but domains of where full desktop and special apps are hosted are trusted).
On full desktop, the RAS client is installed.

Goal is that the end user only has to login once when he/she is accessing the full desktop but no additional visible second authentication should occur when the user is launching the published remotely hosted special app from within the full desktop. (--> Citrix can do this and we are using this actively).

 

Hi Michael,
My name is Mark Howell, and I am a Principal PM for Parallels RAS. If I understand this request correctly, our software already has this functionality. I recorded a short video showing this. Hopefully, I can upload the file.
In the video, User1 logs in to the Web client (User portal) to farm HL-RAS5, where most of my apps are located. User1 launches his/her desktop - Win10-194a. Once launched, the Parallels client automatically starts and logs in with the User1 credentials to Farm HL-RAS1, where the SPECIAL APPS are located. User1 opens that folder and launches the special app from HL-RAS1 - a different farm. Is this what you're looking for?
I wasn't able to upload it, but I copied it to one drive - here's the link:
https://1drv.ms/v/c/71ce0d44c6bb691c/EQAghpLoo41OtlPq9AIl-FwBUWy_umH0LYpORA3G9ERDlg?e=CnIW1R
Ths is from my personal One Drive. If it needs to be from Parallels, let me know I can do that.
Thanks,
Mark Howell