A system comprising: a gateway, within an internal cloud, configured to receive messages from a user device and configured to forward the messages to a computing device associated with an external cloud; and a workspace cloud connector communicatively coupled to the gateway, the workspace cloud connector configured to: intercept a first message of the messages being forwarded to the computing device associated with the external cloud, said intercepting based on the first message including user identity credentials for an internal application; generate an encryption key; encrypt the user identity credentials using the encryption key; generate a first hash of the encryption key; transmit a second message including the encrypted user identity credentials and the first hash of the encryption key to the computing device associated with the external cloud; in response to transmitting the second message including the encrypted user identity credentials and the first hash of the encryption key to the computing device associated with the external cloud, receive a routing address of a virtual delivery agent from the computing device associated with the external cloud; and transmit a third message including the encryption key and the routing address of the virtual delivery agent to the user device. a gateway, within an internal cloud, configured to receive messages from a user device and configured to forward the messages to a computing device associated with an external cloud; and a workspace cloud connector communicatively coupled to the gateway, the workspace cloud connector configured to: intercept a first message of the messages being forwarded to the computing device associated with the external cloud, said intercepting based on the first message including user identity credentials for an internal application; generate an encryption key; encrypt the user identity credentials using the encryption key; generate a first hash of the encryption key; transmit a second message including the encrypted user identity credentials and the first hash of the encryption key to the computing device associated with the external cloud; in response to transmitting the second message including the encrypted user identity credentials and the first hash of the encryption key to the computing device associated with the external cloud, receive a routing address of a virtual delivery agent from the computing device associated with the external cloud; and transmit a third message including the encryption key and the routing address of the virtual delivery agent to the user device. intercept a first message of the messages being forwarded to the computing device associated with the external cloud, said intercepting based on the first message including user identity credentials for an internal application; generate an encryption key; encrypt the user identity credentials using the encryption key; generate a first hash of the encryption key; transmit a second message including the encrypted user identity credentials and the first hash of the encryption key to the computing device associated with the external cloud; in response to transmitting the second message including the encrypted user identity credentials and the first hash of the encryption key to the computing device associated with the external cloud, receive a routing address of a virtual delivery agent from the computing device associated with the external cloud; and transmit a third message including the encryption key and the routing address of the virtual delivery agent to the user device.