oneclick™
A 100% browser-based workspace with twelve integrated cloud providers, German data sovereignty and its own streaming protocol. An alternative for sovereign DACH setups — layered access protection with a cloud DMZ.
As at September 2026
Ihre oneclick-Konfiguration zusammenstellen
oneclick™ is a aggregierte Plattform — 8 of the 12 core modules are already built into the platform licence (session monitoring, multi-tenancy, browser-in-browser access, multi-cloud orchestration). The available add-ons address Managed Services, data exchange, hardware integration and on-premises connectivity.
The feature set at a glance
Which of the twelve core capabilities of a modern workplace stack does your configuration cover natively — and where are extensions needed? Each puzzle piece shows the maturity.
The twelve modules — what is in, what is missing?
Each module describes one core capability of the workplace stack. The colour shows its current status in your configuration. Select add-ons in the configurator above and you will see here which module improves and why.
Endpoint platform (outside the puzzle)
oneclick™ is endpoint-neutral by definition: a browser supported by oneclick™ is enough — Windows, Mac, Linux, iOS, Android, ChromeOS, IGEL OS, UniconOS (formerly Unicon eLux). Ideal for BYOD, kiosks, schools and heterogeneous endpoint estates. No client installation, no plugins, no agents.
Web-Browser (universal) · supported browsers
Google Chrome from version 109 is recommended; Microsoft Edge from 109 (no longer recommended) and Safari from 16.3, on mobile devices only, are supported as well. A full workspace in a browser tab. Full session functionality, with limited peripheral redirection natively (extensible through the optional USB redirect add-on). Perfect for BYOD, Chromebooks and kiosk scenarios.
IGEL OS (Kiosk/Standard) · IGEL Technology
A Linux-based thin client operating system — oneclick runs through the browser integrated into IGEL. Read-only, chain-of-trust boot. Managed centrally through IGEL UMS, ideal for shared endpoints and kiosk scenarios.
UniconOS (formerly eLux) · Citrix (Unicon GmbH)
A German thin client operating system — oneclick through the browser. It combines German thin client sovereignty with German cloud platform sovereignty. Ideal for BSI-compliant deployments in the public sector.
Windows Remote Desktop Connection · Microsoft (nativ)
Classic Windows RDP clients can also reach cloud resources through the oneclick™ gateway — for legacy scenarios, or where browser access is not wanted.
All sensible oneclick combinations compared
oneclick™ is usually deployed as a complete platform — the add-ons are functional extensions rather than structural changes. This matrix shows sensible DACH configurations depending on security and integration needs. Specific terms (platform licence, Microsoft RDS CAL/SAL, cloud compute) should be obtained directly from oneclick AG and the respective cloud providers.
| Setup | Modules native | Target group | What changes compared with “oneclick on its own” |
|---|---|---|---|
| oneclick™ purA browser-based platform with integrated cloud | 8 / 12 | Cloud-native mid-market companies, system houses, white-label managed service providers | Baseline reference. The platform delivers 8/12 modules natively — session monitoring, access protection, multi-cloud integration, orchestration and autoscaling all included. |
| oneclick™ + Hybrid DriveWith a data-exchange bridge | 9 / 12 | Organisations with DLP requirements and controlled data exchange | Policy-gesteuerter Datenaustausch between device and cloud — administrators can control downloads and uploads granularly. The application module becomes fully native. |
| oneclick™ + Managed ServicesA fully managed solution | 8 / 12 | Organisations without their own IT operations team, smaller mid-market companies | Managed Maintenance (updates, patches, hardening), Managed Security (Antivirus + SOC), Managed Backup (geo-redundant). No module upgrades — operational relief. |
| oneclick™ + On-Prem IntegrationHybrid-Setup Cloud + on-premises | 9 / 12 | Organisations with an existing RDS or Citrix environment migrating in stages | Bestehende On-prem RDS, Citrix or terminal servers are integrated — one portal across cloud and on-premises. The on-premises module becomes fully native. |
| oneclick™ + Hybrid Drive + On-PremEnterprise-Hybrid-Setup | 10 / 12 | DACH enterprises with an existing IT estate and data sovereignty requirements | Full application and on-premises integration. Nearly complete coverage — only Linux and the classic WEM module remain open. |
| oneclick™ + STACKIT CloudA sovereign German DaaS solution | 8 / 12 | German public bodies, critical infrastructure, regulated industry with data sovereignty requirements | Native STACKIT-Integration (Schwarz Digits, data centres in Heilbronn and Neckarsulm, BSI C5). A German provider with German data centre locations. |
oneclick’s strengths
- 100% browser-based — no client, no agent, no plugin. Genuine BYOD capability.
- Twelve integrated cloud providers, with STACKIT, Open Telekom Cloud and IONOS natively integrated
- German and Swiss data centre locations at European providers, certified to ISO 27001:2022
- Layered access protection — a cloud DMZ, with no direct contact between device and server
- Its own streaming protocol — optimised for low bandwidth, switching between TCP and UDP as needed, independent of the Microsoft connection service
- The longest documented peripheral list in this comparison: network printers, USB devices, common access cards, smartcards, proximity cards, point-of-sale systems, barcode scanners, 3D mice, signature pads and dictation devices — the list applies to access through the native RDP client at the oneclick gateway; in the browser, PDF printing, camera and microphone are documented. In a support case it is exactly this assurance that counts, not just “it works over USB redirection”
- Operating system and third-party patching through the platform’s process automation — no separate patching tool needed
- Automatic replacement of failed servers and reconnection to an alternative resource — self-healing is part of the platform, not an extra tool
- Session recording can be switched off per tenant — along with chat, the change log and profile editing. For works agreements and data protection discussions in the DACH region, a tangible difference
- Distribution based on real-time values (processor load, Arbeitsspeicher, Sitzungszahl) statt starrem Reihum-Verfahren
- Multi-tenancy plus white labelling — system houses can manage their own tenants
- Fast provisioning according to the vendor: a oneclick environment ready to use in under an hour
- Integrated session monitoring, single sign-on and MFA — no external tools needed
Gaps & what to add
- No dedicated WEM module at platform level — central profile management is documented via FS Logix
- No app layering product of its own like Citrix App Layering or Omnissa App Volumes — application layering runs through Microsoft FSLogix
- Platform licence plus cloud compute, plus Microsoft RDS CAL or SAL for multi-user environments — a more complex cost structure
- A smaller partner and consulting market than Citrix, Omnissa or Microsoft
- No Windows 365 management component; mobile device management only by connecting UEM tools to the platform API
- Fewer independent performance measurements are available than for HDX or Blast — protocol quality is harder to substantiate from third-party sources
The assessment in one sentence
oneclick™ is the sovereign DACH alternative for organisations that need German data sovereignty, browser-only access and genuine multi-cloud integration — without Microsoft lock-in or dependence on a US hyperscaler. For classic Windows enterprise scenarios with a demand for every conceivable feature, AVD, Citrix or Horizon is often the better fit.
Technical deep dive
Das aggregierte Plattform-Modell: oneclick™ differs structurally from classic DaaS platforms. Rather than being a vertical desktop virtualisation suite (like Citrix or Horizon), oneclick is a horizontale Aggregations-Plattform that orchestrates existing cloud infrastructure. You do not get desktop virtualisation in the classic sense but browser-based access to a self-orchestrated cloud desktop environment across twelve cloud providers.
STACKIT and OTC as the differentiator: Native STACKIT integration is rare in this market. STACKIT is the German cloud from Schwarz Digits (the parent of Lidl and Kaufland) with data centres in Heilbronn and Neckarsulm, certified to BSI C5. Combined with oneclick, organisations get German providers across the whole chain — platform, cloud infrastructure and contracting party all based in Germany. For critical infrastructure, public administration and regulated industries with strict sovereignty requirements, a strong argument. The same applies to the Open Telekom Cloud: full native integration.
When oneclick is the right choice: German or Swiss data sovereignty is mandatory (critical infrastructure, public administration, healthcare). BYOD or kiosk scenarios with widely varying endpoints. Hybrid scenarios with an existing on-premises RDS or Citrix estate plus cloud extension. System houses needing white labelling and multiple tenants. Organisations that treat multi-cloud as a strategic principle (not merely avoiding lock-in but actively using several providers). Where Microsoft 365 and AVD dominate the technical stack and there are no sovereignty requirements, AVD plus Nerdio is usually the more direct route.
Which oneclick configuration fits your organisation?
The feature set is one side of the coin — the fit with personas, compliance and the existing IT estate is the other. Compare directly in DaaS Maps, or discuss it on LinkedIn.
The terminology behind oneClick.
RDS, VDI, Desktop-as-a-Service — assessing the feature set means knowing the terms behind it. Each one is explained in a few sentences in the glossary.
Trademarks: oneclick™ · oneclick AG (DE/CH) · STACKIT® (Schwarz Digits) · Open Telekom Cloud® (T-Systems) · IONOS® · IGEL® · Unicon® — and all other product and company names mentioned are registered trademarks of their respective owners and are named here solely for factual comparison, as nominative use.