Cyber stack for Contractors

I'm trying to figure out the best way to give the third-party contractors my company works with access to our SaaS apps (mainly zendesk and salesforce) and some internal applications we've built. There's a lot of noise out there - VDI from citrix, remote browser isolation, secure enterprise browsers, etc. Any suggestions?

access applications apps browser browser isolation browsers citrix contractors cyber cybersecurity enterprise etc internal isolation noise party remote browser isolation saas saas apps salesforce stack third third-party vdi zendesk