The current mechanism for accessing the applications is through a domain.  However, visually we want to display a dashboard with all apps the user is entitled to.  So we'd probably want to start using a REST API endpoint that points directly to the list of applications belonging to a user - perhaps /user/applications.

Right now we have only a single domain per user - which makes the /user/applications alias appropriate.  In the future if we have multiple domains, and the domains are sharded, a /user/applications call could be difficult.  However, it's still the simplest way of accessing content and would allow us not to have to denormalize the domain on every site call (which is going to be a perf/chattiness problem with the REST API)

/user/applications for now could do user => primary domain => list of applications denorm for us.