1. A method comprising: establishing, between a cloud computing system and a client device, an authenticated communication session via a first network interface of the client device, wherein the first network interface has associated therewith first network-layer interface information including a first Internet Protocol (IP) address; providing from the cloud computing system to the client device via the first network interface an interface-independent identifier associated with the authenticated communication session, wherein the interface-independent identifier is independent of the first network-layer interface information associated with the first network interface; determining to switch the authenticated communication session from the first network interface to a second network interface of the client device based on detecting a loss of connectivity or a data rate falling below a threshold at the first network interface, a communication session having been initiated with the client device over the second network interface, and the second network interface having associated therewith second network-layer interface information including a second IP address that is different from the first network-layer interface information; following determination to switch the authenticated communication session to the second network interface, maintaining, at the cloud computing system, a virtual environment associated with the authenticated communication session; receiving a message that includes the interface-independent identifier from the client device via the second network interface of the client device; validating, in response to receiving the interface-independent identifier in the message, the interface-independent identifier with the stored interface-independent identifier that was provided to the client device; and changing, in response to a successful validation of the interface-independent identifier, establishment of the authenticated communication session with the client device to be via the second network interface without additional user input, so that the same virtual environment, maintained by the cloud computing system, is accessed by the second network interface and the authenticated communication session continues via the second network interface after the changing.