It has for years been the conventional wisdom that enterprises wishing to push applications from the data center to the Cloud must use federation-based solutions for Single Sign-On and forego the notion of access controls at the “perimeter”. And while federation protocols like SAML, WSFED and OIDC all provide SSO, they do not allow for strict perimeter enforcement, fine-grained access control, or practical centralized log and session management. In this talk Mr. Sand will explain how an innovative new approach – providing Web Access Management (WAM) as a set of REST-based Web services mediated by a dedicated Access API gateway – allows you to keep these and other crucial access management controls while enabling you to move to a hybrid cloud architecture, sever ties with legacy WAM systems in a controlled, stepwise manner, and radically increase the architectural flexibility of your access management environment. Mr. Sand will highlight how this method – in which every access request is vetted before ever reaching an application – allows organizations to both achieve Zero Trust Access Control and take full advantage of the opportunities and efficiencies of modern computing architectures and technologies such as Cloud, containerization, and microservices. Key takeaways: |
The audience will learn how to achieve zero trust access management in the Cloud, which has been unattainable until now. Federation comes close, but does not provide the fine grained access control in the cloud that was once only available on premises through enterprise access management solutions. |