The Cloud Access Security Broker (CASB) Framework provides security between on-premise infrastructure and cloud applications by authenticating remote users through an IDM framework. The CASB has four architectures - API, Forward Proxy, Reverse Proxy, and ActiveSync Proxy - and can leverage tokenization, encryption, device profiling, credential mapping, access controls, auditing, discovery, and activity monitoring. Skyhigh is a well-known CASB framework that seamlessly imposes policies across cloud services consistently.