The document discusses the critical role of identity within a zero trust security strategy, emphasizing that traditional network perimeters are no longer reliable due to the dissolution of boundaries in modern infrastructure. It outlines the need for contextual access management, where identity becomes essential in managing the right access to resources for users based on their context. The zero trust journey begins with identity and involves adopting modern access management practices to advance maturity in security posture.

1. Identity’s Role in your
Zero Trust strategy

2. © Okta and/or its affiliates. All rights reserved. Okta Confidential 2
Network Perimeter
TRUSTED UNTRUSTED
The Old Approach to Security Relies on the Network Perimeter

3. © Okta and/or its affiliates. All rights reserved. Okta Confidential 3
RESOURCES
Infrastructure
IaaS On Prem Servers
Applications
Cloud apps On Prem Apps
APIs
Public Private
Mobile and Cloud Have Dissolved the
Traditional Perimeter
Result: We can no longer assume trust
PEOPLE
Employees Privileged Users Contractors Partners Customers

4. © Okta and/or its affiliates. All rights reserved. Okta Confidential 4
RESOURCES
Infrastructure
IaaS On Prem Servers
Applications
Cloud apps On Prem Apps
APIs
Public Private
PEOPLE
Employees Privileged Users Contractors Partners Customers
People Are the New Perimeter
Contextual Access

5. © Okta and/or its affiliates. All rights reserved. Okta Confidential 5
When People are the Perimeter,
Identity Becomes the Foundation
of a Zero Trust Strategy

6. © Okta and/or its affiliates. All rights reserved. Okta Confidential 6
Contextual Access Management
Network Context
New IP
Specified IP Zones
Network anonymizers
Device Context
New device
Managed device
Location Context
New city/state/country
New geo-location
Impossible travel
App Context
User Context
Contextual Response
Prompt for 2nd factor
Allow/deny access

7. The
right
people
that is
assessed
continuousl
y
have the
right level of
access
to the
right
resources
in the
right
context
Modern Access Management
Least Friction Possible

8. PROTECTION
A D O P T I O N
• Active Directory on-
premises
• No cloud integration
• Passwords everywhere
• Single sign-on across
employees,
contractors, partners
• Modern multi-factor
authentication
• Unified policies across
apps and servers
• Context-based access
policies
• Multiple factors deployed
across user groups
• Automated
deprovisioning for
leavers
• Secure access to APIs
• Risk-based access
policies
• Continuous and
adaptive
authentication and
authorization
• Frictionless access
Stage 1:
Fragmented
identity
Zero Trust Maturity Curve
Stage 2:
Unified IAM
Stage 3:
Contextual
Access
Stage 4:
Adaptive
Workforce

9. © Okta and/or its affiliates. All rights reserved. Okta Confidential 9
The Zero Trust
journey starts
with Identity
There’s no silver
bullet for Zero
Trust
Okta is the
modern Zero
Trust Platform

10. © Okta and/or its affiliates. All rights reserved. Okta Confidential 10
The Zero Trust
journey starts
with Identity
There’s no silver
bullet for Zero
Trust
Okta is the
modern Zero
Trust Platform
“Okta was the foundation that could help us
mature to a zero trust model.”
-Melody Hildebrandt, Global CISO, 21st Century Fox