On cloud, traditional policy agent based provisioning of SSO becomes a huge bottleneck for scaling at will and diversity on demand. By centralizing the policy enforcement into a centralized pass through layer we de-coupled app teams to realize maximum benefits offered by cloud. Here is a set of our accomplishments at a very high level, that I would like to share as part of the talk: Seamless/ transparent scaling, updating of authentication/ security layer, with zero touchpoint to application infrastructure. Flexible policy enforcement point to support current platform, while migrating towards standards-based system. Continuous Authentication by policy enforcement in various categories like IP monitoring, Device fingerprinting, session hijacking, real time URL blocking. Continuous Enforcement and real time configuration of levels of assurance to online assets/ endpoints. Uniform protection across the organization, with self service capabilities. Preventing fraud, by intercepting and evaluating traffic towards backend systems/ app to app communication.

1. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited.
SSO On Cloud
A Gateway Approach
Vijay Challa, Identity and Access Management
08/20/2019
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

2. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited.
Agenda
1. Decouple, Diversify and Deliver.
2. Push and Pull.
3. Past.
4. Present and Future.
5. Gateway effects.
6. Q&A.
7. Thank You.
2
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

3. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited.
De-couple, Diversify and
Deliver.
3
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

4. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited. 4
Cloud is the future of our infrastructure.
As we push our applications into the cloud, we felt the
pull backs from the existing architectures in place.
• Push
• Agility
• Elasticity
• Scalability
• Pull
• Tight Coupling
• Security
• Diversity and Co-existence
Push and Pull.
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

5. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited. 5
Single Sign On facilitation with policy agents.
Traditionally and historically, the facilitation of SSO
authentication has been using policy agents deployed
on application servers or by implementing federation
among them.
• One agent per server, per platform, per version etc.
• Butterfly effect.
• Custom solutions.
• Spill over responsibilities.
• Always trailing on security patching.
Past.
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

6. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited. 6
Single Sign On facilitation with Gateway approach.
Centralized policy enforcement into a pass-through
Gateway layer, thus de-coupling application
infrastructure and implementation from authentication
and policy enforcement.
• Any server, any platform, any version etc.
• On-demand seamless and transparent scalability.
• Quick turn around solutions.
• Single layer enforcement.
• Zero touch security patching.
• Uniformity across standards.
Present and Future.
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

7. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited. 7
Gateway approach once in place, apart from serving
the designated purpose offers a range of other
positive opportunities that can be converted to
effects.
• Continuous and MFA with zero touch to apps.
• Continuous and real time configuration of IALs.
• Uniform protection across channels.
• Fraud prevention with cross channel insights.
Gateway effects.
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

8. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited.Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited.
Q&A
8
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

9. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited.