The document outlines Verizon's approach to identity and access management, focusing on the implementation of a centralized gateway for single sign-on (SSO) that decouples application infrastructure from authentication protocols. It emphasizes the advantages of this gateway approach, such as enhanced scalability, security, and uniformity across multiple platforms and applications. Additionally, it discusses the transition from traditional policy agents to a more streamlined method of access management to improve agility and reduce security risks.

1. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited.
SSO On Cloud
A Gateway Approach
Vijay Challa, Identity and Access Management
08/20/2019
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

2. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited.
Agenda
1. Decouple, Diversify and Deliver.
2. Push and Pull.
3. Past.
4. Present and Future.
5. Gateway effects.
6. Q&A.
7. Thank You.
2
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

3. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited.
De-couple, Diversify and
Deliver.
3
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

4. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited. 4
Cloud is the future of our infrastructure.
As we push our applications into the cloud, we felt the
pull backs from the existing architectures in place.
• Push
• Agility
• Elasticity
• Scalability
• Pull
• Tight Coupling
• Security
• Diversity and Co-existence
Push and Pull.
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

5. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited. 5
Single Sign On facilitation with policy agents.
Traditionally and historically, the facilitation of SSO
authentication has been using policy agents deployed
on application servers or by implementing federation
among them.
• One agent per server, per platform, per version etc.
• Butterfly effect.
• Custom solutions.
• Spill over responsibilities.
• Always trailing on security patching.
Past.
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

6. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited. 6
Single Sign On facilitation with Gateway approach.
Centralized policy enforcement into a pass-through
Gateway layer, thus de-coupling application
infrastructure and implementation from authentication
and policy enforcement.
• Any server, any platform, any version etc.
• On-demand seamless and transparent scalability.
• Quick turn around solutions.
• Single layer enforcement.
• Zero touch security patching.
• Uniformity across standards.
Present and Future.
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

7. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited. 7
Gateway approach once in place, apart from serving
the designated purpose offers a range of other
positive opportunities that can be converted to
effects.
• Continuous and MFA with zero touch to apps.
• Continuous and real time configuration of IALs.
• Uniform protection across channels.
• Fraud prevention with cross channel insights.
Gateway effects.
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

8. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited.Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited.
Q&A
8
© Verizon 2019, All Rights Reserved. Information contained herein is provided AS IS and subject to change without
notice. All trademarks used herein are property of their respective owners.

9. Verizonconfidentialandproprietary. Unauthorizeddisclosure, reproductionorotheruseprohibited.