Integrating with cloud access security brokers (CASBs)

Centrify partners with CASBs to provide the first critical steps in enabling secure SaaS applications. By driving the authentication process through Centrify, CASBs utilize the necessary information about users, their devices, and their location to manage access to and monitor user activity within apps.

Centrify Admin Portal integrates with CASBs by passing the SAML assertion for a supported application to a CASB proxy, instead of directly to the service provider. The CASB then passes the SAML assertion on to the service provider.

Application support for CASB integration depends on your CASB provider. Contact your CASB provider for more information.

To direct a SAML assertion to a proxy

  1. Open the Advanced page for the application that you want the SAML assertion to point to a CASB proxy.

    For more information, refer to the application configuration help specific to the that application.

  2. Add the following line to the end of the advanced script. Refer to Writing a custom SAML script for more information about writing advanced scripts.

    setHttpDestination(‘CASBProxyURI’);

    CASBProxyURI is the proxy URI provided by the CASB. It must be an absolute URI.

    Note:   This line must be at the end of the script to prevent conflicts with other elements of the script.

  3. Click Save.