1.3 How CloudAccess Works

CloudAccess is a virtual appliance that provides a web service for users to securely access SaaS applications and other web applications. The appliance performs the following functions:

  • Provisioning: CloudAccess allows you to map roles (groups) in an identity source, such as Active Directory or eDirectory, to account authorizations in the SaaS applications. CloudAccess leverages group management in the identity source to automatically create and manage the associated user accounts in the SaaS application.

  • Secure Single Sign-on: CloudAccess authenticates users against identity sources and provides single sign-on to the SaaS applications and other web applications based on the users’ entitlements. It also supports Integrated Windows Authentication (Kerberos) for background authentication to CloudAccess. The corporate credentials never leave the firewall. Provisioned users automatically have access to the SaaS applications, if they are logged in to the identity source.

  • Reporting: CloudAccess provides reports on the usage of the SaaS applications to help enforce corporate policies and prove compliance.

  • Enabling Mobile Devices: CloudAccess enables mobile devices to securely access the SaaS applications.

    NOTE:Whether you have a CloudAccess license or a MobileAccess-only license determines the application connectors you are entitled to use. For more information, see Section 1.5, Understanding Product Licensing.