Continuous Access Evaluation through Security Signal Sharing
Introduction
Omnissa is collaborating with several leading security vendors on integrations using the Shared Signals Framework. This month at Oktane 2024, the flagship identity management conference, Omnissa showcased our integration with Okta. Our demonstration highlighted how to reduce risk and more continuously secure Okta user authentications and sessions by leveraging the deep device security context provided by the Omnissa Platform.
In this era marked by escalating cyberattacks and security threats, organizations increasingly depend on security tools and cloud solutions that deliver specific protections. Often these complex technology stacks result in silos of communication and information sharing. By adopting standardized communication between disparate systems, one can bolster response to security threats and strengthen defenses.
Omnissa Platform
The Omnissa Platform is designed to share security information across the platform itself and across the greater security ecosystem. Today, Omnissa continues to invest in security signaling by adopting the Shared Signals Framework (SSF), a standard designed to more efficiently enable the exchange of security and threat data between trusted vendors.
Shared Signals Framework from the OpenID Foundation is a major evolution in the security space Because it establishes standard protocols for sharing security events and risk intelligence between trusted parties. Built on protocols such as Continuous Access Evaluation Protocol (CAEP) and Risk Incident Sharing and Coordination (RISC), the framework allows organizations to leverage security insights from various sources, fostering a more comprehensive and unified security posture.
Omnissa and Okta Integration
With the Omnissa and Okta integration, Okta receives continuous, real-time events for UEM device compliance state changes as CAEP signals. Okta further takes authentication and session management decisions based on these compliance state changes. For instance, Okta triggers reauthentication or denied access for a user access to a sensitive application from a device that went out of compliance.
This demonstration underscores a powerful use case achieved through SSF and CAEP that helps our mutual customers get the most value out of Omnissa Workspace ONE UEM and Okta.
Summary
Omnissa is actively engaged in the OpenID Foundation Shared Signal Working Group. We will showcase SSF and CAEP interoperability at Gartner Identity and Access Management Summit in in Grapevine, TX, from Dec 9-11 2024. During this event, we will demonstrate our interoperability with various partners using CAEP within the SSF framework. If you are planning to attend the Summit and would like to connect, please register your interest here.
We support the rapid adoption of SSF as part of our commitment to bringing highly beneficial security innovations to our customers and the industry.