Partner Brief

Zscaler and ForgeRock
Deliver seamless authentication and security toapplications – anywhere, anytime, on any device© 2024 Zscaler, Inc. All rights reserved.

Challenges
Today’s diverse and distributed workforce must

Zscaler is a pioneer in zero trust, enabling

connect to more business resources and devices,

customers to accelerate their secure digitalposing significant challenges to enterprises.

transformation journey. The cloud-delivered Zero

Massive volumes of new identities, roles,

Trust Exchange platform acts like an intelligent

entitlements, and applications need to be securelyswitchboard that securely connects users andmanaged, often remotely. This situation can beapplications. All communication goes throughoverwhelming for risk professionals and requires athe Zero Trust Exchange, and nothing reaches

new security approach based on zero trust.

applications without the platform allowing it.

Zero trust is a framework to secure modernorganizations based on least-privileged accessand the principle that no user or application
should be inherently trusted. Connections areauthorized based on validation of the user’sidentity, risk-based context, and business policy.
ForgeRock Workforce IAM helps address thesechallenges by converging identity management,access management, and identity governance. It
provides greater efficiencies, security, and costsavings with the ability to manage, secure, andgovern identities throughout their entire lifecycle— all within a single platform.

Applications become invisible to unauthorizedusers, so your resources can’t be discovered andexploited on the internet

Solution
ForgeRock and Zscaler deliver an integrated
zero trust solution that simplifies deployment,
improves the user experience, and enables fast,direct, and secure access to applications anytime,anywhere, and on any device. The integration isdelivered via Security Assertion Markup Language(SAML) v2.0, an open standard authentication
protocol that enables federation, identity
management, and SSO.

ForgeRock Access Management determines
which applications (modern and legacy) users
are authenticated for and authorized to accesswhile delivering a seamless user experience. With
self-service registration, single sign-on (SSO),
federation, and multifactor authentication (MFA)
capabilities, the platform provides both securityand convenience.
SSO makes it easy for users to login into multiple
resources (applications, services, and systems)with one set of credentials. It also allows users
to securely federate one authentication session
across multiple applications. In sum, SSO
improves the user experience, enhances security,

ForgeRock andZscaler simplify
deployment,
improve the user
experience, andenable fast, direct,
and secure accessto applications.

and boosts productivity by eliminating thefrustration with password management.

© 2024 Zscaler, Inc. All rights reserved.

Partner Brief2

How it works
ForgeRock’s AM utilizes the concept of theForgeRock integrates with Zscaler Internet“Circle of Trust” to manage the relationship

Access (ZIA) and Zscaler Private Access (ZPA)

between Identity Providers (IDPs) and Service

to enable secure access to SaaS, internet, andProviders (SPs).

private applications.

When configuring AM to provide SSO using

ZIA includes a comprehensive suite of AI-SAML v2.0, organizations can map user

powered security and data protection services toand group accounts at the identity provider

help stop cyberattacks and prevent data loss with(i.e., ForgeRock) to accounts at the servicea comprehensive zero trust approach. As a fully

provider (i.e., Zscaler), including mapping tocloud-delivered SaaS solution, new capabilities

an anonymous user and/or an OT/IoT device.

can be added without any additional hardware or

ForgeRock communicates with Zscaler using

lengthy deployment cycles.

SAML assertions, which Zscaler uses to makeauthorization decisions for access to applications.

ZPA applies the principles of least privilege accessto give users secure, direct connectivity to private

ForgeRock AM allows administrators to tailor

applications running on-prem or in the publicaccess for the unique needs of users, design user

cloud while eliminating unauthorized access andaccess journeys with a drag-and-drop interface,lateral movement. Authorized users can only

add new capabilities (on a moment’s notice), andconnect to approved resources, not the network,

integrate pre-tested and pre-coded technology.

which is impossible with legacy VPNs.

SAML v2.0
Service Provider(SP)

SAML v2.0
Identity Provider(IdP)

Circle of TrustAutsheesccAnt
icate

Authentication
RequestEnd User (Subject)
Figure 1. ForgeRock Access Management© 2024 Zscaler, Inc. All rights reserved.

Partner Brief3

Key Benefits
The ForgeRock and Zscaler integration provides the following key benefits:• Frictionless user experience via Single Sign-on (SSO), delivering a ‘log in once, accesseverything’ environment for all users to gain access to all their applications.
• Intelligence-based login decisions, turning user devices and locations into analytics tomake real-time, policy-based decisions on user access.
• Reduced attack surface with risk-based authentication that securely connects users
directly to authorized apps without accessing the network to prevent lateral movement.
• Secure remote access to internal, SaaS, and internet applications running in the cloud orin data centers using a zero trust framework.

About ForgeRockForgeRock® (NYSE: FORG) is a global digital identity leader helping people simply and safely access theconnected world. The ForgeRock Identity Platform delivers enterprise-grade identity solutions at scale forcustomers, employees, and connected devices. More than 1,300 organizations depend on ForgeRock’s
comprehensive platform to manage and secure identities with identity orchestration, dynamic access controls,governance, and APIs in any cloud or hybrid environment. For more information, visit www.forgerock.com orfollow ForgeRock on social media: Facebook ForgeRock | Twitter @ForgeRock | LinkedIn ForgeRock.

About Zscaler
Zscaler (NASDAQ: ZS) accelerates digital transformation so that customers can be more agile, efficient, resilient,and secure. The Zscaler Zero Trust Exchange protects thousands of customers from cyberattacks and data loss
by securely connecting users, devices, and applications in any location. Distributed across more than 150 data
centers globally, the SASE-based Zero Trust Exchange is the world’s largest inline cloud security platform. Learn
more at zscaler.com or follow us on Twitter @zscaler.
+1 408.533.0288

Zscaler, Inc. (HQ) • 120 Holger Way • San Jose, CA 95134© 2024 Zscaler, Inc. All rights reserved.
Zscaler™, Zero Trust Exchange™, Zscaler InternetAccess™, ZIA™, Zscaler Private Access™,and ZPA™ are either (i) registered trademarks
or service marks or (ii) trademarks or service
marks of Zscaler, Inc. in the United States and/or other countries. Any other trademarks are theproperties of their respective owners.

zscaler.com