Bitglass, the total cloud security company, has been awarded U.S. Patent No. 10,757,090 for its fundamental invention of the SAML relay, for transparent, real-time access control of cloud services. Since the time the patent was filed in 2015, the technology has become widely adopted by leading cloud security vendors. The SAML relay allows for a security broker or proxy (aka CASB) to be transparently inserted into the traffic flow between users and cloud services, during the login process.
Once the user logs in, the CASB considers the risk profile of the user, and determines the level of access to permit the user. The CASB may permit direct access to the application, proxied and controlled access to the application with data and threat protection enforced, or deny access altogether.