SaaS Authorization Management

SaaS Authorization Management Overview

SaaS Authorization Management provides out-of-the-box support to leading SaaS vendors. It enables the Platform to integrate with SaaS vendors to provide standardization and centralized authorization management while supporting distributed deployment across the organization’s technology stack.

Integration with the vendors is accomplished through Policy Orchestration. This service is designed to discover, map, and manage authorization policies of SaaS vendors by utilizing their native capabilities using available APIs.

1. PlainID’s Policy Administration Point connects to the SaaS Application and discovers existing policies.
2. Administrators manage and create access control Policies within PlainID’s dashboard.
3. New and updated Policies are then pushed back to the SaaS application.

Policy Orchestration ensures that different authorization and access policies are implemented, enforced, and coordinated effectively to achieve the desired security controls while maintaining consistency and avoiding conflicts.

Once vendor objects and policies are discovered and represented in the Platform, like all policies available within the Platform, they can be viewed as code in structured Rego or visually represented in the Policy Map.

SaaS Authorization Management Process

A high-level overview of the SaaS Authorization Management process includes:

• Discovery of Policies from the target platform
• Display of Policies in a unified language
• Management of Policies from the platform
• Monitoring of changes in Policies
  

The solution helps streamline the process of policy creation, enforcement, and updates, making it easier to maintain a secure and compliant environment:

• Automate and Streamline: By centralizing policy management and automation, organizations can reduce manual efforts required to enforce policies across various systems.
• Ensure Consistency: Policy orchestration ensures that policies are consistently applied across different parts of the organization, preventing discrepancies and security gaps.
• Compliance and Governance: Helps organizations adhere to regulatory requirements and internal governance standards by automating the enforcement of relevant policies.
• Visibility and Monitoring: Provides monitoring and reporting, allowing organizations to track policy enforcement and identify potential issues or violations.
• Adaptability: Facilitates quick updates and adjustments to policies in response to changing business needs, security threats, or regulatory changes.
• Risk Management: By consistently enforcing security and compliance policies, organizations can better manage and mitigate risks related to data breaches, unauthorized access, and other threats.

Current Authorizers that support SaaS Authorization Management include:

• Microsoft Power BI
• Zscaler ZPA
• Snowflake

Refer to the relevant documentation or contact PlainID for information on these Authorizers.