This topic details IdP Routed authentication to secure your SaaS apps; in this technique, the SaaS Application is configured for SAML/OIDC authentication using your Identity Provider and your Identity Provider is configured to federate to CSE's TrustProvider component. Zero Trust policies are defined for groups of SaaS applications you route via IdP Federation logic. You can also configure CSE-federated authentication to secure your SaaS apps.

Doc status: CSE-side steps were re-verified against the CSE console on 2026-07-14, and third-party console steps were updated against vendor documentation on the same date. The third-party IdP console steps follow the vendor's own documentation and should be confirmed against the live admin console, which can change without notice.