Thread by @hhhypergrowth

Today’s new One feature is a bigger deal than I thought it’d be from yesterday’s teaser. Bold moves that are understated from the headline. Cloudflare just took a big step into ‘s lane. /1

https://twitter.com/Cloudflare/status/1316002006499241997

They are angling Access to be an SSO, not only accessing internal apps via Zero Trust (like ZPA), but also for all the other SaaS apps your enterprise uses. (Which up til now was solely the purview of the Gateway secure web gateway side.) /2

They are not eliminating . They will work with them and a wide variety of other identity providers, including multiple simultaneously. But after relying on Okta and others for establishing identity, they take over SSO to any enterprise apps from there. /3

They are also parnering with EPP providers like to rely on them for device posture (what and where is device), like is. Plus tying in other security auth rules like restricting country of origin (users can only log in from Canada). /4

making major moves to be and parts of . making moves into Zero Trust too so ... it is all getting interestin’! Frenemies are all circling around SASE Zero Trust features. I think is really well positioned as it is already an internet gateway for many.

Take this recent partnership earlier this year between Crowdstrike and Okta and Netskope SWG, ignoring Proofpoint (human side) for now. (Crowdstrike and Zscaler have a similar partnership too, so ZIA could be in place of Netskope.)

injected itself into the SaaS access flow like this. Gateway eliminates Netskope (a competitor to Gateway and Zscaler ZIA), and Access is now the SSO over all SaaS *and* internal access, with integrations for Identity/IDaaS and Device/EPP.

What Cloudflare One is trying to do is what Okta has been moving towards. SASE/Zero Trust backplane over all your SaaS & internal tooling access needs.