Building Identity for a Zero Trust Network

Explore Netflix's approach to building zero trust networks in this 19-minute conference talk from USENIX Enigma 2019. Discover how the streaming giant leverages identity as the new security perimeter in a cloud-first environment. Learn about core building blocks including single sign-on using SAML, OIDC, and OAuth standards, multi-factor and adaptive authentication, device health checks, and authorization strategies. Gain insights into key ingredients like Mega Proxy, Cell Service, and Apache integrations that contribute to Netflix's innovative security model. Understand how the company balances freedom and responsibility in its access control approach, and how these principles can be applied to create robust, identity-centric security solutions for cloud-based organizations.

Introduction
Zero Trust
Federation
Identity
Provisioning
Building Blocks
MultiFactor Authentication
Risk
Key Ingredients
Device Health
Mega Proxy
Cell Service
Freedom Responsibility
PayPrude
Apache
Integrations
Access Control
Wrap Up