In the Zero Trust process, "Verifying Identity" is the crucial first step of authenticating a user. This is accomplished by integrating with an authoritative source of identity, known as an Identity Provider (IdP). Zscaler's platform integrates seamlessly with major IdPs like Okta, Azure AD, and PingFederate using standard protocols like SAML and SCIM. The IdP is responsible for authenticating the user (often via Single Sign-On and MFA) and asserting their identity to Zscaler, which then uses this verified identity to enforce access policies.

A. SIEM tools are used for logging and threat detection after the fact; they do not participate in the initial identity verification for an access request.

C. Web scalers (CSPs) host the applications (the destination) but are not the source of user identity verification in an enterprise Zero Trust model.

D. Data center providers offer physical infrastructure and are not involved in the logical process of user identity verification for network access.

1. Zscaler. (n.d.). About SAML. Zscaler Help Portal. Retrieved from help.zscaler.com. This document states, "Zscaler supports SAML for single sign-on (SSO), allowing you to integrate with your existing identity provider (IdP) to authenticate your users."

2. Zscaler. (n.d.). Choosing an Identity Provider. Zscaler Help Portal. Retrieved from help.zscaler.com. This page lists supported IdPs, including Okta, PingFederate, and Azure AD, as partners for authentication.

3. Zscaler. (2023). ZTCA - Zscaler Zero Trust Certified Architect: Study Guide. Section: "The Zscaler Zero Trust Exchange," Subsection: "Verify Identity & Context." This section explicitly identifies IdP integration as the mechanism for verifying identity.