Enterprise Application Access (EAA) Connector updates.

​Akamai​ EAA new features

Akamai will upgrade Cloud Zones in phases, starting in October and will finish over the next few months. This phased rollout ensures the safe and controlled deployment of new features across the platform. Once your Cloud Zone upgrade is complete, these features will be available. Please visit and subscribe to the EAA Status Page to receive updates on the upgrade schedule and know when your Cloud Zone is scheduled to be upgraded.

Local POP and Trusted Network. EAA Connectors can now be configured to function as Local POPs. When a user's device is connected to an in-office trusted network, traffic from the GPA Client is routed directly through the Local POP for Zero Trust (ZT) policy enforcement, bypassing the Akamai Edge or Cloud. This eliminates unnecessary traffic hair-pinning, reduces latency, and improves application performance. This feature is in Beta and can be enabled in your contract by contacting Akamai support.

Decoupling Certificate Deployment from Application or IdP Deployment. You can rotate your expired certificates, update existing certificates or renew custom certificates without the need to redeploy your applications or identity providers that use these certificates.

Custom Error Page for Login Portal. Create a custom error page that is styled and branded for your organization with configurable logos and background images. This page is displayed for any authentication failures like access denied or session expired issues. Any error code and error message, including trace ID is displayed to the end user if there are any login issues. This can be shared with your organization’s IT department to troubleshoot any issues.

Geofencing for Identity Provider. Geofencing allows you to control access to the IDP by either blocking specific CIDRs or locations of the GPA Client or only allowing specific ones, with the option to add exceptions. This provides enhanced security control for the IdP by preventing access to the Login Portal from unwanted geolocations.

IdP Router . The IdP Router allows a diverse user base, such as employees, contractors, and partners, to select from multiple Identity Providers to authenticate to EAA Clientless Applications. When an end user signs in, the router dynamically inspects their email domain against configured routing rules to display and direct them to their matching identity provider portal, for authentication. This feature is in limited availability and can be enabled in your contract by contacting Akamai support.
.