For AI agents: visit https://techdocs.akamai.com/eaa/llms.txt for an index of all pages formatted in Markdown and endpoints in OpenAPI. Append .md to any documentation page URL to get its markdown version.
Jump to Content
Guide
Release notes
API
CLI
Control Center
Guide
Guide
Release notes
API
CLI
Control Center
Hybrid Tunnel Applications
Welcome
Welcome to Enterprise Application Access
Features in technical preview, beta, or limited availability
EAA architecture
Allowlist for accessing EAA service
Get started
Introduction
Get started with a Bookmark App
Get started with a web application
Get started with a TCP-type client-access application
Secure access to HTTP apps with Akamai Workforce Protector DLP (Limited availability)
Access and manage EAA from Control Center
Secure your network
Connectors
Install connector in VMware
Configure network with connector VM console menu
Packet Trace Utility
Install connector in OpenStack/KVM
Install connector in Microsoft Hyper-V
Install connector in Amazon Web Services
Install connector in Google Cloud Platform (GCP)
Install connector in Microsoft Azure
Install a Docker-based connector
Containerized EAA connector
Install connector for Podman
Security update for connectors
Configure connectors for high availability
Connector upgrade to Ubuntu 22.04 LTS
Directories
Cloud Directory
AD, LDAP, or AD-LDS Directory
Manage user attributes
Advanced Settings for AD, LDAP, AD-LDS directories
Configure Group DN and Base DN
Directory Versioning
Provision users with SCIM
SCIM provisioning with Azure
SCIM provisioning with Okta
Generic SCIM provisioning
Identity and identity providers (IdPs)
Basic configuration of an IdP
Advanced settings of an IdP
Embed login portal in IFRAMEs
Temporary lockout on IdP and unlock on Cloud Directory
Identity provider Session settings
Identity Provider Versioning
Identity Provider Geofencing
SAML
SAML flows
Use EAA as a SAML IdP
Configure SAML for an access application
Configure EAA as an IdP for a custom SaaS application
Use Microsoft enhanced client or proxy (ECP) with EAA
SAML Logout for third-party SAML IdP
OpenID Connect
OpenID Connect concepts and terminology
Configure OpenID Connect for applications
Web Services Federation
Authenticate users
Manage user access to applications
Use EAA as service provider (SP)
Integrate Azure Active Directory
Integrate Active Directory Federation Service (AD FS)
Integrate Okta
Authenticate access to applications with OneLogin
SSO with other applications
SSO for Jenkins using HTTP headers
Desktop single sign-on authentication
Multifactor authentication
PCI DSS compliant MFA
Use Google Authenticator for TOTP on end-user's device
Use Akamai MFA
Use DUO MFA
DUO Universal Prompt Support
Use recovery code instead of MFA
Add organization name for SMS and email MFA notifications
Configure end-user's device to receive MFA tokens
Bypass MFA
MFA for third-party Identity provider
Use certificates for authentication
Certificate-based authentication in the IdP
Online certificate status protocol (OCSP)
Remove a self-signed certificate
Certificate rotation of expired certificates
Certificate-based device authentication or user validation in an application
Certificate-based validation of origin servers
Network Zones
Create applications
Applications
Configure and deploy an access application
Set up CNAME redirect for an application
Authorize access to applications
Access applications from EAA Login Portal
Application config versioning and rollback
Single Host Access for access applications
Application groups for rewrite rules
Offload web application traffic from EAA Cloud
Migrate Applications to new Cloud Zone
Configure application category
Remote desktop protocol (RDP) applications
Create an RDP application
Use microphone with RDP applications
Configure RDP client display settings
Enable SSO login for RDP applications
Store files in RDP portal
Modern RDP end-user experience
Remote Desktop User Preferences
SSH applications
Edge Transport based Tunnel Applications
Using Direct Connect with Edge Transport-based Tunnel Applications (Beta)
Hybrid Tunnel Applications
Add access control rules
Set up services for an application
Set up advanced settings for an application
User-facing authentication mechanism for applications
Configure TLS Cipher Suite for applications
Server load balancing for applications
Kerberos-constrained delegation
Configure custom HTTP headers
EAA Bridging capability
SAML to SAML Bridging
Clone Applications
CONNECTOR AND APPLICATIONS MANAGEMENT
Connector Pools
Unified Connectors
Unified Connector Migration
Application Access Groups (AAG)
Login Portal Customization
Customize your organization's Login Portal
Set logos, images and themes
Login Portal languages
Login Portal Client Download options
Login portal tab name
Customize URLs, labels, and recovery code message
Customize EAA Access Denied Page
Customize EAA Logout Page
Customize Footers for Login Portal page
Custom Error page
Create favorite applications
Set up MFA to receive tokens on the end-users device
Monitor
View EAA dashboard
Reports
Create a report
Download saved report
Logs, Metrics, and SIEM integration
Real-time Connector Metrics using Datadog, TrafficPeak, and Amazon CloudWatch SIEM providers
Real-time Connector Metrics using Splunk SIEM provider
Real-time Connector Metrics using Dynatrace SIEM provider
Send Access Logs to Datadog, TrafficPeak, Splunk, and CloudWatch SIEM
Send Access logs to Elasticsearch SIEM
Use EAA logs with SIEM, API, or Unified Log Streamer (ULS)
Create client-based applications
About EAA Client
Use EAA client with TCP and UDP applications
Client-access applications
Tunnel-type 2.0 client-access application
EAA Client requirements
Set up and use EAA Client
Configure EAA Client
Silent install of EAA Client
Uninstall EAA Client
Customize the download URL for EAA Client
Create UDP and TCP applications
View EAA Client reports, user, and application statistics
Use EAA Client
EAA Client contextual menu, icons and network states
EAA Client basic operations
EAA Client run and installation logs
EAA Client for Ubuntu desktop
Introduction
Set up and use EAA Client for Ubuntu desktop
Configure EAA Client (Ubuntu)
Configure EAA Client with a forward proxy (Ubuntu)
Silent install of EAA Client (Ubuntu)
Uninstall EAA Client (Ubuntu)
EAA Client run logs (Ubuntu)
Limitations for Device Posture support
EAA Client advanced features
Enable captive portal support
Enable on-premises detection
Access DNS applications with Service Discovery
Switch EAA Client to a different IdP
Set up services for applications
Set up DNS exceptions
Support for third-party IdPs
Forward proxy support
Device Posture
About Device Posture
Set up Device Posture
Define risk assessment criteria
Configure tiers and tags
Define device risk tiers
Define device risk tags
Define versions
Configure Device Posture profiles
Configure Device Posture integrations
Collect signals from SIA integration
Device Posture ACL Rules
Device Posture Remediation Page
Review Device Posture dashboard
Monitor Device Posture reports
Create Device Posture report
Download saved report
Monitor Device Posture information on desktop devices
Device Posture for mobile devices
Performance optimizations
Tips for improving performance with EAA
Troubleshoot
EAA Status Page
User Diagnostics portal
Troubleshoot EAA
Application response codes, login events, and errors
Set up help desk email
Enable service/debug mode
Get Tenant Email Notifications
Troubleshoot connectors
Troubleshoot directories
Troubleshoot IdPs
Troubleshoot applications
Troubleshoot certificates
Troubleshoot reports
Troubleshoot IWA
Troubleshoot EAA Client
Troubleshoot Device Posture
Contact support
Developer tools
Enterprise Application Access API v1
EAA Postman collection
NON GA FEATURES
Edge Transport based Web (HTTPs) Application (Beta)
Create applications
Hybrid Tunnel Applications
Copy Page
Akamai.com
Contact us
Akamai support
Compute support
Share feedback
Try Akamai
Log in
Log out
Try Akamai
Akamai.com
Contact us
Akamai support
Compute support
Share feedback
Log in
Log out
