Zero Trust Versus Identity Providers
Broadcom, Thursday, October 22nd, 2026
Broadcom examines how identity providers fit into zero trust and why an IdP plus MFA is not the same as zero trust in VCF.
Broadcom says zero trust may be the most overused phrase in security marketing, and that many people wrongly equate putting an identity provider in front of everything and enabling MFA with zero trust.
The post explains that an identity provider is an important part of zero trust but is also a single system everything depends on and every attacker wants to control.
Using NIST's definition of zero trust as a set of guiding principles, it looks at identity providers through a zero trust lens in the context of VMware Cloud Foundation.