Getting Started

Your designated SPOC and users with an Administrator role in the Verizon My Business portal will receive an email with instructions on how to set up Trusted Connection and deploy the Trusted Connection agent to your end users’ devices.

Trusted Connection Setup

As the Trusted Connection Administrator, you are responsible for the initial setup. Simply click on the Trusted Connection link either in My Business portal or access the Trusted Connection portal directly and click “Get started”.

Setting up the service takes three simple steps:

A. Set up user identities

Trusted Connection currently supports many Identity Management (IDP) systems as part of the Bring Your Own Identity Access Provider (BYOID) feature. As long as the system is based on LDAP/SAML, it can be synched to Trusted Connection. Okta Identity Access Management is being used here as an example of how to connect to your system.

When selecting LDAP with Active Directory, you will need to have the following information:

See OpenLDAP for more details about LDAP requirements.

1. FQDN or IP Address
2. VPN name
3. Port number
4. Bind DN
5. Bind password
6. Domain name Base DN
7. SSL mode (optional)
8. CA certificate (optional)

If you select SAML, you will need the following information:

1. ACS URLs
2. Selected ACS Url
3. Service provider entity ID
4. Single Sign-on URL * mandatory information
5. Identity provider entity ID *information
6. Identity provider certificate (add if certificate is not available or choose from drop down)
7. Group attribute information

Trusted Connection supports (SAML) Security Assertion Mark-up Language integration is an authentication standard that allows for federated identity management and can support single sign-on (SSO), allowing users to authenticate via a SSO to their applications.

Trusted Connection supports Okta Identity Access Management as well as other Identity management programs (IDP),as part of the BYOID feature.

SAML without Active Directory configuration: if you are not using Active Directory, the specific steps and requirements will vary depending on the IDP you use. Refer to the documentation of the application for details and more information of how to find the information needed. However, the general process involved setting up SAML assertions and configuring the necessary metadata.

SAML with Active Directory configuration: When using Active Directory, you need to configure your Active Directory environment related fields and Trusted Connection to establish a connection between the two systems to configure appropriate settings for user attributes.

If you opt to choose SAML with Active directory, you will need the following additional information. * are mandatory fields to make successful connections.

1. Server Address Type*
2. Server Address*
3. VPN name*
4. Port*
5. Bind DN*
6. Bind password *
7. Domain name *
8. Base DN *
9. Group Object Class *
10. Group Name *
11. Group Member *
12. User Object Class *
13. Username *
14. Enable SSL
15. SSL mode *
16. CA certificate *

B. Then select “Test Connection”

After you receive “Successful connection” notification, click on save.

C. Select network security settings

Click “Proceed” under Network securing settings.

By default, Trusted Connection provides a set of predefined security rules to help protect your network against threats. These rules can be customized to your requirements from the Trusted Connection dashboard after initial setup is completed.

URL Filtering – Restricts access to specific websites promoting security and compliance

DNS Filtering – Controls access to websites based on their domain names to help protect against phishing attacks and other cyberthreats.

Malware Protection – Detects, blocks and removes malicious software

IP Filtering – Blocks access to specific IP addresses based on IP reputation

File Filtering – Controls access to files based on specific criteria such as file type, user identity, device security posture and other contextual information

SafeSearch – Helps filter out explicit content from search engine results

Cloud access security broker (CASB) – Implements zero-trust access control and policy enforcement for cloud SaaS applications (Trusted Connection Plus only)

Select “Done” on this screen:

Trusted Connection

Trusted Connection Plus

Select “Proceed” to install and configure the Trusted Connection agent

Choose “With MDM” or “No MDM” (or Do it later):

With MDM Option:
Select “Verizon MDM” or “Other MDM” and follow the instructions provided:Once you have completed the steps for MDM, select “Done”

Once you have completed the steps for MDM, select “Done”

Without MDM Option:

Trusted Connection is designed to work with an MDM, either the Verizon MDM solution or other third party MDMs. If you do not presently have an MDM, please contact your sales point of contact to find out how to add the Verizon MDM. If you do not wish to use an MDM at this point, Trusted Connection will provide an email template to the customer administrator, with instructions on how to distribute agent download links to their organization's employees. The email will include links to agent downloads for various operating systems (Windows, Linux, iOS, macOS, and Android).

Note: If you choose to not use an MDM, your end users will have to install the agent on their devices, which involves several steps to complete.

That’s it – you are ready to explore the Trusted Connection dashboard. Click “Done”.