...
SphereShield offers a solution for organizations that use ADFS for authentication to cloud UC / collaboration services.
SphereShield leverages Active Directory and MDM capabilities to distribute certificates.
...
SphereShield can be configured to apply its protections to all services using ADFS or only specified ones.
Control which services require SphereShield control on ADFS
The SphereShield functionality does not need to be applied to all ADFS traffic for all services that utilize ADFS services for authentication.
For example, task management SAAS software can continue to use ADFS without SphereShield functionality and Webex Teams access can be protected.
SphereShield servers can inspect the traffic and exempt specified types of traffic from certificate-based authentication, based on the service requesting the authentication or other parameters.
Alternately, SSL ADFS traffic can be decrypted by existing company load balancers such as F5's Big IP and relevant traffic can be sent to the SphereShield servers and the rest of the ADFS traffic can be sent directly to ADFS servers.