PurpleID Access Gateway

PurpleID Access Gateway is being retired by June 2026.

PurpleID Access Gateway is a bridge solution that extends the PurpleID Single Sign-On (SSO) and Multi-Factor Authentication (MFA) experience to FedEx applications that have not yet adopted modern authentication protocols such as SAML2, OpenID Connect, or OAuth2. Applications leveraging the PurpleID Access Gateway will share the same access and sign-on experience as other FedEx applications that have transitioned to PurpleID including Workday, Office 365, ServiceNow, and many others.

How does it work?

PurpleID Access Gateway delivers PurpleID SSO and MFA from the cloud to FedEx on-premise web applications. The Access Gateway supports the integration patterns natively supported by on-prem web apps – such as Header-Based and Kerberos authentication, and URL level authorization. All without requiring changes to the app’s source code.

What is the architecture?

The PurpleID Access Gateway consists of the Okta Identity Cloud + the F5 Access Policy Manager (APM). The on-premise F5 APM infrastructure acts as a reverse-proxy and leverages Okta’s SSO and MFA to control access to on-premise apps, using the patterns they natively support. The solution has a simple deployment model that does not require additional middleware or database servers.

PurpleID Access Gateway Benefits

Access Anywhere

Enabling access to on-premise legacy applications from any device while avoiding remote access [VPN] solutions.

Deliver modern security

Delivering modern security for on-premise apps using cloud SSO, Adaptive MFA, and ThreatInsights – PurpleID's threat intelligence feature.

Renewed access experience

Providing consistent user experience for access to on-premise and cloud apps, while enabling secure access from any device.

Seamless integration

Integrate with on-premise apps without changing code using Header-Based, Kerberos, or IWA authentication, and per-URL authorization.