Zero trust user flows focus on how access is granted for users and devices connecting from different contexts, including remote and hybrid enterprise environments.

1. User attempts to access a resource.
2. Identity is verified.
3. Device posture and compliance are evaluated.
4. Context such as role, location, application, and policy is checked.
5. Access is granted only to the requested application or resource.
6. Continuous validation is maintained during the session.

The user is not given broad network connectivity. Instead, the user receives access tailored to the specific application or service needed.

This slide is based on Cisco Zero Trust Architecture guidance.