With the cloud-based version of ZTNA, a user requests authentication to a controller (hosted in thecloud service). The controller authenticates the user (by communicating with an IAM infrastructure),and it signals to the user and to the application that they should both create separate application