Secure access to a corporate application using a facade

A computer-implemented method comprising:

• receiving, at a secure access cloud point of delivery (PoD), from an SSH client application on a client device, a request to access a corporate SSH server that is deployed in a corporate datacenter, wherein the secure access cloud PoD is isolated from the corporate datacenter;
• creating, at the secure access cloud PoD, a facade representing the corporate SSH server, wherein the façade replicates, at least in part, portions of the corporate application;
• forwarding, from the facade at the secure access cloud PoD, to a connector that is also deployed in the corporate datacenter, the request to access the corporate SSH server;
• and
• brokering, by the connector and the facade at the secure access cloud PoD, authentication of a user, authorization of access by the user, and a secure communication session between the SSH client application and the corporate SSH server via the facade, with no corresponding agent being installed at the client device, and with the SSH client application being unaware that the secure communication session is brokered by the connector and the facade at the secure access cloud PoD, wherein brokering the secure communication session between the client application and the corporate SSH server includes establishing a communication channel between the facade at the secure access cloud PoD and the connector, and wherein communication between the client application and the corporate SSH server is conducted via the facade at the secure access cloud PoD and the connector at the corporate datacenter over the communication channel.