Proxy-controlled request routing

A method comprising:

• receiving, at a proxy device, an access request from a user of at least one of a plurality of user devices, the access request including a request to access at least one resource available from a resource host;
• obtaining, in response to a directory request from the proxy device, directory information associated with the user from at least one directory service;
• obtaining user management information associated with the user from a relay device, the user management information including role information indicating one or more roles assigned to the user, and access authorization information indicating resources to which the user has access;
• determining whether the user is an authorized network user based, at least in part, on the directory information;
• and
• conditionally routing the access request to the resource host based, at least in part, on both the directory information indicating authorization to access the network, and the user management information indicating that the user is authorized to access the at least one resource available from a resource host.

A proxy device comprising:

• a processor and associated memory;
• a network interface coupled to the processor, the network interface configured to communicate via a communications network with:
• at least one directory server storing directory information;
• a computing device used by at least one of a plurality of users;
• a relay device storing user management information, the user management information including role information indicating one or more roles assigned to the user, and access authorization information indicating resources to which the user has access;
• the processor and associated memory configured to:
• receive an access request from a user of the computing device used by the at least one of the plurality of users, the access request including a request to access at least one resource available from a resource host;
• obtain directory information associated with the user from the at least one directory server;
• obtain user management information associated with the user from the relay device;
• determine whether the user is an authorized network user based, at least in part, on the directory information;
• and
• conditionally route the access request to the resource host based, at least in part, on both the directory information indicating authorization to access the network, and the user management information indicating that the user is authorized to access the at least one resource available from a resource host.