Methods and systems for providing network connectivity to a secure access service edge (SASE) domain

1. A method for providing network connectivity, the method comprising:

receiving from a Mobile Network Operator (MNO) an access ID and an IP address at a Secure Access Service Edge (SASE) domain, wherein the access ID and the IP address correspond to a wireless device, wherein the IP address is allocated to the wireless device on a per-session basis;

generating an IP address-to-tenant mapping at the SASE domain by applying the access ID and the IP address, which has been allocated to the wireless device on a per-session basis, to an access ID-to-tenant mapping; and

forwarding traffic received at the SASE domain from the wireless device via the MNO according to the IP address-to-tenant mapping, wherein the traffic received at the SASE domain from the wireless device via the MNO has a source IP address that is the same as the IP address that is allocated to the wireless device on a per-session basis and wherein the traffic is forwarded to a tenant that is identified by applying the source IP address of the received traffic to the IP address-to-tenant mapping; and

wherein the wireless device is authenticated by the MNO and the IP address is allocated to the wireless device on a per-session basis before the access ID and the IP address are sent to the SASE domain.

2. The method of claim 1 , wherein the access ID is a Subscriber Identity Module (SIM)-based identifier.

3. The method of claim 1 , wherein the access ID includes at least one of a subscriber identity and device identifier.

4. The method of claim 1 , wherein authenticating the wireless device involves the MNO implementing a SIM-based authentication.

5. The method of claim 1 , wherein authenticating the wireless device involves the MNO implementing a non-SIM-based authentication.

6. The method of claim 1 , wherein the wireless device is connected to the MNO via a radio access network (RAN) and wherein traffic is received at a SASE gateway of the SASE domain via a SASE Access Point Name (APN).

7. The method of claim 6 , wherein the SASE APN carries traffic for multiple different tenants.

8. The method of claim 6 , wherein the SASE APN carries traffic for multiple different tenants from the MNO to the SASE gateway.

9. The method of claim 6 , wherein the SASE APN carries traffic for multiple different tenants from the MNO to the SASE gateway in at least one of a GRE tunnel, an IPsec tunnel, and a Software Defined-WAN (SD-WAN).

10. The method of claim 1 , wherein the SASE domain is connected to the MNO via multiple SASE APNs, wherein each SASE APN is dedicated to a different SASE service provider.

11. The method of claim 1 , wherein the wireless device is connected to the MNO via a Wireless LAN (WLAN) and wherein traffic is received at a SASE gateway of the SASE domain via a router of the MNO.

12. The method of claim 1 , wherein generating the IP address-to-tenant mapping comprises matching the access ID received from the MNO with an access ID in the access ID-to-tenant mapping to identify a corresponding tenant and then mapping the IP address received from the MNO to the identified corresponding tenant to generate the IP address-to-tenant mapping.

13. A non-transitory computer readable medium that stores computer readable instructions, which when executed on one or more processors, implements a method for providing secure network connectivity, the method comprising:

receiving from a Mobile Network Operator (MNO) an access ID and an IP address at a Secure Access Service Edge (SASE) domain, wherein the access ID and the IP address correspond to a wireless device, wherein the IP address is allocated to the wireless device on a per-session basis;

generating an IP address-to-tenant mapping at the SASE domain by applying the access ID and the IP address, which has been allocated to the wireless device on a per-session basis, to an access ID-to-tenant mapping; and

forwarding traffic received at the SASE domain from the wireless device via the MNO according to the IP address-to-tenant mapping, wherein the traffic received at the SASE domain from the wireless device via the MNO has a source IP address that is the same as the IP address that is allocated to the wireless device on a per-session basis and wherein the traffic is forwarded to a tenant that is identified by applying the source IP address of the received traffic to the IP address-to-tenant mapping.

14. The non-transitory computer readable medium of claim 13 , wherein the computer readable instructions, which when executed on one or more processors, further implement the method, wherein generating the IP address-to-tenant mapping comprises matching the access ID received from the MNO with an access ID in the access ID-to-tenant mapping to identify a corresponding tenant and then mapping the IP address received from the MNO to the identified corresponding tenant to generate the IP address-to-tenant mapping.

15. A method for providing secure network connectivity, the method comprising:

receiving from a Mobile Network Operator (MNO) an access ID and an IP address at a Secure Access Service Edge (SASE) controller, wherein the access ID and the IP address correspond to a wireless device, wherein the IP address is allocated to the wireless device on a per-session basis;

generating an IP address-to-tenant mapping at the SASE controller by applying the access ID and the IP address, which has been allocated to the wireless device on a per-session basis, to an access ID-to-tenant mapping;

distributing the IP address-to-tenant mapping from the SASE controller to a SASE gateway; and

forwarding traffic received at the SASE gateway from the wireless device via the MNO according to the IP address-to-tenant mapping, wherein the traffic received at the SASE domain from the wireless device via the MNO has a source IP address that is the same as the IP address that is allocated to the wireless device on a per-session basis and wherein the traffic is forwarded to a tenant that is identified by applying the source IP address of the received traffic to the IP address-to-tenant mapping.

16. The method of claim 15 , wherein generating the IP address-to-tenant mapping comprises matching the access ID received from the MNO with an access ID in the access ID-to-tenant mapping to identify a corresponding tenant and then mapping the IP address received from the MNO to the identified corresponding tenant to generate the IP address-to-tenant mapping.