Cloud Application Control (CAC) is a phrase used for the use-case of controlling how someone can access SaaS apps, like Google, Microsoft 365, Slack, and more. To execute the control, you use a proxy and then create URL restrictions or header injection to perform the actual policy enforcement.