Netskope Help

Configure Workplace by Facebook for API Data Protection

Workplace is a collaborative platform run by Facebook, Inc. It molds the basic Facebook app to suit the needs of enterprises. It may be used to communicate via groups, to chat with colleagues, and offers the social network features in a corporate environment. API Data Protection supports Workplace by Facebook. API Data Protection provides the following capabilities:

  • User and group visibility that are part of the organization

  • Visibility of files and messages posted in the group

  • Group/user-based policy

  • DLP scanning of the posts - files, messages, and comments

  • DLP support for Work Chat

  • Incident Management - alerts & security audit events

Note

API Data Protection policy for Workplace by Facebook supports the Alert action only. In other words, if there is a violation, API Data Protection will generate an alert and if configured, notify the user about a policy violation.

To configure Workplace by Facebook for API Data Protection, there are two parts to this procedure:

  • Configure Workplace by Facebook instance in Netskope UI

  • Grant Access and Install the Netskope app in Workplace by Facebook

Important

Unlike other apps, Workplace by Facebook instance setup is slightly different. You should first setup the instance in Netskope UI followed by the Netskope app installation in Workplace by Facebook.

Configure Workplace by Facebook Instance in Netskope UI

To authorize Netskope to access Workplace by Facebook instance:

  1. Log in to the Netskope tenant UI: https://<tenant-hostname>.goskope.com and go to Settings > API-enabled Protection > SaaS.

  2. Select the Workplace by Facebook icon, and then click Setup Instance.

    The Setup Instances window opens.

  3. In the App Instance edit box, enter the app instance name used in Workplace by Facebook.

    Note

    The app instance name must match the Workplace by Facebook community account name. You can find the community account name once you login as a system administrator to Workplace by Facebook. Navigate to Settings > Company Dashboard > Preferences. The Company Name is the community account name.

  4. For Instance Type, select the following check box:

    • API Data Protection: Select this option to allow Netskope to scan through your SaaS app instance to list files, user, and other enterprise data.

  5. In the Enter email of the admin for community edit box, enter the administrator email address of your Workplace by Facebook community.

  6. In the Enter comma separated list of internal domains edit box, enter a comma separated list of internal domains.

    Any files shared across internal domains will be treated as internally shared.

  7. In the Enter the domain for your workspace community edit box, enter the domain name of your Workplace by Facebook community. For example, <your-company-name>.workplace.com.

  8. Click Save.

This completes the Workplace by Facebook instance setup.

Grant Access and Install the Netskope App in Workplace by Facebook

Once the Workplace by Facebook app instance is set up, you should grant access and install the Netskope app in Workplace by Facebook. Follow the instructions below:

  1. Log in to the Netskope tenant UI: https://<tenant-hostname>.goskope.com and go to Settings > API-enabled Protection > SaaS.

  2. Select the Workplace by Facebook icon, and then click Grant Access.

    Workplace by Facebook login page opens.

  3. Enter the Workplace by Facebook system administrator username and password.

    The pop-up displays the Netskope app description and permissions requested.

  4. Under the Apply group-related permissions to section, select one of the following options:

    • All groups: This option sends notification for all groups.

    • Specific groups: This option sends notification for selected groups.

    • Let group admins enable it for their groups: This option lets the system administrators enable notifications for their respective groups.

  5. Click Install.

    On successful installation, a new browser window opens acknowledging the successful installation of the app.

This completes the installation of the Netskope app in Workplace by Facebook.

Post Configuration

After Workplace by Facebook is successfully configured, API Data Protection fetches the user and group information for your Workplace by Facebook account  and starts populating the user and group pages on API-enabled Protection dashboard. 

Proceed to configure DLP policies to identify and generate alerts if any sensitive information is shared in group or Work Chat.