Cloud Explicit Proxy for Chromebooks

The JSON object has the following format:

{"tenant": {            "Value": "<full-tenant-name>"   },   "block_disable": {            "Value": <option>   },   "enforce_os": {            "Value": ["<os-name>"]   },   "bypass_list": {        "Value": [                   "<comma-seperated_url_lists>"         ]    } }
tenant - The JSON object must contain the tenant name in format of "tenant": {"Value":"<tenant-name>"}. For example: "tenant": {"Value":"myorg.<tenant-URL>"}, where myorg.eu.goskope.com is the full tenant name. The tenant name must include the goskope.com suffix. block_disable - A boolean value to disallow users from disabling steering to Netskope. For example: "block_disable": {"Value": true}enforce_os - An array of strings that specify where the Netskope Chrome extension will operate. If this parameter is not specified, the extension will automatically be installed on all devices for a given user profile even if other Netskope steering methods are supposed to be used on those devices. 
Example of a valid entry: enforce_os":{"Value":["cros"]}Valid operating system definitions are:
For ChromeOS, specify crosFor Microsoft Windows, specify winFor Apple macOS, specify macFor Google Android , specify android. 
Note
Google Chrome on Android does not support extensions, so this parameter is valid only for third-party Chromium based browsers
For non-ChromeOS linux, specify linuxFor OpenBSD, specify openBSD
bypass_list - An array of strings to identify the bypass settings for Netskope steering.This list may contain the following entries:
Hostname : [_<scheme>_://]_<host-pattern>_[:_<port>_]. Match all hostnames that match  _<host-pattern>_.  A leading "." is interpreted as a "*." . Examples: "foobar.com", "*foobar.com", "*.foobar.com", "*foobar.com:99", "https://x.*.y.com:99".
PatternMatchesDoes not Match.foobar.comwww.foobar.comfoobar.com*.foobar.comwww.foobar.comfoobar.comfoobar.comfoobar.comwww.foobar.com*foobar.comfoobar.com, www.foobar.com, foofoobar.com
Simple Hostname: <local> . Matches simple hostnames. A simple hostname is one that contains no dots and is not an IP literal. For instance example and localhost are simple hostnames. However, example.com, example., and [::1] are not. IP Address: [_<scheme>_://]_<ip-literal>_[:_<port>_]. Match URLs that are IP address literals. Conceptually this is similar to the first case, but with special cases to handle IP literal canonicalization. For example, matching on [0:0:0::1]  is the same as matching on [::1]  because the IPv6 canonicalization is done internally. Examples: 127.0.1, [0:0::1], [::1], http://[::1]:99 .IP Address with Range: _<ip-literal>_/_<prefix-length-in-bits>_ . Match any URL containing an IP literal within the given range. The IP range is specified using CIDR notation. Examples: "192.168.1.1/16", "fefe:13::abc/33"
List of domains recommended to be bypassed by Google:
"bypass_list":{    "Value":[       "*.1e100.net",       "accounts.google.com",       "accounts.google.co.uk",       "accounts.gstatic.com",       "accounts.youtube.com",       "alt*.gstatic.com",       "chromeos-ca.gstatic.com",       "chromeosquirksserver-pa.googleapis.com",       "clients1.google.com",       "clients2.google.com",       "clients3.google.com",       "clients4.google.com",       "clients2.googleusercontent.com",       "cloudsearch.googleapis.com",       "commondatastorage.googleapis.com",       "cros-omahaproxy.appspot.com",       "dl.google.com",       "dl-ssl.google.com",       "firebaseperusertopics-pa.googleapis.com",       "*.googleusercontent.com",       "*.gvt1.com",       "gweb-gettingstartedguide.appspot.com",       "m.google.com",       "omahaproxy.appspot.com",       "pack.google.com",       "policies.google.com",       "printerconfigurations.googleusercontent.com",       "safebrowsing-cache.google.com",       "safebrowsing.google.com",       "ssl.gstatic.com",       "storage.googleapis.com",       "tools.google.com",       "www.googleapis.com",       "www.gstatic.com"    ] } 
Note
If using non-Google IdP ensure that you add relevant domains for SAML auth to bypass to this list.
pac_data - A static PAC file data to be used instead of the bypass_list. The provided PAC file should point the steered traffic to eproxy-<tenant-name>.goskope.com:8081.
Note
If both pac_data and bypass_list are provided, only the pac_data is used.
Example of a valid pac_data entry is:
"pac_data":{"Value":"function FindProxyForURL(url, host) {   if (!shExpMatch(url, "https://*") && !shExpMatch(url, "http://*")) return "DIRECT";   var ExpList = [     "*.1e100.net",     "accounts.google.com",     "accounts.google.co.uk",     "accounts.gstatic.com",     "accounts.youtube.com",     "alt*.gstatic.com",     "chromeos-ca.gstatic.com",     "chromeosquirksserver-pa.googleapis.com",     "clients1.google.com",     "clients2.google.com",     "clients3.google.com",     "clients4.google.com",     "clients2.googleusercontent.com",     "cloudsearch.googleapis.com",     "commondatastorage.googleapis.com",     "cros-omahaproxy.appspot.com",     "dl.google.com",     "dl-ssl.google.com",     "firebaseperusertopics-pa.googleapis.com",     "*.googleusercontent.com",     "*.gvt1.com",     "gweb-gettingstartedguide.appspot.com",     "m.google.com",     "omahaproxy.appspot.com",     "pack.google.com",     "policies.google.com",     "printerconfigurations.googleusercontent.com",     "safebrowsing-cache.google.com",     "safebrowsing.google.com",     "ssl.gstatic.com",     "storage.googleapis.com",     "tools.google.com",     "www.googleapis.com",     "www.gstatic.com"];   for (var i=0; i<ExpList.length; i++) {     if (shExpMatch(host, ExpList[i])) return  "DIRECT" ;   }   var proxy = "PROXY eproxy-myorg.eu.goskope.com:8081";   return proxy; }"}
pac_url - A URL for PAC file to be applied instead of bypass_list or pac_data. The downloaded PAC file should point steered traffic to eproxy-<tenantname>.goskope.com:8081. If pac_url and bypass_list or pac_data are provided, only pac_url is used.
Example of a valid pac_url entry is:
"pac_url":{"Value":"http://setools.netskope.io/mypac.pac"}