Install the Netskope Client in IdP Mode and Enroll Users For Windows
Install the Netskope Client in IdP Mode and Enroll Users For Windows
The Netskope Client (v71 and above) can be installed a couple of ways for IdP mode.
- Install NSClient.msi without any parameters (This will prompt user for the Netskope tenant name and then ADFS login details)
- Install NSClient.msi with IdP parameters in multi-user mode (This will prompt user for ADFS login details only) – This can also be packaged and deployed via software deployment tools
The steps below are for installing the Client with IdP parameters, which is recommended so users do not have to remember the tenant name; only their IdP login details.
Note
Download the NS Client for Windows from your Home POP:
https://download-<tenant-URL>/dlr/win/get
You need admin rights to deploy the NS Client onto the endpoints.
- Enter these parameters:
msiexec /I NSClient.msi installmode=IDP tenant=<tenant name> domain=<tenant.domain> mode=peruserconfig
- Installation will start. After installation completes, click Finish.
- This will prompt the user for ADFS login ID and password. This window will continue to prompt user until credentials have been entered.
Based on the ADFS Authentication configurations it may either prompt for Form based or WIA basic mode. Enter your credentials and click Sign-in.
Forms based authentication or Windows Basic Authentication
- After a successful login, the Netskope Client will validate the email address of the user in the tenant, and then download the configuration files from the tenant.
- After configurations files have been downloaded successfully, the Client will enroll itself and display Enrolled successfully. Click X to close the window, or it will auto close in 5 seconds.
- Right-click the Netskope Client and select Configuration. This will display the email address registered on the device.
You can also Unenroll if the option is enabled in the tenant under Settings > Active Platform > Devices > Client Configurations.
