User Import Methods and Supported Attributes - Netskope Technical Documentation

Netskope provides flexible, enterprise-grade user provisioning options to synchronize identity data and automate lifecycle management within your tenant. By supporting both SCIM 2.0 and the Netskope Directory Importer, organizations can securely import mandatory attributes—such as Email ID and Universal Principal Name (UPN)—to ensure seamless user identification and transparent Netskope Client deployment.

While SCIM is the recommended standard for large-scale cloud deployments, the Directory Importer provides a robust alternative for on-premises integration. To maintain data integrity, Netskope requires a single, distinct import method per user account to prevent simultaneous update conflicts.

The following are the supported methods to import users into your Netskope tenant.

Using SCIM App
Using Directory Importer

We do not support multiple, distinct import methods simultaneously updating the same enterprise user account ( Universal Principal Name (UPN) / username.

Import Method	UPN	Email ID	First Name, Last Name	Groups	OU	Custom Attributes	Notes
SCIM	Yes(userName)	Yes	Yes	Yes	No	Yes	Recommended option for large size deployment.
Directory Importer	Yes	Yes	Yes	Yes	Yes	Yes

* Email ID and UPN is a mandatory field during user import.
* Email ID is mandatory in all deployment modes because it represent the user identity across the Netskope Secure Cloud Platform.
* UPN is mandatory for transparent deployment of Netskope Client and is highly recommended.

Using SCIM App

System for Cross-domain Identity Management (SCIM) defines a standard for exchanging identity information across different cloud app vendors. The objects that are exchanged using SCIM are called resources (like user resource, group resource etc). The purpose of SCIM is to automate the exchange of user identity information across apps for user provisioning.

For more information, see SCIM Settings for User Provisioning

Netskope SCIM implementation follows the RFC 7643 & 7644 standards and support SCIM calls from IDPs that follows the same SCIM RFC standards. The following are the list of Netskope supported SCIM calls:

GET	POST	DEL	PATCH
List all Users Get User by SCIM ID List all Groups Get Group by SCIM ID	Create User Create Group	Delete User Delete Group	Add User to Group Remove User to Group Toggle Active

To watch a video about Okta SCIM provisioning, see Configuring Okta SCIM with Netskope SCIM.