Netskope provides flexible, enterprise-grade user provisioning options to synchronize identity data and automate lifecycle management within your tenant. By supporting both SCIM 2.0 and the Netskope Directory Importer, organizations can securely import mandatory attributes—such as Email ID and Universal Principal Name (UPN)—to ensure seamless user identification and transparent Netskope Client deployment.
While SCIM is the recommended standard for large-scale cloud deployments, the Directory Importer provides a robust alternative for on-premises integration. To maintain data integrity, Netskope requires a single, distinct import method per user account to prevent simultaneous update conflicts.
The following are the supported methods to import users into your Netskope tenant.
-
Using SCIM App
-
We do not support multiple, distinct import methods simultaneously updating the same enterprise user account ( Universal Principal Name (UPN) / username.
| Import Method | UPN | Email ID | First Name, Last Name | Groups | OU | Custom Attributes | Notes |
|---|---|---|---|---|---|---|---|
| SCIM | Yes(userName) | Yes | Yes | Yes | No | Yes | Recommended option for large size deployment. |
| Directory Importer | Yes | Yes | Yes | Yes | Yes | Yes |
* Email ID is mandatory in all deployment modes because it represent the user identity across the Netskope Secure Cloud Platform.
* UPN is mandatory for transparent deployment of Netskope Client and is highly recommended.
Using SCIM App
System for Cross-domain Identity Management (SCIM) defines a standard for exchanging identity information across different cloud app vendors. The objects that are exchanged using SCIM are called resources (like user resource, group resource etc). The purpose of SCIM is to automate the exchange of user identity information across apps for user provisioning.
For more information, see SCIM Settings for User Provisioning
Netskope SCIM implementation follows the RFC 7643 & 7644 standards and support SCIM calls from IDPs that follows the same SCIM RFC standards. The following are the list of Netskope supported SCIM calls:
| GET | POST | DEL | PATCH |
|---|---|---|---|
|
|
|
|
To watch a video about Okta SCIM provisioning, see Configuring Okta SCIM with Netskope SCIM.