Configure Netskope user provisioning

1. Go to your Netskope sign-in page and sign in with your Netskope administrator account.
2. On the side, click Settings.
3. On the side, click ToolsREST API v2.
4. Click New Token. 
5. For Token name, enter a token name.
6. Click Add Endpoint, search for SCIM, and select api/v2/scim/Users.
7. For Privilege, select Read + Write.
8. Click Save.
9. Click Copy Token and save the access token.
   You need it to complete the setup in the Google Admin console.
10. Click OK.

You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click Netskope.
4. For Autoprovisioning, click Configure autoprovisioning.
5. For Access token, paste the access token that you copied from Netskope.
6. Click Continue.
7. For Endpoint URL, replace {tenant-name} with the tenant name that you set up when you signed up for your Netskope account.
8. Click Continue.

9. For App attributes, verify that all mandatory attributes—those marked with an asterisk (*)—are mapped to Google directory attributes. If not, click the Down arrow  and map them to the appropriate attribute.

10. Click Continue.
11. (Optional) To limit autoprovisioning to specific groups of users:
    1. For Search groups, enter one or more letters of the group name, select the group name, and choose a scope.
    2. Add any additional groups.
    3. (Optional) To remove a group, click Remove .

       If a group has users from a secondary domain or from outside of your organization, those users are not provisioned.

12. Click Continue.
13. Decide how long users have access to the app after the app is turned off for them or their Google Workspace account is suspended or deleted. You can hard delete their account in Netskope. You can set the time frame individually for each option and choose within 24 hours or after one, 7, or 21 days. 
    1. Choose options for each of these settings, as needed:
       • When an app is turned off for a user
       • When a user is suspended from Google
       • When a user is deleted from Google

       If you hard delete the user account in Netskope, the account is removed from the workspace. Always set more time before hard deleting a user's account

    2. Click Finish. 
14. Turn on Autoprovisioning.
15. Click Turn on to confirm.

You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click Netskope.
4. Click Autoprovisioning.
5. For Provisioning scope, click Edit.

6. For Search groups, enter one or more letters of the group name, select the group name, and choose a scope.

7. Add any additional groups.
8. (Optional) To remove a group, click Remove .

   If a group has users from a secondary domain or from outside of your organization, those users are not provisioned.

9. Click Update.

 You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click Netskope.
4. Click Autoprovisioning.
5. For Deprovisioning, click Edit.
6. Decide how long users have access to the app after the app is turned off for them, or their Google Workspace account is suspended or deleted. You can hard delete their account in Netskope. You can set the time frame individually for each option and choose within 24 hours or after one, 7, or 21 days.
   Choose options for each of these settings, as needed: 
   • When an app is turned off for a user
   • When a user is suspended from Google
   • When a user is deleted from Google
   If you hard delete the user account in Netskope, the account is removed from the workspace. Always set more time before hard deleting a user's account.
7. Click Update.

You can turn off autoprovisioning for the app without losing configuration information. Or, you can turn off autoprovisioning and remove all configuration information.

You must be signed in as a super administrator for this task.

To turn off autoprovisioning for the app and keep the configuration information:

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click Netskope.
4. Choose an option:

   • Turn off Autoprovisioning.
   •  Click AutoprovisioningStatusTurn off.
5. Click Turn off to confirm.

You must be signed in as a super administrator for this task.

1. Sign in to your Google Admin console.

   Sign in using an account with super administrator privileges (does not end in @gmail.com).

2. In the Admin console, go to Menu  AppsWeb and mobile apps.
3. Click Netskope.
4. Click Autoprovisioning.
5. For Delete configuration, click Delete.
6. Click Delete to turn off autoprovisioning and remove all the configuration information.
   Existing users will not be removed from Netskope and can still use the app.

For details on other reasons why autoprovisioning might stop working, refer to the app’s documentation.