Microsoft 365: deploying Forcepoint Data Security Cloud | App Security as a SAML identity provider

This section will guide you through configuring Forcepoint Data Security Cloud | App Security as a Security Assertion Markup Language (SAML) Identity provider for Microsoft 365 single sign-on (SSO) authentication. This will ensure visibility and access control of Microsoft 365 via Forcepoint Data Security Cloud | App Security Cloud Access Security Broker (CASB).

Note:

For hybrid deployments, that are using both Exchange and Microsoft 365 you will need to ensure that the login format is set to User Principal Name (UPN).
SSO Auth is required to support Client Cert checking. You can view the list of supported Microsoft apps on the Microsoft 365 Client App Support page.
You can also enable SSO Auth for Microsoft 2013 apps by following the instructions on the Enable Modern Authentication for Office 2013 on Windows devices page.