Importing users

Prior to an end user being able to use Forcepoint Data Security Cloud | App Security, the user must exist within the portal under the Users and Groups page.

There are 3 primary ways users can be imported/created: Active Directory Synchronization agent (Active Directory (AD) Sync), Security Assertion Markup Language (SAML) auto-provisioning, and/or config Representational State Transfer (REST) API.

• The AD Sync agent is an agent which is installed on a workstation/server joined to the domain. This tool makes an Lightweight Directory Access Protocol (LDAP) request to discover users within AD Security Groups and/or Organizational Units that the administrator defines. All users within the group are automatically imported to the portal and kept in sync as changes are made.
• SAML auto-provisioning creates users after they successfully authenticate to an external Identity Provider (IdP) using single sign-on (SSO). Not all thick client apps use SAML 2.0 (e.g. Office 2010, ActiveSync), so users are required to login at least once using on an app/browser that uses SAML SSO before access is possible through any non-SAML method (e.g. ActiveSync in iOS mail).
• Config REST API can be used to create/manage users and groups.