Forcepoint Data Security Cloud | App Security Administrative Guide

Draft | 2026-03-18

Home
Protect
The Protect section is the primary area for adding and managing your applications you wish to protect.
Configure applications
Forcepoint Data Security Cloud | App Security supports various cloud applications so that Admins can monitor data which is in transit, in motion and at rest.
Salesforce
Forcepoint Data Security Cloud | App Security supports the ability to control access to Salesforce via SSO and API.

Introduction
Forcepoint Data Security Cloud | App Security provide data security and access management for SaaS applications, ensuring safe and compliant cloud usage. Security teams rely on CASB to perform the following types of functions:
Product updates
Explore the details of newly introduced and updated features here, along with an overview of resolved and known issues.
Getting started
This page helps the admins in setting up and configuring the Forcepoint Data Security Cloud | App Security for the first time and also explains the layout of Forcepoint Data Security Cloud | App Security.
User management
This section explains how administrators manage users, roles, and access permissions.
Home
The Home page provides a visually intuitive, data-driven dashboard that consolidates critical SaaS data discovery metrics, including Summary and Activity Log, along with quick access to key product updates.
Analyze
The Analyze section contains all of your log reports and alerts for visibility into user's activity and suspicious behavior.
Protect
The Protect section is the primary area for adding and managing your applications you wish to protect.
- Add Applications
- Configure applications
  Forcepoint Data Security Cloud | App Security supports various cloud applications so that Admins can monitor data which is in transit, in motion and at rest.
  - Microsoft
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Microsoft 365 via SSO and API. Forcepoint Data Security Cloud | App Security also supports CSPM audit scanning for Azure.
  - Google Workspace
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Google Workspace and Google Cloud Platform (GCP) via SSO and API. Forcepoint Data Security Cloud | App Security also supports CSPM audit scanning for GCP.
  - Dropbox
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Dropbox via SSO and API.
  - Box
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Box via SSO and API.
  - AWS
    Forcepoint Data Security Cloud | App Security supports the ability to control access to AWS via SSO and API. Forcepoint Data Security Cloud | App Security also supports CSPM audit scanning.
  - Slack
    Forcepoint Data Security Cloud | App Securitysupports the ability to control access to Slack via SSO and API.
  - Salesforce
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Salesforce via SSO and API.
    - Salesforce: Deploying Forcepoint Data Security Cloud | App Security as a SAML IdP
      This page will guide you through configuring Forcepoint Data Security Cloud | App Security as a SAML identity provider for Salesforce Single Sign-on (SSO) authentication. This will ensure visibility and access control of Salesforce via Forcepoint Data Security Cloud | App Security.
    - Salesforce: Configuring API access
      Following steps demonstrate how to configure the API access using the OAuth token to Salesforce for cloud encryption.
    - Salesforce: Configuring SSPM scan in Forcepoint Data Security Cloud | App Security
      Admins can also have Forcepoint Data Security Cloud | App Security scan Salesforce for SSPM (SaaS Security Posture Management) to audit Salesforce security configurations. This setup does not require any additional changes or alterations to the Salesforce setup above.
  - ServiceNow
    Forcepoint Data Security Cloud | App Security supports the ability to control access to ServiceNow via SSO and API. Also, Forcepoint Data Security Cloud | App Security supports SSPM scanning feature.
  - Atlassian (Confluence and JIRA)
    Forcepoint Data Security Cloud | App Security supports the ability to control access to Atlassian via SSO and API.
  - GitHub
    Forcepoint Data Security Cloud | App Security provides SSO and API integrations with GitHub in order to scan and surface sensitive data at rest.
  - Egnyte: Configuring API access
    This guide page will walk you through how to setup Egnyte for API scanning with Forcepoint Data Security Cloud | App Security. It is important to note that Egnyte enforces API rate limits on all tenants which will not be suitable enough for Forcepoint Data Security Cloud | App Security API scanning.
  - Configure Forcepoint Security Manager
    Forcepoint Security Manager (FSM) is an Any HTTP/S ZTNA App/Service application which can be used for adding multiple FSM ZTNA internal applications while onboarding a large customer.
  - Cisco WebEx Teams (Formerly Spark): Configuring API access
    Forcepoint Data Security Cloud | App Security can provide visibility into data at rest inside of Cisco WebEx Teams (Spark) and quarantine sensitive files.
  - Mobile Mail Cutoff (M365, Google, Exchange)
    Mobile Mail cutoff features enable you to enforce that all ActiveSync traffic goes through Forcepoint Data Security Cloud | App Security.
- Application Controls
- Configuring notifications
  Admins can create custom notification objects that can be applied to policies and reports. This will determine which admins or users are notified when a policy is violated and what the custom message says.
- Setup traffic steering
  Forcepoint Data Security Cloud | App Security supports SmartEdge Agent and Cloud SWG traffic steering methods. This chapter describes steps to deploy each of those so that traffic can be forwarded to Forcepoint Data Security Cloud | App Security.
- Configuring SWG policies
  You can configure SWG Connection Policy, Cloud SWG Authentication Policy and SWG Content Policy to manage traffic through Cloud SWG and SmartEdge agent.
- Configuring Advanced Threat Protection
  Forcepoint Data Security Cloud | App Security provides Advanced Threat Protection (ATP) via partnerships with an antimalware provider.
- Integration
Settings
The Settings section contains the majority of your setting configurations to be used in policies or integrations.
Appendices

Salesforce

Forcepoint Data Security Cloud | App Security supports the ability to control access to Salesforce via SSO and API.

Salesforce: Deploying Forcepoint Data Security Cloud | App Security as a SAML IdP
This page will guide you through configuring Forcepoint Data Security Cloud | App Security as a SAML identity provider for Salesforce Single Sign-on (SSO) authentication. This will ensure visibility and access control of Salesforce via Forcepoint Data Security Cloud | App Security.
Salesforce: Configuring API access
Following steps demonstrate how to configure the API access using the OAuth token to Salesforce for cloud encryption.
Salesforce: Configuring SSPM scan in Forcepoint Data Security Cloud | App Security
Admins can also have Forcepoint Data Security Cloud | App Security scan Salesforce for SSPM (SaaS Security Posture Management) to audit Salesforce security configurations. This setup does not require any additional changes or alterations to the Salesforce setup above.

Copyright © 2026 Forcepoint LLC
DRAFT | 2026-03-18