Forcepoint Data Security Cloud Online Help Document Subtitle

Home
Platform services
The Forcepoint Platform Services provides a comprehensive and flexible cybersecurity solution that can help organizations protect their data, secure their access to applications and resources, and meet their compliance requirements.
Admin
In order to get started working with Forcepoint Data Security Cloud, you need to create users, groups, and roles locally or sync from the external identity provider (IdPs) or Active Directory (AD) used by your organization.
SAML
The Security Assertion Markup Language (SAML) based identity provider allows user authentication by transferring identity data between two parties, that is an identity provider and a service provider.
Configuring IdPs

Introduction
The Forcepoint Data Security Cloud secures data everywhere for distributed businesses and government agencies that need to adapt quickly to changing remote and hybrid workforces.
Product updates
Details of new and updated features, as well as known issues.
Signing in to Forcepoint Data Security Cloud
Once your tenant is created in Forcepoint Data Security Cloud, Technical Contact Admin will receive a welcome email.
Understanding Forcepoint Data Security Cloud layout
The various sections of the Forcepoint Data Security Cloud layout which are common across the applications are described below.
Platform services
The Forcepoint Platform Services provides a comprehensive and flexible cybersecurity solution that can help organizations protect their data, secure their access to applications and resources, and meet their compliance requirements.
- Admin
  In order to get started working with Forcepoint Data Security Cloud, you need to create users, groups, and roles locally or sync from the external identity provider (IdPs) or Active Directory (AD) used by your organization.
  - Roles
    The Roles page is where Forcepoint Data Security Cloud admins can create different and unique admin roles to assign to users or groups.
  - Users
    The Users page provides a list of all users created or synced to Forcepoint Data Security Cloud.
  - Groups
    The Groups page provides a list of all user groups created or synced to Forcepoint Data Security Cloud. From this page, you can create new groups, modify group details, and delete groups.
  - SAML
    The Security Assertion Markup Language (SAML) based identity provider allows user authentication by transferring identity data between two parties, that is an identity provider and a service provider.
    - Creating a new SAML profile
      Create a new SAML profile through the SAML Identity Providers page.
    - Editing a SAML profile
      You can edit the information for an existing SAML profile through the SAML Identity Providers page.
    - Downloading SP metadata
      Service Provider (SP) metadata contains the information needed to interact with the identity providers. If you did not save the SP metadata file when you created the SAML profile, you can download it at any time from the SAML Profiles page.
    - Enabling or disabling a SAML Profile
      You can enable or disable a SAML Profile while creating a SAML Profile. You can also enable or disable SAML profile when needed.
    - Deleting a SAML profile
      Delete a SAML profile if it is no longer needed. You can delete any user-created SAML profiles. Whenever you delete any of the SAML profile, the users and groups associated to the SAML profile gets deleted too.
    - Configuring IdPs
      - Configuring SAML Profile with Google Workspace
        This process includes creating a custom SAML app in the Google Admin console, and mapping user attributes to enable secure, seamless authentication across services.
      - Configuring Okta to support Forcepoint Data Security Cloud as SAML Service Provider
        You can configure Okta to support Forcepoint Data Security Cloud as a SAML Service Provider. You should add Forcepoint Data Security Cloud as an application inside of Okta and then configure Okta as the external IdP inside of Forcepoint Data Security Cloud.
      - Microsoft Entra ID: Configuring Forcepoint Data Security Cloud as a SAML Service Provider
        You can set up Microsoft Entra ID as an IdP within Forcepoint Data Security Cloud. This setup will work to configure SAML SSO proxy authentication with any apps outside of Microsoft apps.
      - ADFS: Configuring Forcepoint Data Security Cloud as a SAML Service Provider
        You can configure Active Directory Federation Services (ADFS) to support Forcepoint Data Security Cloud as a SAML Service Provider.
  - SCIM
    Forcepoint Data Security Cloud supports SCIM version 2.0 to automate the provisioning, updating, and deprovisioning users and groups into Forcepoint Data Security Cloud.
  - External API
    The External API page allows you to manage OAuth tokens for accessing Forcepoint Data Security Cloud external APIs. These OAuth tokens ensure secure access and authentication to Forcepoint Data Security Cloud services, such as enabling you to read and add URIs to existing Custom Categories via the Web Security Cloud Custom Category API.
  - LDAPS
    The Lightweight Directory Access Protocol Secure (LDAPS) enables synchronization of users, groups, and department data from a directory server, such as Microsoft Active Directory (AD) or another LDAP-compliant server.
  - IDM Policy
    Forcepoint Data Security Cloud's IDM Policy page allows Administrators to apply global IDM policies to their users across Forcepoint applications contextually based on a number of variables, such as users/groups, device, and schedule (time and day of Week).
- Insights
  Insights is a centralized reporting and analytics service that is hosted within the Forcepoint Data Security Cloud.
- Settings
  The Settings lets you access and configure the following settings
Applications
The applications associated with Forcepoint Data Security Cloud are listed below.

Configuring IdPs

Configuring SAML Profile with Google Workspace
This process includes creating a custom SAML app in the Google Admin console, and mapping user attributes to enable secure, seamless authentication across services.
Configuring Okta to support Forcepoint Data Security Cloud as SAML Service Provider
You can configure Okta to support Forcepoint Data Security Cloud as a SAML Service Provider. You should add Forcepoint Data Security Cloud as an application inside of Okta and then configure Okta as the external IdP inside of Forcepoint Data Security Cloud.
Microsoft Entra ID: Configuring Forcepoint Data Security Cloud as a SAML Service Provider
You can set up Microsoft Entra ID as an IdP within Forcepoint Data Security Cloud. This setup will work to configure SAML SSO proxy authentication with any apps outside of Microsoft apps.
ADFS: Configuring Forcepoint Data Security Cloud as a SAML Service Provider
You can configure Active Directory Federation Services (ADFS) to support Forcepoint Data Security Cloud as a SAML Service Provider.