Forcepoint Data Security Cloud | SSE Administrative Guide Document Subtitle

Home
IAM
The IAM section contains the configuration pages used for maintaining your organization in Forcepoint Data Security Cloud | SSE (adding your domain, managing users/devices/etc).
Understanding User and Groups
You can configure user identity settings and synchronize user information from your directory in order to assign policies to users or groups.
Managing Local Users and Groups
Under the users card, you can manually add and manage users locally in Forcepoint Data Security Cloud | SSE. You can also view their recent application activity.

Introduction
CASB provide data security and access management for SaaS applications, ensuring safe and compliant cloud usage. Security teams rely on CASB to perform the following types of functions:
Product updates
Explore the details of newly introduced and updated features here, along with an overview of resolved and known issues.
Sign into the Forcepoint Data Security Cloud | SSE portal
Signing into Forcepoint Data Security Cloud | SSE to configure manage CASB, web and private application traffic.
Getting started
This page helps the admins in setting up and configuring the Forcepoint Data Security Cloud | SSE for the first time and also explains the layout of Forcepoint Data Security Cloud | SSE.
Home
The Home page provides a visually intuitive, data-driven dashboard that consolidates critical SaaS data discovery metrics, including Summary and Activity Log, along with quick access to key product updates.
Analyze
The Analyze section contains all of your log reports and alerts for visibility into user's activity and suspicious behavior.
Protect
The Protect section is the primary area for adding and managing your applications you wish to protect.
IAM
The IAM section contains the configuration pages used for maintaining your organization in Forcepoint Data Security Cloud | SSE (adding your domain, managing users/devices/etc).
- Understanding User and Groups
  You can configure user identity settings and synchronize user information from your directory in order to assign policies to users or groups.
  - Provisioning new domains
    You can provision as many email domains as you wish to add into the Forcepoint Data Security Cloud | SSE system. Every email domain that you wish to use within Forcepoint Data Security Cloud | SSE must be configured, along with a corresponding authentication type for users logging in with email addresses in that domain.
  - Provisioning users from Active Directory
    Active Directory (AD) integration supports automatic provisioning and deprovisioning of users as well as synchronization of user group membership changes made in AD.
  - Provisioning users using SCIM
    Forcepoint Data Security Cloud | SSE supports SCIM for provisioning users from Azure into Forcepoint Data Security Cloud | SSE.
  - Managing Local Users and Groups
    Under the users card, you can manually add and manage users locally in Forcepoint Data Security Cloud | SSE. You can also view their recent application activity.
    - Creating a local administrator account
      You should create at least two administrator accounts, that is one for nominal tasks and the other as a backup, with System Administrator role or the custom administrator role which is equivalent to the one that you just created.
    - Adding a local user account
      You can quickly add local users by entering their information manually or inviting users through email.
    - Editing User Details
      Admins can edit user details by selecting the users name to bring up the User Details dialog (for local users).
    - Understanding User Risk Score
      Users are assigned a risk score based on risky activities identified via API scans.
    - Viewing User and Device Activity
      The User/Device Activity page displays the users activity over the past 7 days and can also show their activity baselined against groups they belong to.
- Adding external IdPs in Forcepoint Data Security Cloud | SSE
  You can configure various applications to support Forcepoint Data Security Cloud | SSE as a SAML Service Provider.
- Understanding Admin Roles
  The Admin Roles page is where Forcepoint Data Security Cloud | SSE admins can create different and unique admin roles to assign to users or groups. The role permissions can allow users to Edit, View, or Disabled (hidden) to each individual tab and the sub-component within the tab.
- Configuring Multi-Factor Auth
  When configuring the global login policies, Admins can enforce two-factor authentication (MFA) for admins and users when logging into any application or as part of a policy action when suspicious login behavior is detected.
Settings
The Settings section contains the majority of your setting configurations to be used in policies or integrations.
Support
The Support section contains links to Admin guide, URL Lookup page, and Forcepoint Customer Hub.
Appendices

Managing Local Users and Groups

Under the users card, you can manually add and manage users locally in Forcepoint Data Security Cloud | SSE. You can also view their recent application activity.

Creating a local administrator account
You should create at least two administrator accounts, that is one for nominal tasks and the other as a backup, with System Administrator role or the custom administrator role which is equivalent to the one that you just created.
Adding a local user account
You can quickly add local users by entering their information manually or inviting users through email.
Editing User Details
Admins can edit user details by selecting the users name to bring up the User Details dialog (for local users).
Understanding User Risk Score
Users are assigned a risk score based on risky activities identified via API scans.
Viewing User and Device Activity
The User/Device Activity page displays the users activity over the past 7 days and can also show their activity baselined against groups they belong to.

Copyright © 2025 Forcepoint LLC