Forcepoint Data Security Cloud | SSE Administrative Guide Document Subtitle

Home
IAM
The IAM section contains the configuration pages used for maintaining your organization in Forcepoint Data Security Cloud | SSE (adding your domain, managing users/devices/etc).
Adding external IdPs in Forcepoint Data Security Cloud | SSE
You can configure various applications to support Forcepoint Data Security Cloud | SSE as a SAML Service Provider.

Introduction
CASB provide data security and access management for SaaS applications, ensuring safe and compliant cloud usage. Security teams rely on CASB to perform the following types of functions:
Product updates
Explore the details of newly introduced and updated features here, along with an overview of resolved and known issues.
Sign into the Forcepoint Data Security Cloud | SSE portal
Signing into Forcepoint Data Security Cloud | SSE to configure manage CASB, web and private application traffic.
Getting started
This page helps the admins in setting up and configuring the Forcepoint Data Security Cloud | SSE for the first time and also explains the layout of Forcepoint Data Security Cloud | SSE.
Home
The Home page provides a visually intuitive, data-driven dashboard that consolidates critical SaaS data discovery metrics, including Summary and Activity Log, along with quick access to key product updates.
Analyze
The Analyze section contains all of your log reports and alerts for visibility into user's activity and suspicious behavior.
Protect
The Protect section is the primary area for adding and managing your applications you wish to protect.
IAM
The IAM section contains the configuration pages used for maintaining your organization in Forcepoint Data Security Cloud | SSE (adding your domain, managing users/devices/etc).
- Understanding User and Groups
  You can configure user identity settings and synchronize user information from your directory in order to assign policies to users or groups.
- Adding external IdPs in Forcepoint Data Security Cloud | SSE
  You can configure various applications to support Forcepoint Data Security Cloud | SSE as a SAML Service Provider.
  - ADFS: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
    You can configure Active Directory Federation Services (ADFS) to support Forcepoint Data Security Cloud | SSE as a SAML Service Provider.
  - Okta: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
    You can configure Okta to support Forcepoint Data Security Cloud | SSE as a SAML Service Provider. Admin can use the registered application available in Okta for easy configuration.
  - PingOne: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
    You can configure PingOne as an external IdP inside of Forcepoint Data Security Cloud | SSE.
  - PingFederate: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
    You can add PingFederate to Forcepoint Data Security Cloud | SSE as a third party IdP.
  - DUO: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
    You can configure Forcepoint Data Security Cloud | SSE as a SAML SP for DUO. DUO typically provides both, two factor authentication and Identity Provider (IdP) services. Forcepoint Data Security Cloud | SSE can point to any IdP for user authentication and account creation.
  - OneLogin: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
    You can setup OneLogin as an IdP in Forcepoint Data Security Cloud | SSE for authentication.
  - Cyberark Idaptive: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
    You can add Cyberark Idaptive as an external IdP via SAML SSO integration with Forcepoint Data Security Cloud | SSE. Forcepoint Data Security Cloud | SSE offers both IdP-initiated SAML SSO (for SSO access through the user portal or Idaptive mobile applications) and SP-initiated SAML SSO (for SSO access directly through the Forcepoint Data Security Cloud | SSE web application). You can configure Forcepoint Data Security Cloud | SSE for either or both types of SSO. Enabling both methods ensures that users can log into Forcepoint Data Security Cloud | SSE in different situations such as clicking through a notification email. Refer to the Cyberark's documentation for more information.
  - Microsoft Entra ID: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
    You can set up Microsoft Entra ID as an IdP within Forcepoint Data Security Cloud | SSE. This setup will work to configure SAML SSO proxy authentication with any apps outside of Microsoft apps.
  - Any SAML IdP: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
    Use the configuration information to register Forcepoint Data Security Cloud | SSE as a SAML SP on other external SAML IdP.
  - Using advanced IdP settings
    Use the additional information that may be needed during your IdP setup that is not covered in the primary setups, such as Default Relay State.
  - Configuring ACS Proxy
    This section describes how to configure ACS Proxy in Microsoft 365, Microsoft Entra ID and Okta.
- Understanding Admin Roles
  The Admin Roles page is where Forcepoint Data Security Cloud | SSE admins can create different and unique admin roles to assign to users or groups. The role permissions can allow users to Edit, View, or Disabled (hidden) to each individual tab and the sub-component within the tab.
- Configuring Multi-Factor Auth
  When configuring the global login policies, Admins can enforce two-factor authentication (MFA) for admins and users when logging into any application or as part of a policy action when suspicious login behavior is detected.
Settings
The Settings section contains the majority of your setting configurations to be used in policies or integrations.
Support
The Support section contains links to Admin guide, URL Lookup page, and Forcepoint Customer Hub.
Appendices

Adding external IdPs in Forcepoint Data Security Cloud | SSE

You can configure various applications to support Forcepoint Data Security Cloud | SSE as a SAML Service Provider.

ADFS: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
You can configure Active Directory Federation Services (ADFS) to support Forcepoint Data Security Cloud | SSE as a SAML Service Provider.
Okta: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
You can configure Okta to support Forcepoint Data Security Cloud | SSE as a SAML Service Provider. Admin can use the registered application available in Okta for easy configuration.
PingOne: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
You can configure PingOne as an external IdP inside of Forcepoint Data Security Cloud | SSE.
PingFederate: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
You can add PingFederate to Forcepoint Data Security Cloud | SSE as a third party IdP.
DUO: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
You can configure Forcepoint Data Security Cloud | SSE as a SAML SP for DUO. DUO typically provides both, two factor authentication and Identity Provider (IdP) services. Forcepoint Data Security Cloud | SSE can point to any IdP for user authentication and account creation.
OneLogin: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
You can setup OneLogin as an IdP in Forcepoint Data Security Cloud | SSE for authentication.
Cyberark Idaptive: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
You can add Cyberark Idaptive as an external IdP via SAML SSO integration with Forcepoint Data Security Cloud | SSE. Forcepoint Data Security Cloud | SSE offers both IdP-initiated SAML SSO (for SSO access through the user portal or Idaptive mobile applications) and SP-initiated SAML SSO (for SSO access directly through the Forcepoint Data Security Cloud | SSE web application). You can configure Forcepoint Data Security Cloud | SSE for either or both types of SSO. Enabling both methods ensures that users can log into Forcepoint Data Security Cloud | SSE in different situations such as clicking through a notification email. Refer to the Cyberark's documentation for more information.
Microsoft Entra ID: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
You can set up Microsoft Entra ID as an IdP within Forcepoint Data Security Cloud | SSE. This setup will work to configure SAML SSO proxy authentication with any apps outside of Microsoft apps.
Any SAML IdP: Configuring Forcepoint Data Security Cloud | SSE as a SAML SP
Use the configuration information to register Forcepoint Data Security Cloud | SSE as a SAML SP on other external SAML IdP.
Using advanced IdP settings
Use the additional information that may be needed during your IdP setup that is not covered in the primary setups, such as Default Relay State.
Configuring ACS Proxy
This section describes how to configure ACS Proxy in Microsoft 365, Microsoft Entra ID and Okta.

Copyright © 2025 Forcepoint LLC