Configure Workplace from Meta for API Data Protection
Workplace is a collaborative platform run by Meta, Inc. It molds the basic Meta app to suit the needs of enterprises. It may be used to communicate via groups, to chat with colleagues, and offers the social network features in a corporate environment. API Data Protection supports "Workplace from Meta". API Data Protection provides the following capabilities:
User and group visibility that are part of the organization
Visibility of files and messages posted in the group
Group/user-based policy
DLP scanning of the posts - files, messages, and comments
DLP support for Work Chat
Incident Management - alerts & security audit events
Note
API Data Protection policy for "Workplace from Meta" supports the Alert action only. In other words, if there is a violation, API Data Protection will generate an alert and if configured, notify the user about a policy violation.
To configure "Workplace from Meta" for API Data Protection, there are two parts to this procedure:
Configure "Workplace from Meta" instance in Netskope UI
Grant Access and Install the Netskope app in "Workplace from Meta"
Important
Unlike other apps, "Workplace from Meta" instance setup is slightly different. You should first setup the instance in Netskope UI followed by the Netskope app installation in "Workplace from Meta".
Configure "Workplace from Meta" Instance in Netskope UI
To authorize Netskope to access "Workplace from Meta" instance:
Log in to the Netskope tenant UI: https://<tenant-hostname>.goskope.com and go to Settings > API-enabled Protection > SaaS.
Select the Workplace by Facebook icon, and then click Setup Instance.
The Setup Instances window opens.
In the App Instance edit box, enter the app instance name used in "Workplace from Meta".
Note
The app instance name must match the "Workplace from Meta" community account name. You can find the community account name once you login as a system administrator to "Workplace from Meta". Navigate to Settings > Company Dashboard > Preferences. The Company Name is the community account name.
For Instance Type, select the following check box:
API Data Protection: Select this option to allow Netskope to scan through your SaaS app instance to list files, user, and other enterprise data.
In the Enter email of the admin for community edit box, enter the administrator email address of your "Workplace from Meta" community.
In the Enter comma separated list of internal domains edit box, enter a comma separated list of internal domains.
Any files shared across internal domains will be treated as internally shared.
In the Enter the domain for your workspace community edit box, enter the domain name of your "Workplace from Meta" community. For example, <your-company-name>.workplace.com.
Click Save.
This completes the "Workplace from Meta" instance setup.
Grant Access and Install the Netskope App in "Workplace from Meta"
Once the "Workplace from Meta" app instance is set up, you should grant access and install the Netskope app in "Workplace from Meta". Follow the instructions below:
Log in to the Netskope tenant UI: https://<tenant-hostname>.goskope.com and go to Settings > API-enabled Protection > SaaS.
Select the Workplace by Facebook icon, and then click Grant Access.
"Workplace from Meta" login page opens.
Enter the "Workplace from Meta" system administrator username and password.
The pop-up displays the Netskope app description and permissions requested.
Under the Apply group-related permissions to section, select one of the following options:
All groups: This option sends notification for all groups.
Specific groups: This option sends notification for selected groups.
Let group admins enable it for their groups: This option lets the system administrators enable notifications for their respective groups.
Click Install.
On successful installation, a new browser window opens acknowledging the successful installation of the app.
This completes the installation of the Netskope app in "Workplace from Meta".
Post Configuration
After "Workplace from Meta" is successfully configured, API Data Protection fetches the user and group information for your "Workplace from Meta" account and starts populating the user and group pages on API-enabled Protection dashboard.
Proceed to configure DLP policies to identify and generate alerts if any sensitive information is shared in group or Work Chat.