Skip to main content

Netskope Help

Install the Netskope Client in IdP Mode and Enroll Users For Windows

The Netskope Client (v71 and above) can be installed a couple of ways for IdP mode.

  • Install NSClient.msi without any parameters (This will prompt user for the Netskope tenant name and then ADFS login details)

  • Install NSClient.msi with IdP parameters in multi-user mode (This will prompt user for ADFS login details only) – This can also be packaged and deployed via software deployment tools

The steps below are for installing the Client with IdP parameters, which is recommended so users do not have to remember the tenant name; only their IdP login details.

Note

Download the NS Client for Windows from your Home POP:

https://download-<tenant name>.goskope.com/dlr/win/get

https://download-<tenant name>.eu.goskope.com/dlr/win/get

https://download-<tenant name>.de.goskope.com/dlr/win/get

You need admin rights to deploy the NS Client onto the endpoints.

  1. Enter these parameters:

    msiexec /I NSClient.msi installmode=IDP tenant=<tenant name> domain=<goskope.com / eu.goskope.com / de.goskope.com> mode=peruserconfig
    image48.png

  2. Installation will start. After installation completes, click Finish.

    image73.png

  3. This will prompt the user for ADFS login ID and password. This window will continue to prompt user until credentials have been entered.

    Based on the ADFS Authentication configurations it may either prompt for Form based or WIA basic mode. Enter your credentials and click Sign-in.

    Forms based authentication or Windows Basic Authentication

    image74.png
    image75.png

  4. After a successful login, the Netskope Client will validate the email address of the user in the tenant, and then download the configuration files from the tenant.

    image76.png

  5. After configurations files have been downloaded successfully, the Client will enroll itself and display Enrolled successfully. Click X to close the window, or it will auto close in 5 seconds.

    image77.png

  6. Right-click the Netskope Client and select Configuration. This will display the email address registered on the device.

    image78.png

    You can also Unenroll if the option is enabled in the tenant under Settings > Active Platform > Devices > Client Configurations.

    image79.png
In this section: