Netskope Help

Log in to the Microsoft Azure Portal.

Select Azure Active Directory.

Select Enterprise applications.

Select New application.

Search for Netskope in the gallery.

Select Netskope Administrator Console.

Enter a name for the application. Keep in mind that this is the name your users will see on their Access Panel.

Click Add.

Click Get Started on the Set up single sign on tile.

Select SAML for the single sign-on method.

Click the pencil icon under Basic SAML Configuration.

You will need URLs and information from Netskope at this point. Proceed to the next section.

Log in to your Netskope tenant and click Settings in the bottom left corner.

Go to Administration and then SSO in the right pane:

Copy the string from Service Provider Entity ID under the Netskope Settings section. The string should be similar to Cdc7athjXYFU06mul. Paste this into the Identifier (Entity ID) field in the Azure portal. See image below.

Copy the URLs from Netskope according to image below:

Click Save.

Go to Permissions and click application registration.

Click App roles and click Create app role.

Enter a Display Name. For Allowed member types, select Users/Groups, and for Value, enter a role used in the Netskope tenant (Settings > Administration > Roles). The value cannot have blank spaces. Add a Description and enable the app role. When finished, click Apply. You can add roles for as many of the roles in the Netskope tenant as you'd like.

Go to Users and Groups and click Add user/group. Select users or group and then select a role. This role will be passed in the SAML assertion. When finished, click Assign.

Go to Single Sign-On > SAML-based Sign-on, download the SAML Signing Certificate in Base64 format, and copy the Login URL, Azure AD Identifier, and the Logout URL.

Go back to the Netskope tenant, and under Settings > Administration > SSO > SSO/SLO Settings, select Edit Settings.

Check the boxes to Enable SSO and Sign SSO Authentication Request. See image below.

From the Azure Portal Netskope Administrator Console, copy the following info to Netskope.

Check the boxes to Enable SLO and Sign SLO Request/Response.

Click Submit.

Go back to the Netskope Administrator Console Overview and select Users and groups:

Click Add user:

Click Users and groups and select the user(s) and group(s) who need access and then click Select.

Click “Select Role”

Select the User role and click “Select.”

Click Assign.