Zscaler

Steps to get required configs

• To sync data using Zscaler APIs, you need to add an authentication server (e.g. Microsoft Entra ID, Okta).

• Your organization must meet the following requirements to be able to use OAuth 2.0 authentication:

  • You must have an API subscription. If you do not have a subscription, submit a Zscaler Support ticket.

  • You must have the API Roles configured in the ZIA Admin Portal. (You will need to create a API role with name ZillaReaderRole).

  • You must have your client applications registered on your authorization server (i.e., PingFederate, Okta, or Azure AD) with the required scope and configured appropriately. To learn how to set up client applications on your OAuth 2.0 service provider, see the respective help documentation.

  • You must have your OAuth 2.0 authorization server added to the ZIA Admin Portal.

  • Documentation for Microsoft Entra ID - OAuth 2.0 Configuration Guide for Microsoft Entra ID | Zscaler.

  • Documentation for Okta - OAuth 2.0 Configuration Guide for Okta | Zscaler.

  • You will get the OAuth token URL, Client ID and Client Secret from the authentication server.

• Zscaler domain will be the domain you use to login into your Zscaler portal (e.g. zscaler.net).

• You will find your organization I