Skip to main content

Netskope

Integrate Netskope with Cloudaware to inventory Netskope accounts, client device status, SCIM groups, and SCIM users for identity, endpoint, and security reporting in the CMDB.

info
  • Audience: Cloudaware administrators, SecOps teams, IAM teams, and endpoint operations teams
  • Outcome: Netskope objects are available in CMDB for reporting, access review, endpoint visibility, and security correlation

Capabilities​

The integration supports:

  • Read-only discovery of Netskope account details, client device status, SCIM groups, and SCIM users
  • Identity and endpoint context in Cloudaware for access review, device coverage, and security operations
  • Search and reporting for Netskope objects using CMDB Navigator, CMDB list views, and reports

Prerequisites​

Before you begin, make sure you have:

  • Access to a Cloudaware account.
  • A user with access to the Admin Console and permissions to manage integrations (Cloudaware Administrator).
  • Access to the Netskope tenant that will be connected.
  • Netskope API token with read access to account, client device status, SCIM group, and SCIM user data.
  • The Netskope tenant URL for your environment.

Create Netskope API Credentials​

Create dedicated Netskope API credentials for Cloudaware discovery.

  1. Sign in to the Netskope admin console.
  2. Create or identify an API token for Cloudaware.
  3. Grant the token read access to Netskope account, client device status, SCIM group, and SCIM user data.
  4. Copy the token value and store it in an approved credential store until it is added to Cloudaware.
tip

Use a dedicated Netskope API token for Cloudaware so it can be rotated or revoked without affecting other integrations.

Add a Netskope Account to Cloudaware​

To connect Netskope to Cloudaware:

  1. In Cloudaware, go to Admin.
  2. Find Netskope, then click + ADD.
  3. Enter the following values:
    • Name: Enter a display name for the Netskope connection.
    • API URL: Enter the Netskope tenant URL or API base URL in the format https://<tenant>.goskope.com
    • API Token: Enter the Netskope API token.
  4. Click Save.
  5. Confirm that the integration status indicator is green.
tip

Allow the initial discovery cycle to complete after enabling the integration.

View Netskope Data in CMDB​

To browse discovered Netskope resources:

  1. In Cloudaware, open CMDB Navigator.
  2. In the left pane, select NETSKOPE.
  3. Open an object list, e.g., Netskope Client Device Status or Netskope SCIM Users, to view records.

Supported Objects​

Cloudaware ingests the following Netskope objects:

Netskope ObjectCMDB Object API Name
Netskope AccountCaNetskopeAccount__c
Netskope Client Device StatusCaNetskopeClientDeviceStatus__c
Netskope SCIM GroupCaNetskopeScimGroup__c
Netskope SCIM UserCaNetskopeScimUser__c

Troubleshooting​

note

Initial data collection may take time to complete.

Authentication Fails or Integration Shows Red Status​

  • Verify that the Netskope base URL matches the tenant being connected.
  • Confirm that the API token is active.
  • Check that the credential has read access to account, client device status, SCIM group, and SCIM user data.
  • Re-enter the credential by editing the Netskope integration in Cloudaware.

Netskope Objects Are Missing​

  • Allow the initial discovery cycle to complete.
  • Confirm that the Netskope tenant contains the expected users, groups, and client device status data.
  • Review the Netskope credential permissions for the affected objects.
  • In CMDB Navigator, verify that you are viewing the NETSKOPE section and related resources.
  • Review the Netskope integration status and any error messages in Cloudaware Admin.

Changes in Netskope Are Not Yet Visible in Cloudaware​

  • Synchronization is periodic. Wait for the next collection cycle.
  • If changes remain missing, confirm that the API credential can still access the changed Netskope objects.
  • Review the integration status and error messages in Cloudaware Admin.

Still stuck? Contact Cloudaware Support at support@cloudaware.com with the integration name and a brief description of the issue.

Reconfigure or Remove the Integration​

warning

To rotate Netskope API token or update the base URL, edit the existing integration instead of deleting and re-creating it.

Update the Integration Details​

  1. Go to Admin.
  2. Select Netskope.
  3. Select the specific integration.
  4. Open the three-dot menu, then click Edit.
  5. Update the required fields.
  6. Click Save.

Remove the Integration from Cloudaware​

  1. Go to Admin.
  2. Select Netskope.
  3. Select the specific integration.
  4. Open the three-dot menu, then click Delete.
  5. Confirm the deletion if prompted.

Security Notes​

  • Avoid using personal administrator credentials for long-running integrations.
  • Store Netskope API tokens only in approved credential stores and avoid sharing them through tickets, chat, or documentation.
  • Rotate Netskope API tokens according to your organization's credential-rotation policy and immediately after suspected exposure.
  • Update the Cloudaware integration immediately if the Netskope API token is revoked, regenerated, or replaced.
On this page