Skyhigh Cloud Connector 6.9.2 Release Notes (Nov, 2025)

Consolidate User Identities with User Unification 

The User Unification capability consolidates user identities across the SSE platform, allowing administrators to correlate the activities of users who access both Sanctioned and Shadow services. This enables SOC administrators to monitor all user activities through a unified identity and perform comprehensive threat investigations for individual users.

The User Unification capability creates a single User UID for each user across all Skyhigh products, consolidating multiple identities. For instance, if a user downloads a file from a Sanctioned SaaS app like Box and uploads it to a Shadow app like Sendspace, their activities are tracked separately, by email in Box and by SAM account name in Sendspace. Without unification, the SOC administrator runs two separate searches. With User Unification, Skyhigh assigns each user a unique User UID, enabling all activities to be accessed via a single identifier. These unique users are then displayed on the Users page.

To identify unique users with multiple identities, integrate Skyhigh Cloud Connector with your organization's Active Directory, LDAP, or CSV file. For details about Skyhigh Cloud Connector configuration, see  Configure Cloud Connector to Consolidate User Identities.

Key Benefits

• Unified Activity Monitoring. Gain a comprehensive view of all activities for a single user by using their unique User UID to track both Sanctioned and Shadow service usage.
• Unified Threat Protection. Detect user-related anomalies and threats by monitoring activities across both Sanctioned and Shadow services.
• Unified User Risk Score. Calculate user risk scores using combined data from Sanctioned, Shadow, and Web services.

For details about User Unification, see Getting Started with User Unification.