Custom Granular OAuth Application for Zoom

Last updated
Save as PDF

Zoom has introduced a new Custom Granular OAuth application, that empowers administrators to set granular permissions, allowing Skyhigh to monitor the events and perform DLP activities effectively.

Create and Configure Custom Granular OAuth Application for Zoom

To create a Custom Granular OAuth application for Zoom:

Go to Zoom Marketplace.
Choose Develop > Build App.
Select General App, and then click Create.
On the Basic Information page, select Admin-managed, and then click Save.
Under App Credentials, configure the following:
- Client ID and Client Secret. Copy the Client ID and Client Secret. You must provide these details while enabling API access in Skyhigh CASB.
- OAuth Redirect URL. Enter the URL in the following format:

 <https://Skyhigh_CASB_URL/shndash/extensions/OAuthCallbackController>

Skyhigh_CASB_URL. Here, change the Skyhigh_CASB_URL as per your tenant URL. For example, dashboard-us.ui.skyhigh.cloud, or dashboard-eu.ui.skyhigh.cloud.
- Let's say the production URL format is https://dashboard-us.ui.skyhigh.cloud and Skyhigh_CASB_URL is dashboard-us.ui.skyhigh.cloud then, the Redirect URL is https://dashboard-us.ui.skyhigh.clou...ash/extensions /OAuthCallbackController.

Under OAuth Allow Lists, enter the same URL as OAuth Redirect URL.
Click Continue.
On the Access page, under Token, copy the Secret Token. You must provide the Secret Token while enabling API access in Skyhigh CASB.

NOTE: If the secret token is not available for selection, click Generate.

Configure Scopes for Zoom

Use the Scopes tab to define the permissions based on which users can access Zoom resources, such as chat messages or user details.

To configure scopes for Zoom:

Go to Scopes > Add Scopes.
Select the following scopes and their associated permissions, then click Done.

meeting:read:participant:admin
meeting:read:chat_message:admin
meeting:update:live_meeting_chat_message:admin
team_chat:read:channel:admin
team_chat:read:list_user_channels:admin
team_chat:read:list_members:admin
team_chat:read:user_message:admin
team_chat:delete:member:admin
team_chat:write:user_message:admin
team_chat:update:user_message:admin
user:read:user:admin
user:read:list_users:admin

After configuring the scopes for your Zoom instance, create a Zoom instance in Skyhigh CASB.

Enable Event Subscription

To receive Zoom event notifications, you must create an event subscription for Zoom and add Skyhigh CASB's webhook URL for your Zoom instance so that Skyhigh CASB can receive these notifications.

To receive Zoom event notifications:

On the Access page, under General Features, turn ON the toggle button.
Under Event Subscriptions, configure the following, and then click Save:
- Choose a Method. Select Webhook.
- Subscription name. Enter the subscription name.
- Add Events. Configure event types for Zoom.
- Event notification endpoint URL. Enter the URL in the following format. For details on Tenant ID and Instance ID, see Skyhigh CASB Tenant ID and Instance ID.

<webhook server domain name/zoom/16000/<tenantId>/<instanceId>

Event notification receiver. Select All users in your account.
Webhook server domain name. Contact Skyhigh Security Support for webhook server domain name based on your region.

Now Skyhigh CASB's webhook URL receives Zoom event notifications.

Configure Event Types for Zoom

NOTES:

If you select Event types other than the event types listed above, Zoom does not process those events and Skyhigh CASB throws 500 Internal Server Error. Zoom also blocks sending events if you receive too many 500 Internal Server Errors.
All the event types are required except the Meeting event. To apply DLP for your Zoom in-meeting chat messages, see Prerequisites for In-Meeting Chat DLP Support.

You can configure the event types for Zoom to specify the Zoom events based on which Skyhigh CASB receives Zoom event notifications.

To configure event types for Zoom:

On the Access page, under Events, click Add Events.
Select the following Event types and their associated events, then click Done.

After integrating Skyhigh CASB with Zoom, you can define DLP policies and attach them to your Zoom instance. For details, see DLP Collaboration Use Cases for Zoom.