Skyhigh Domain Unification to Support Chrome/Edge
IMPORTANT: This topic will be relevant and applicable only after October 19, 2024.
The Chromium-based web browsers introduced storage partitioning and communications APIs in third-party contexts to prevent certain types of side-channel cross-site tracking. This change imposes cross-domain restrictions within the browser. As a result, the login workflow may not function as expected when using Chrome or Edge browsers to access the product.
NOTE: Domain unification does not have any impact on the user experience.
Remediation
Skyhigh Security unified different domains operating under the Skyhigh console (Dashboard) to a single domain, named skyhigh.cloud to mitigate the ability of websites to misuse the cross-site tracking. Implementing this change will seamlessly enhance the user experience with the product on the Chrome/Edge browser.
After unifying to a single domain, when you use the Skyhigh console, you will be directed to the domains under skyhigh.cloud instead of myshn.net or myshn.eu. Now, all the components in the Skyhigh console work under a single domain, the skyhigh.cloud.
Use the updated domains to login to your product. The updated domains are as follows:
- www.myshn.net has been updated to www.dashboard-us.ui.skyhigh.cloud
- www.myshn.eu has been updated to www.dashboard-eu.ui.skyhigh.cloud
Impact of Domain Unification on Existing Users
Skyhigh Security operations will remain unchanged for the existing users, except for the following two workflows which will require additional actions as listed below.
Enable New CSP API Access in Skyhigh CASB via Custom OAuth Mode
NOTE: The existing integrated CSP APIs will continue to function as expected. You do not need to take any further action.
You must use the updated domains when enabling new CSP API access in Skyhigh CASB via Custom OAuth mode. The following links redirect you to the topics that have the updated domain URLs:
- Skyhigh CASB for Office 365
- Skyhigh CASB for Slack Non-Enterprise
- Skyhigh CASB for Workday
- Skyhigh CASB for Microsoft Teams
- Skyhigh CASB for Zoom
- Skyhigh CASB for Microsoft Dynamics 365
- Skyhigh CASB for ServiceNow
- Skyhigh CASB for Jive
- CASB Connect for Miro
- CASB Connect for Mural
- CASB Connect for Procore
- CASB Connect for Egnyte
- CASB Connect for OneLogin
End User Remediation
If you have configured the End User Remediation with the older domain URLs, you must reconfigure the SAML and SSO with the new domain URLs to reflect the updated single sign-on URL.
NOTE: If you are unable to reconfigure SAML by the scheduled date (October 19, 2024), you will not be able to access the dashboard using the notifications with new domain URLs that are received after the scheduled date. You must reconfigure SAML to process the notifications with new domain URLs.