Configure Cloud Connector to Consolidate User Identities

Last updated
Save as PDF

Configure Cloud Connector to consolidate user identities across the Skyhigh SSE platform, allowing SOC administrators to correlate activities performed by the same user across Sanctioned, Shadow, and Web services.

To identify unique users with multiple identities, integrate Skyhigh Cloud Connector with your organization's Active Directory, LDAP, or CSV sources. This creates a single User UID for each user across all Skyhigh SSE products. These unique users are then displayed on the Users page. This capability is referred to as User Unification. For more details about the User Unification feature, see Getting Started with User Unification.

Limited Availability: To access User Unification, contact Skyhigh Support.

NOTES:

If you are an existing Cloud Connector user, you must upgrade to version 6.8.1 or above and reconfigure the AD configuration. To reconfigure the AD configuration, contact Skyhigh Support.
From version 6.9.2 or above, you can configure Custom Attributes through Active Directory, LDAP, and CSV.
You can configure User Unification across multiple Cloud Connectors:
- When you configure an additional Cloud Connector, verify that all Shadow attributes match the existing attributes. Attribute fields can remain empty, but they must not be different.
- Once you configure an additional Cloud Connector, the custom attributes are automatically populated based on the previous configuration.
Before configuring the Cloud Connector, review the Prerequisites section to ensure all requirements are met.

Prerequisites

Before configuring the Cloud Connector with the User Unification feature, make sure that the following prerequisites are met:

Download and install Cloud Connector version 6.9.2 or above and configure Custom Attributes using Active Directory (AD) service, LDAP, or CSV. To download the latest version of the Cloud Connector, see Download Skyhigh Cloud Connector. Before installing the Cloud Connector, make sure all prerequisites have been met. For details, see Skyhigh Cloud Connector Prerequisites.
To install and configure Cloud Connector, you must have the Skyhigh Cloud Connector user role. For details, see About User Roles and Access Levels.
To enable the feature and configure settings, access the Skyhigh CASB user interface from the same network where your Cloud Connector is installed; otherwise, you will receive an error message.

You can configure the Cloud Connector to ingest user data from the following data sources:

To know ingestion details, see User Ingestion Details on Directory Service.