About Enabling Active Directory Lookups for User Groups
User group information is usually provided to Secure Web Gateway (SWG) by Skyhigh Client Proxy (SCP), which retrieves this information from the operating system. This information is required to enable the appropriate web policy for a user group when you are running SWG.
When the device you are using to work with SWG has not been connected to your corporate network for some time, user group information is lost to SCP. It can still be retrieved through a user group lookup on a synchronized Active Directory (AD) server based on your user name.
For this lookup, you must have been authenticated by SCP and also have Skyhigh Cloud Connector installed and configured. For more information, see Configure Active Directory Lookups for User Groups.