Configuring provisioning for ZScaler Private Access

Use this task to provision users from IBM® Security Verify to a ZScaler Private Access application.

Before you begin

You need a ZScaler Private Access account with administrator access.

About this task

Provisioning provides the following features.
Create new users
New users that are created through Verify are also created in the ZScaler Private Access application.
Delete users
Deactivating the user or disabling the user's access to the application through Verify deletes the user in the ZScaler Private Access application.
Modify user profile
Updates made to the user's profile through Verify are pushed to the ZScaler Private Access application.
User suspend and restore
Suspending a user through Verify deactivates the user and restoring the user through Verify activates the user in the ZScaler Private Access application.

Procedure

  1. Log in as an admin user to your ZScaler Private Access account by using the following URL:
    https://admin.zscalerbetprivate.zscaler.com
  2. Navigate to Administration > IdP Configuration.
  3. Select the identity provider that you want to modify and click the edit icon.
  4. In the Edit Idp Configuration window, select Enabled for SCIM Sync.
  5. Copy the SCIM Service Provider Endpoint.
  6. Click Generate New Token to create a bearer token.
    The SCIM Service Provider Endpoint and token are needed to configure user provisioning in Verify.