Your IT organization is migrating its user directory services from Microsoft Active Directory to a cloud- based Identity Provider (IdP) solution…

SCIM (System for Cross-domain Identity Management) is the industry-standard protocol for automating user provisioning between cloud services. When migrating to a cloud-based Identity Provider (IdP) like Azure AD, SCIM is the appropriate and recommended method to provision and synchronize users and groups into the Netskope platform. This allows for automated, real-time updates to user identities and group memberships directly from Azure AD, ensuring that Netskope policies are applied based on the most current directory information. This approach replaces the need for on-premises tools like the Directory Importer, which is designed for Active Directory.

A. Directory Importer: This is a legacy tool designed to pull user and group information from an on-premises Microsoft Active Directory, not a cloud-based IdP like Azure AD.

B. Microsoft GPO: Group Policy Objects (GPOs) are used for deploying software (like the Netskope Client) and enforcing configuration settings within an Active Directory domain, not for provisioning user identities into a cloud service.

D. Manual Import: While possible via CSV upload, this method is not an automated or scalable solution for a dynamic cloud environment and does not provide the continuous synchronization required for an enterprise IdP.

1. Netskope Official Documentation

"Configure Netskope SCIM to Provision Users and Groups from Azure AD": This guide explicitly details the procedure for integrating Azure AD with Netskope for user provisioning. It states

"This document provides instructions on how to configure Netskope and Azure AD for SCIM (System for Cross-domain Identity Management). SCIM is used to provision users and groups to the Netskope cloud security platform." (Accessed via Netskope Support Portal

Document ID: DOC-5578).

2. Netskope Official Documentation

"User Provisioning": This overview document contrasts the different methods. In the section on SCIM

it highlights its use for cloud IdPs: "SCIM is an open standard for automating user provisioning... Netskope supports SCIM-based user provisioning from Identity Providers (IdPs) like Azure AD

Okta..." In contrast

the section on the Directory Importer specifies its use case: "The Netskope Directory Importer is a lightweight Java application that runs on a Windows machine in your environment. It reads user and group information from your Active Directory..." (Accessed via Netskope Support Portal

Document ID: DOC-3411).