Netskope Integration for SaaS Discovery

Set up an integration with Netskope to streamline the discovery of your SaaS applications.

Overview

Netskope delivers real-time visibility into data and provides robust threat protection when accessing cloud services, websites, and private applications. It's an essential tool for ensuring secure and safe digital operations.

Integration Details

Integration CategoriesAuthentication MechanismAPI Endpoints Used
Cloud Access Security Brokers (CASB)REST API - OAuth For API authentication: N/A

For SaaS discovery: /api/v2/events/data/application

Implementation Details

SAP LeanIX performs SaaS discovery from Netskope through its API, which allows organizations to monitor and analyze user activity within cloud applications based on traffic and logs. The API filters out events that lack an associated application value, ensuring the data's relevance and integrity. Application events are specifically triggered by user actions within the SaaS applications, offering insights into how users interact with these services.

To efficiently use the API and avoid disruptions, we adhere to the rate limits detailed in the API documentation. For more information, see Netskope API V2 Data Export Rate Limits. For more detailed rate limit information, including global limits, you can access the settings section of the Netskope API portal.

Initially, the integration pulls application event data from Netscope for the past 15 days, and thereafter on a daily basis. You can cross-check the discovered services in the Netskope Admin Console by checking App Usage Summary under Reports. However, it is difficult to cross-check the exact report as the time range in Netscope varies.

Discovery Capabilities

Available capabilitiesEntity descriptionNetskope resource
SaaS DiscoverySaaS discovery is the process of automatically identifying applications.Events

Set up Netskope

Create new API token in Netskope

  1. Log to Netskope with Admin account

  2. Go to Settings > Tools > REST API v2 and click New token

  3. A new token creation modal opens.

    1. Enter a name for the token.

    2. Select expiration time to your liking/requirements, longer adds convenience, shorter adds security, but once the token expires it will need to be updated manually.

    3. Add /api/v2/events/data/application scope/endpoint.

    4. Click Save.

  4. Click Copy token and save the API token for later use. Please note that once this modal is closed, the token cannot be accessed again. If necessary, it will need to be regenerated.

Integrate Netskope in SAP LeanIX

  1. Proceed to SAP LeanIX and input the credentials you have generated on the Netskope Admin Portal.

  2. Click Finish and wait for the connection to be established.