Cloud Identity Engine

Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Palo Alto Networks' Cloud Identity Engine is a first-of-its-kind cloud-native identity synchronization and authentication service.

Cloud Identity Engine is the industry's first cloud-native identity synchronization and authentication service providing a single, secure user identity across Palo Alto's on-prem and cloud product lines.
Cloud Identity Engine simplifies Zero Trust with easy-to-deploy user identity and access across all locations.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author	Topic	Views	Replies
Jon678 08-21-2024	trigger google directory full sync by API call or webhook? Is there any way to trigger a full sync of a Google directory in CIE without a web browser? My user deprovisioning is mostly automated (scripted) ex... — Read more posted in Cloud Identity Engine Discussions	318	0
D.Longpre 08-19-2024	Okta Directory - Collect Enterprise Applications Hello guys, What are the use-cases of "Collect Enterprise Applications" from Okta. How, where, I can use those collected informations ?!! posted in Cloud Identity Engine Discussions	263	0
djohnson229 07-02-2024	Redistribute group mappings? Hi all, my CIE has all group information populated and I have Panorama and 3 firewalls. Can I integrate Panorama with CIE to pull down the group mappi... — Read more posted in Cloud Identity Engine Discussions	683	1
djohnson229 07-01-2024	CIE and Panorama in different CSPs? Hey there, scenario is CIE is in one Palo CSP and Panorama is in a different Palo CSP (the reason why is they are managed by different companies). Sho... — Read more posted in Cloud Identity Engine Discussions	930	3
JustinWoodman 06-17-2024	CIE Azure AD/Entra AD guest upn match Global Protect login user I am trying to see how I can get the Cloud Identity Engine to match Global Protect SSO (Also from Azure AD/Entra) upn for the user. I have a sister c... — Read more posted in Cloud Identity Engine Discussions	747	0

Cloud Identity Engine Blogs

Always Innovating in NetSec Series: PAN-OS, IoT, Cloud NGFW, Adv Wildfire and More

08-05-2024 — Welcome to Always Innovating Network Security - June/July 2024 edition. This time we have a very broad array of innovations to share, from PAN-OS innovations, to Cloud Identity Engine, IoT risk vulnerability prioritization, to Cloud NGFW and Advan... — Read more

Labels: Advanced WildFire Cloud Identity Engine IoT Security Network Security Next-Generation Firewall PAN-OS
1465 by GBalamitran in Community Blogs

Always Innovating in NetSec Series: Innovations Beyond Precision AI

05-31-2024 — On May 7th, Palo Alto Networks announced New Security Solutions Infused with Precision™ AI at the Unveiling the Future of AI & Cybersecurity event in San Francisco. This month, we also announced new innovations in Medical IoT Security, Cloud Ident... — Read more

Labels: Always Innovating Always Innovating in NetSec Cloud Delivered Security Services Cloud Identity Engine IoT Security NetSec Network Security Next Generation Firewalls PAN-OS
1576 by GBalamitran in Community Blogs

Always Innovating in NetSec Series: Data Security for Enterprises

01-17-2024 — Welcome to this edition of “Always Innovating in Network Security". This month, we dive deep into the innovations in Data Security through our Enterprise DLP solution. Safeguarding data stands at the forefront of Network Security, and we continue ... — Read more

Labels: Advanced WildFire Always Innovating Cloud Identity Engine Data Security Panorama Prisma SD-WAN
2382 by GBalamitran in Community Blogs

Simplify User Access Without Upgrading Your Infrastructure With User Context

01-10-2023 — Palo Alto Networks identity team created User Context: a new tool to simplify and unify distribution of user-ID and other user mappings across all infrastructure for centralized visibility. — Read more

Labels: Cloud Identity Engine PAN-OS User Context User-ID
3376 1 by suppal in Community Blogs

Supercharge Your Identity System With Multi-Authentication in Cloud Identity Engine

04-20-2022 — With Palo Alto Networks’ Cloud Identity Engine, customers can harness multi-authentication to perform intelligent group-based authentication. With Palo Alto Networks’ Cloud Identity Engine, customers can harness multi-authentication to perform i... — Read more

Labels: Cloud Identity Engine multi-factor authentication NGFW Zero Trust
6661 7 by avishen in Community Blogs

Cloud Identity Engine Articles

OpenID Connect Support in Cloud Identity Engine

08-13-2024 — The Cloud Identity Engine (CIE) is expanding its capabilities by introducing a new method for connecting to authentication services via OpenID Connect (OIDC). This enhancement provides an additiona... — Read more

Labels: Cloud Identity Cloud Identity Engine OS versions 10.1 and above PAN-OS Prisma Access
1464 1 published by jtmclaughlin in Cloud Identity Engine Articles
08-21-2024 edited by emgarcia

Attribute Based Dynamic User Groups

07-19-2024 — After synchronizing your directory with Cloud Identity Engine (CIE), you can create user groups in the CIE console. Use attribute-value pairs with operators like "contains," "starts with," and exac... — Read more

Labels: Cloud Identity Cloud Identity Engine OS versions 10.1 and above PAN-OS Prisma Access
862 published by jtmclaughlin in Cloud Identity Engine Articles
07-19-2024 edited by jtmclaughlin

Cloud Identity Engine Introduces On Demand Group Assignments

07-16-2024 — After synchronizing your directory with Cloud Identity Engine (CIE) you are now able to create groups of users within the CIE console. Users can be added to a group indefinitely or for specific tim... — Read more

Labels: Cloud Identity OS versions 10.1 and above PAN-OS Prisma Access
701 published by jtmclaughlin in Cloud Identity Engine Articles
07-16-2024 edited by emgarcia

Cloud Identity Engine Introduces Group Filtering When Collecting Groups from Entra ID

06-28-2024 — Cloud Identity Engine (CIE) now provides customers with the ability to select the groups they would like to synchronize with CIE from Entra ID (formerly Entra ID) by using filters. — Read more

Labels: Cloud Identity OS versions 10.1 and above PAN-OS Prisma Access
1382 1 published by jtmclaughlin in Cloud Identity Engine Articles
06-28-2024 edited by emgarcia

Prepare to Deploy the Cloud Identity Engine

06-04-2021 — The Cloud Identity Engine consists of two components: Directory Sync, which provides user information, and the Cloud Authentication Service, which authenticates users. For a more comprehensive identity solution, Palo Alto Networks recommends using both components, but you can configure the compon... — Read more

Labels: Cloud Identity Engine
3672 published by blevin in Cloud Identity Engine Articles
06-04-2021 edited by blevin