This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Cloud Identity Engine
Palo Alto Networks' Cloud Identity Engine is a first-of-its-kind cloud-native identity synchronization and authentication service.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Cloud Identity Engine

Cloud Identity Engine is the industry's first cloud-native identity synchronization and authentication service providing a single, secure user identity across Palo Alto's on-prem and cloud product lines.
Cloud Identity Engine simplifies Zero Trust with easy-to-deploy user identity and access across all locations.

Discussions

Need answers? Register or Sign-in to Engage, Share, and Learn.
Author Topic Views Replies
Carracido
Carracido
02-06-2025

do CIE mappings timeout?

Dear community! Does someone know if the user-group mappings learned from the CIE timeout if for instance the cloud becomes unavailable? If there´... — Read more

posted in Cloud Identity Engine Discussions

261 1
JayGolf
JayGolf
01-15-2025

Welcome to the Cloud Identity Engine Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be ... — Read more

posted in Cloud Identity Engine Discussions

263 0
smelias
smelias
12-18-2024

Cloud Identity "disclaimer" on enabling service is not acceptable !!!

Why is Palo Alto stating the following disclaimer when enabling Cloud Identity on our Cloud Instance? This is not acceptable due to privacy and com... — Read more

posted in Cloud Identity Engine Discussions

358 0
JoyLiu0331
JoyLiu0331
11-12-2024

Is any possible to customize CIE login page？

Hello Everyone, We set a CIE authentication profile for multiple Azure AD SAML authentication, and it works normally. We would like to customize l... — Read more

posted in Cloud Identity Engine Discussions

1106 1
Jon678
Jon678
08-21-2024

trigger google directory full sync by API call or webhook?

Is there any way to trigger a full sync of a Google directory in CIE without a web browser? My user deprovisioning is mostly automated (scripted) ex... — Read more

posted in Cloud Identity Engine Discussions

1035 2
Join now

Cloud Identity Engine Blogs

Always Innovating in NetSec Series: PAN-OS, IoT, Cloud NGFW, Adv Wildfire and More

08-05-2024 — Welcome to Always Innovating Network Security - June/July 2024 edition. This time we have a very broad array of innovations to share, from PAN-OS innovations, to Cloud Identity Engine, IoT risk vulnerability prioritization, to Cloud NGFW and Advan... — Read more

Labels: Advanced WildFire Cloud Identity Engine IoT Security Network Security Next-Generation Firewall PAN-OS
2088 by in Community Blogs

Always Innovating in NetSec Series: Innovations Beyond Precision AI

05-31-2024 — On May 7th, Palo Alto Networks announced New Security Solutions Infused with Precision™ AI at the Unveiling the Future of AI & Cybersecurity event in San Francisco. This month, we also announced new innovations in Medical IoT Security, Cloud Ident... — Read more

Labels: Always Innovating Always Innovating in NetSec Cloud Delivered Security Services Cloud Identity Engine IoT Security NetSec Network Security Next Generation Firewalls PAN-OS
2094 by in Community Blogs

Always Innovating in NetSec Series: Data Security for Enterprises

01-17-2024 — Welcome to this edition of “Always Innovating in Network Security". This month, we dive deep into the innovations in Data Security through our Enterprise DLP solution. Safeguarding data stands at the forefront of Network Security, and we continue ... — Read more

Labels: Advanced WildFire Always Innovating Cloud Identity Engine Data Security Panorama Prisma SD-WAN
3020 by in Community Blogs

Simplify User Access Without Upgrading Your Infrastructure With User Context

01-10-2023 — Palo Alto Networks identity team created User Context: a new tool to simplify and unify distribution of user-ID and other user mappings across all infrastructure for centralized visibility. — Read more

Labels: Cloud Identity Engine PAN-OS User Context User-ID
3890 1 by in Community Blogs

Supercharge Your Identity System With Multi-Authentication in Cloud Identity Engine

04-20-2022 — With Palo Alto Networks’ Cloud Identity Engine, customers can harness multi-authentication to perform intelligent group-based authentication. With Palo Alto Networks’ Cloud Identity Engine, customers can harness multi-authentication to perform i... — Read more

Labels: Cloud Identity Engine multi-factor authentication ngfw Zero Trust
7801 8 by in Community Blogs

View All

Cloud Identity Engine Articles

Cloud Identity Engine: Support for Entra B2B External User Authentication

12-03-2024 — Executive Summary Palo Alto Networks’ Cloud Identity Engine now supports Entra B2B external user authentication, unlocking secure access for partners, vendors, and external collaborators. This enhancement allows organizations to apply Zero Trust policies across both internal and external users,... — Read more

Labels: Cloud Identity Engine User-ID
1077 published by in Cloud Identity Engine Articles
01-03-2025 edited by

OpenID Connect Support in Cloud Identity Engine

08-13-2024 — The Cloud Identity Engine (CIE) is expanding its capabilities by introducing a new method for connecting to authentication services via OpenID Connect (OIDC). This enhancement provides an additiona... — Read more

Labels: Cloud Identity Cloud Identity Engine OS versions 10.1 and above PAN-OS Prisma Access User-ID
2358 1 published by in Cloud Identity Engine Articles
01-03-2025 edited by

Attribute Based Dynamic User Groups

07-19-2024 — After synchronizing your directory with Cloud Identity Engine (CIE), you can create user groups in the CIE console. Use attribute-value pairs with operators like "contains," "starts with," and exac... — Read more

Labels: Cloud Identity Cloud Identity Engine OS versions 10.1 and above PAN-OS prisma access User-ID
1515 published by in Cloud Identity Engine Articles
01-03-2025 edited by

Cloud Identity Engine Introduces On Demand Group Assignments

07-16-2024 — After synchronizing your directory with Cloud Identity Engine (CIE) you are now able to create groups of users within the CIE console. Users can be added to a group indefinitely or for specific tim... — Read more

Labels: Cloud Identity OS versions 10.1 and above PAN-OS prisma access User-ID
1108 published by in Cloud Identity Engine Articles
01-03-2025 edited by

Cloud Identity Engine Introduces Group Filtering When Collecting Groups from Entra ID

06-28-2024 — Cloud Identity Engine (CIE) now provides customers with the ability to select the groups they would like to synchronize with CIE from Entra ID (formerly Entra ID) by using filters. — Read more

Labels: Cloud Identity OS versions 10.1 and above PAN-OS prisma access User-ID
2747 2 published by in Cloud Identity Engine Articles
01-03-2025 edited by

View All

Cloud Identity Engine Resources

Cloud Identity Engine Videos

Digital Learning Courses

Visit Palo Alto Networks' learning platform, Beacon, for free technical knowledge and educational resources related to all of our products.

Please note: You need to be logged into SSO in order to view this content.

LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2025 - Palo Alto Networks