Configuring Active Directory SSO

Important Information

• Secure Internet Gateway (SIG) Single Sign On (SSO) is only available at the customer level
• SIG must be offered to a customer before the links are shown on the customer Dashboard
• The SSO Certificate name is "sigsso.cer"
• SIG SSO is only set up for the default administrator created for each Zscaler account. If you create additional administrator users for auditing purposes in the Zscaler console, the SSO feature will not be attached to those users. You will always be logged in as the default administrator when using the SSO from CloudCare

Configuring AD SSO

1. After SIG has been enabled and set up, select Download Certificate from the Customer Dashboard

2. Log into Zscaler using appropriate credentials
3. On the sidebar, select Administration ▸ Administrator Management

4. Select the Administrator Management tab, then click Upload beneath IdP SAML Certificate

5. Upload the certificate you downloaded from the CloudCare portal.

The "Sign in to SIG Account" link on the Customer Dashboard should now work.