This article covers the following topics:

• Signing In to the ZPA Admin Portal

  After your organization is provisioned with a ZPA cloud, you are assigned to a cloud name. You can access the ZPA Admin Portal via your assigned ZPA cloud.

  If your sign-in attempt fails more than three times, your account is locked out for 30 minutes. However, another ZPA admin can reset your password during this time.

  If your account is configured without single sign-on (SSO):

  1. Enter your Admin ID.

  If Force Password Reset was enabled for your account, you must update your password before logging in.

  2. Click Next.

  See image.

  

  Close

  3. Select Remember Me if you want the ZPA Admin Portal to remember your username the next time you log in.
  4. (Optional) Click Two Factor Authentication and enter a passcode. To learn more, see Configuring ZPA Administrators.
  5. (Optional) Select a language from the drop-down menu. The languages supported for ZPA are English, Spanish, French, German, Chinese, and Japanese. The default language selected is English.

  Newer features might not be shown in other languages initially. The default language for all current features is English.

  6. Click Sign In.

  See image.

  

  Close

  If your account is configured to use single sign-on (SSO):

  1. Enter your Admin ID.
  2. Click Next.

  See image.

  

  Close

  3. You are redirected to your IdP's login page. Log in with your credentials.

  If you logged in successfully, you are redirected back to the ZPA Admin Portal. To learn more, see Configuring Authentication Settings and Configuring an IdP for Single Sign-On.

  If your IdP is configured with the ZPA Admin Portal as a tile in the IdP-initiated SSO, log out of your ZPA Admin Portal. This will redirect you back to the ZPA login screen. Review the previous step to learn more about selecting a language for your ZPA Admin Portal.

  Newer features might not be shown in other languages initially. The default language for all current features is English.

  If you're subscribed to ZIdentity:

  1. Enter your Admin ID.
  2. Click Next.

  See image.

  

  Close

  3. You are redirected to log in to the ZIdentity Landing Page.

     Based on your organization's authentication preference, sign in to the ZIdentity Landing Page using one of the following methods:

     • Password

       1. Enter your Login ID. If you want the service to remember your login ID the next time you log in, select Remember Me.

          See image.

          

          Close

       2. Click Next.

       3. Enter your Password and click Sign In.

          See image.

          Close

       4. Based on your organization's MFA policy, two-factor authentication (2FA) is required. Complete your 2FA to access the ZIdentity Landing Page.

          If you forget your password or want to configure a different secondary authenticator, click Having trouble signing in? > Reset Password or Reset Second Factor, and a reset email is sent to your email ID. The reset link within the email expires after 5 minutes. To learn more, see Resetting the Login Credentials or MFA.

       Close
     • Email One-Time Password (OTP)

       If your account is configured with MFA, you can sign in using an email OTP as well:

       1. Enter your Login ID. If you want the service to remember your login ID the next time you log in, select Remember Me.

       2. Click Next and then, click Other Sign-in Options.

          See image.

          

          Close

          The Sign-in Options window appears.

       3. In the Sign-in Options window, click Email OTP.

          See image.

          

          Close

       4. Enter the OTP sent to your email address and click Sign In. The OTP expires after two minutes. If the OTP expires or you don't receive an OTP, click Resend to receive another OTP after 60 seconds.

          See image.

          

          Close

       Close
     • Security Key or Biometric
       1. Enter your Login ID. If you want the service to remember your login ID the next time you log in, select Remember Me.

       2. Select Sign-in using Security Key or Biometric.

          See image.

          

          Close

       3. Click Next.

       4. Based on your configuration, enter your security key or complete the biometric to access the ZIdentity Landing Page.

          If you want to configure with a different security key or biometric, click Having trouble signing in? > Reset Security Key or Biometric, and a reset email is sent to your email ID. The reset link within the email expires after 5 minutes. To learn more, see Resetting the Login Credentials or MFA.

       Close

     Close

  See image.

  

  Close

  You are redirected to the ZPA Admin Portal.

  Close
• Accepting the End User Subscription Agreement (EUSA)

  When you log in for the first time, the ZPA Admin Portal displays a EUSA. Click Accept to accept the EUSA. If you click Cancel, the ZPA Admin Portal logs you out automatically.

  The full EUSA can be read at https://www.zscaler.com/legal/end-user-subscription-agreement.

  Close
• Navigating Within the ZPA Admin Portal

  The ZPA Admin Portal has the following items in the left-side navigation:

  • Search

    Click the Search icon to search for sections within the ZPA Admin Portal. To learn more, see Searching in the ZPA Admin Portal.

    Close
  • Dashboard

    Click Dashboard to view the different dashboards for the ZPA Admin Portal. To learn more about the dashboards, see the following articles:

    • Applications
    • Users
    • Health
    • App Connectors
    • Private Service Edges
    • AppProtection

    Close
  • Insights

    Click Insights to view the insight options for the ZPA Admin Portal. To learn more about the deeper insights into ZPA, see MITRE ATT&CK.

    Close
  • Analytics

    Click Analytics to view past and real-time data for users, applications, ZPA App Connector, ZPA Private Service Edges, events, and AppProtection for a specified date range. To learn more about diagnostics, see the following articles:

    • About User Activity Diagnostics
    • Viewing User Status Diagnostics
    • About App Connector Status Diagnostics
    • About Private Service Edge Status Diagnostics
    • About Events Diagnostics
    • About AppProtection Diagnostics

    Click Support Information to create sessions that execute commands on App Connector and ZPA Private Service Edge. You can then filter and view the outputs of these sessions to assist in troubleshooting. To learn more, see About Support Information.

    Click Live Logs to view real-time events and log data for user activity, user status, application activity, and App Connector status. To learn more, see About Live Logs.

    Close
  • Authentication

    To learn more about each component, see the following:

    • User Authentication >
      • IdP Configuration
      • Settings
      • SAML Attributes
      • SCIM Attributes
      • SCIM Users
      • SCIM Groups
      • SCIM Sync Logs
    • Device Authentication >
      • Machine Groups
      • Machine Provisioning Keys

    Close
  • Resource Management

    To learn more about each component, see the following:

    • Application Segment >
      • Application Segments
      • Segment Groups
      • Browser Access
      • AppProtection
      • Privileged Remote Access
    • User Portal >
      • User Portals
      • Portal Links
      • User Portal AUP
      • Zscaler Client Connector Download Links
    • Privileged Remote Access >
      • Privileged Portals
      • Privileged Consoles
      • Privileged Approvals

    Close
  • Policy

    To learn more about each component, see the following:

    • Access Policy
    • Timeout Policy
    • Client Forwarding Policy
    • Isolation Policy
    • AppProtection Policy
    • Privileged Policy

    Close
  • Configuration & Control

    To learn more about each component, see the following:

    • Administration Control >
      • Administrators
      • Roles
      • Audit Logs
      • Company
      • Disaster Recovery
      • Partner Information
      • Client Sessions
      • Executive Insights App Access
    • Public API >
      • API Keys
    • Private Infrastructure >
      • App Connector Management >
        • App Connectors
        • App Connector Groups
        • App Connector Provisioning Keys
        • Servers
        • Server Groups
      • Private Service Edge Management >
        • Private Service Edges
        • Private Service Edge Groups
        • Private Service Edge Provisioning Keys
      • Log Streaming Service >
        • Log Receivers
        • App Connector Group
      • Cloud Connector Management >
        • Cloud Connectors
        • Cloud Connector Groups
    • Certificate Management >
      • Enrollment Certificates
      • Certificates
    • AppProtection >
      • AppProtection Controls
      • AppProtection Profiles
    • Notifications >
      • Notifications

    Close
  • Zscaler Client Connector Portal

    Click the Zscaler Client Connector Portal icon to be redirected to the Zscaler Client Connector Portal. In this portal, you can configure settings for the Zscaler Client Connector as well as view information about users and devices that are enrolled with it.

    For a ZPA tenant associated with multiple Zscaler Client Connector tenant accounts on separate clouds, you can select the Zscaler Client Connector cloud prior to connecting to the Zscaler Client Connector Portal.

    Close
  • Account

    From this menu, you can do the following:

    • Username: View your user name for the ZPA Admin Portal account.
    • Customer ID: View your customer ID for the ZPA Admin Portal account.
    • Language: Set the language for your ZPA Admin Portal account. The language can also be set when you log in.
    • Time Zone: Set the time zone for your ZPA Admin Portal account. The default time zone is your current one or the most recently saved one.
    • Password: Set the password for your ZPA Admin Portal account.

    

    Close
  • Tools

    From this menu, you can do the following:

    • Remote Assistance: If you need Zscaler Support engineers to securely and remotely log in to your ZPA Admin Portal for troubleshooting purposes, you can update this setting. To learn more, see About Remote Assistance.
    • Zscaler Help Portal: This redirects you to the Help Portal where you can find documentation that provides background information as well as configuration guides about ZPA and other Zscaler products.
    • Submit a Ticket: This redirects you to the Zscaler Support Portal where you can submit help request tickets to Zscaler Support.

    Close
  • What's New

    Click What's New to request a free trial of features that can be added to your ZPA Admin Portal experience on the Add-On Licenses tab. You can also view newer features on the Recently Released tab. If you don't want to view these offers, click Don't show me again.

    

    Close
  • Sign Out

    Click the Sign Out icon to sign out of the ZPA Admin Portal when you are done. If you are inactive for 15 minutes, the portal automatically signs you out.

    Close

  

  Close

When you are ready to begin configuring ZPA, see the Step-by-Step Configuration Guide for ZPA.