Secure Private Access (ZPA)
Accessing and Navigating the ZPA Admin Portal
This article covers the following topics:
- Signing In to the ZPA Admin Portal
After your organization is provisioned with a ZPA cloud, you are assigned to a cloud name. You can access the ZPA Admin Portal via your assigned ZPA cloud.
If your sign-in attempt fails more than three times, your account is locked out for 30 minutes. However, another ZPA admin can reset your password during this time.
If your account is configured without single sign-on (SSO):
- Enter your Admin ID.
If Force Password Reset was enabled for your account, you must update your password before logging in.
- Click Next.
- Select Remember Me if you want the ZPA Admin Portal to remember your username the next time you log in.
- (Optional) Click Two Factor Authentication and enter a passcode. To learn more, see Configuring ZPA Administrators.
- (Optional) Select a language from the drop-down menu. The languages supported for ZPA are English, Spanish, French, German, Chinese, and Japanese. The default language selected is English.
Newer features might not be shown in other languages initially. The default language for all current features is English.
- Click Sign In.
If your account is configured to use single sign-on (SSO):
- Enter your Admin ID.
- Click Next.
- You are redirected to your IdP's login page. Log in with your credentials.
If you logged in successfully, you are redirected back to the ZPA Admin Portal. To learn more, see Configuring Authentication Settings and Configuring an IdP for Single Sign-On.
If your IdP is configured with the ZPA Admin Portal as a tile in the IdP-initiated SSO, log out of your ZPA Admin Portal. This will redirect you back to the ZPA login screen. Review the previous step to learn more about selecting a language for your ZPA Admin Portal.
Newer features might not be shown in other languages initially. The default language for all current features is English.
If you're subscribed to ZIdentity:
- Enter your Admin ID.
- Click Next.
- You are redirected to log in to the ZIdentity Landing Page.Close
Based on your organization's authentication preference, sign in to the ZIdentity Landing Page using one of the following methods:
- Password
Enter your Login ID. If you want the service to remember your login ID the next time you log in, select Remember Me.
- Click Next.
Enter your Password and click Sign In.
Based on your organization's MFA policy, two-factor authentication (2FA) is required. Complete your 2FA to access the ZIdentity Landing Page.
If you forget your password or want to configure a different secondary authenticator, click Having trouble signing in? > Reset Password or Reset Second Factor, and a reset email is sent to your email ID. The reset link within the email expires after 5 minutes. To learn more, see Resetting the Login Credentials or MFA.
- Email One-Time Password (OTP)
If your account is configured with MFA, you can sign in using an email OTP as well:
- Enter your Login ID. If you want the service to remember your login ID the next time you log in, select Remember Me.
Click Next and then, click Other Sign-in Options.
The Sign-in Options window appears.
In the Sign-in Options window, click Email OTP.
Enter the OTP sent to your email address and click Sign In. The OTP expires after two minutes. If the OTP expires or you don't receive an OTP, click Resend to receive another OTP after 60 seconds.
- Security Key or Biometric
- Enter your Login ID. If you want the service to remember your login ID the next time you log in, select Remember Me.
Select Sign-in using Security Key or Biometric.
- Click Next.
Based on your configuration, enter your security key or complete the biometric to access the ZIdentity Landing Page.
If you want to configure with a different security key or biometric, click Having trouble signing in? > Reset Security Key or Biometric, and a reset email is sent to your email ID. The reset link within the email expires after 5 minutes. To learn more, see Resetting the Login Credentials or MFA.
- Password
You are redirected to the ZPA Admin Portal.
Close - Accepting the End User Subscription Agreement (EUSA)
When you log in for the first time, the ZPA Admin Portal displays a EUSA. Click Accept to accept the EUSA. If you click Cancel, the ZPA Admin Portal logs you out automatically.
The full EUSA can be read at https://www.zscaler.com/legal/end-user-subscription-agreement.
Close - Navigating Within the ZPA Admin Portal
When you are ready to begin configuring ZPA, see the Step-by-Step Configuration Guide for ZPA.