Link from WSS Console to CASB Audit not working

Products

• Cloud Secure Web Gateway - Cloud SWG
• CASB Audit

Issue/Introduction

Error 'Invalid Tenant Identifier' is returned when clicking link to CASB from WSS Console.

From WSS Console, top right corner (drop down menu), select 'Cloud App Audit'  

The following error is returned, "Single Sign On Error, Invalid Tenant Identifier"

 

 

 

Cause

Customer tenant was using accounts that are generic and that are not bound to CloudSOC. 

The customer adds users to WSS portal and not to CASB Portal.

Since SSO requires a 1:1 username mapping between WSS and CASB portals and that has not happened this error occurs.

 

 

Resolution

The customer must have 1:1 mapping between CloudSOC and WSS portal for users.

If a user comes from WSS portal onto CloudSOC without this, they will get the error referenced here.