Skip to main content
Question

Browser Access clientless users

  • March 2, 2026
  • 0 replies
  • 3 views

Hi

is it mandatory to provision on the tenant the users that will only have access to Browser Access apps?

 

I mean, for third-party or contractors, that won’t install the Netskope Client and that only need access to browser access private apps, is needed to provision them via SCIM or manually?

I have checked that having the user associated on the IdP, the user authenticates when trying to access the public URL of the BA private app, but if the user is not provisioned on the Netskope tenant, get a 401 error after authenticating even if the RTP policy allows “all users”

The user only access the private app via BA after provisioning on the tenant. Is this correct? I wouldn’t like to provision all my contractors on the tenant

 

Regards