Install and configure Security Incident Response integration with Zscaler

task brazil Updated Sep 10, 2026 2 min read install-zscaler-integration-for-security-operations.md
Raw file servicenow.com

Install and configure the Security Incident Response integration with Zscaler internet Access product from the ServiceNow Store to start using the integration on your ServiceNow AI Platform instance.

Before you begin

Role required: sn_si.admin

Procedure

  1. Download the Security Incident Response integration with Zscaler product from the ServiceNow Store and install it.

  2. Navigate to Security Operations > Integrations > Integration Configurations.

  3. Search for the Security Incident Response integration with Zscaler tile and select Configure > Create new configuration.

  4. On the form, fill in the fields.

Field

Description

Server Name

Zscaler server name. For example, ZSserver.

Active

Indicator that the profile is active.

Order

Flow priority. The value for this field indicates the order of the workflows when two or more profiles share triggering conditions.

The flow with the lowest number has the highest priority.

To set the order of operation, enter a value. For example, 100, 200, 300, 400.

The default is 100.

Zscaler API URL

Base URL that hosts the Zscaler API. For example, [https://example.zscalerbeta.net](https://example.zscalerbeta.net)

Authentication Type

Method that ServiceNow uses to authenticate the Zscaler API.- Basic Auth: Authenticates with the Zscaler Internet Access admin user name, password, and API key. This option is the default.

  • OAuth 2.0: Authenticates with an OAuth 2.0 Client ID, Client Secret, and Vanity Domain from Zscaler ZIdentity.

Vanity Domain (Token Domain)

Organization's ZIdentity sign-in hostname, consisting of your vanity name and the Zscaler login domain. For example, acme + zslogin.net = acme.zslogin.net.Required when Authentication Type is OAuth 2.0.

Client ID

OAuth 2.0 client ID that ServiceNow uses for Zscaler authentication.Required when Authentication Type is OAuth 2.0.

Client Secret

OAuth 2.0 client secret key for Zscaler authentication.Required when Authentication Type is OAuth 2.0.

User Name

User name for the Zscaler Internet Access admin account.Required when Authentication Type is Basic Auth.

Password

Password for the Zscaler Internet Access admin account.Required when Authentication Type is Basic Auth.

API Key

API key that you obtained from the Zscaler Internet Access administration portal.Required when Authentication Type is Basic Auth.

Note: The user must have sn_si.admin role to setup the integration.

**Note:** Configurations that you created before OAuth 2.0 support was available using Basic Auth. To switch authentication methods, change the **Authentication Type**, fill in the fields for the new method, and select **Validate and Update**.
  1. Select Validate and Update.

    The instance checks that the fields for the selected authentication type are filled in and then validates the connection. For OAuth 2.0, the instance requests an access token from https://{vanity_domain}/oauth2/v1/token.

Result

After you validate and save this configuration, return to the Zscaler Configurations page.

Search documentation
Search document titles and file paths on the brazil branch