zscaler-identity

Manage Zscaler users, groups, departments, and identity provider configurations via OneAPI.

650|182|Updated Feb 19, 2026
One-click install
npx skills add https://github.com/automateyournetwork/netclaw --skill zscaler-identity
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: zscaler-identity
Source: https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/zscaler-identity
Command: npx skills add https://github.com/automateyournetwork/netclaw --skill zscaler-identity

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Managing Zscaler identity data—users, groups, departments, and IdP configurations—normally requires navigating the ZIdentity admin portal or writing custom API calls. This Skill exposes those operations as simple natural-language queries against the Zscaler OneAPI.

Core Features & Use Cases

  • User and Group Management: List and inspect users, groups, departments, and SCIM-provisioned groups across your Zscaler tenant.
  • IdP and SAML Visibility: Review identity provider configurations and SAML attribute mappings to audit authentication setups.
  • Admin Role Auditing: List admin users and admin roles to verify who holds privileged access, such as super admin assignments.
  • Use Case: Ask which groups are synced from Azure AD and which admin users hold the super admin role to complete an access review without logging into the Zscaler console.

Quick Start

Ask the agent to list all users in the engineering department and show which IdP configurations are currently active.

Frequently Asked Questions about zscaler-identity

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I list users and groups in Zscaler?

Use the list_users and list_groups tools to retrieve all users and groups from your Zscaler tenant, then get_user or get_group for details on a specific entry. Queries can be phrased naturally, such as listing users in a specific department.

How to audit Zscaler admin users and roles?

Use list_admin_users and list_admin_roles to enumerate administrative accounts and their assigned roles. This supports access reviews, such as identifying which admins hold the super admin role.

What credentials does the Zscaler identity integration require?

It requires ZSCALER_CLIENT_ID, ZSCALER_CLIENT_SECRET, ZSCALER_CUSTOMER_ID, and ZSCALER_VANITY_DOMAIN environment variables for OneAPI authentication. The ZSCALER_MCP_SERVICES variable must also include zidentity.

Can I view SAML and SCIM configurations in Zscaler?

Yes, list_saml_attributes shows SAML attribute mappings and list_scim_groups shows SCIM-provisioned groups. You can also inspect full identity provider configurations with list_idp_configs and get_idp_config.

Why is the Zscaler identity skill not returning data?

The most common cause is missing or incorrect OneAPI environment variables, or the zidentity service not being included in ZSCALER_MCP_SERVICES. Verify all four credential variables are set and the service is enabled.