IMPORTANT: As per an earlier announcement, report templates are no longer available for download. However, if you have a report in use, we will continue to provide support until the end of September 2025. If you have any questions, please contact Flexera Support. 

Flexera One’s SaaS Management now offers a SaaS integration with Zscaler CASB. This integration provides full protection for SaaS applications by helping monitor and protect your organization’s cloud app data in terms of: 

• Shadow IT discovery 
• Visibility into cloud app usage 
• Managing your organization’s SaaS security posture 

In addition to the integration, SaaS Management offers a Microsoft Power BI report that uses the SaaS Management API. This report provides insights into SaaS applications used within your organization and helps you easily surface occurrences of Shadow IT. The report insights can be shared with contacts within your organization who do not typically use SaaS Management. 

Data Ingestion Utility

At the time of writing, the ShadowIT information obtained from the Zscaler CASB was only available via a CSV file. In order to enable our customers to still be able to gain a view into ShadowIT, we have extended the capabilities of the Data Ingestion Utility (DIU) to allow the ingestion of data from the Zscaler CASB CSV file.

Prior to this release the DIU was capable of ingesting data from a CSV file, but now it has a new job allowing the importing of data from the Zscaler CASB. Further details relating to the DIU can be found here:

• Data Ingestion Utility Overview
• Data Ingestion Utility Help
• Discovered App Usage schema/sample data

Setting up the Zscaler Managed Application

From within the SaaS > Managed Applications UI:

1. Select 'Add Application'.
2. Uncheck 'Direct Integrations Only'.
3. Search for CASB and add the item marked as CASB - by Shadow IT.
4. Optionally, add any tags you wish to include.
5. Save.

The managed application is created within your SaaS Manager environment.

Power BI Report Setup

The report, which is attached to this article as a Power BI Template (PBIT), can be easily configured by providing:

• A refresh token obtained from your Flexera One org. Details on how to generate a refresh token to work with the Flexera One API can be found in the Flexera One help topic Generating a Refresh Token.
• The location of your Flexera One org using the following options: North America (NA), APAC (AU) or Europe (EU)
• Your Flexera One Org ID, which is a numeric identifier contained within the URL of your org.

When opening the PBIT file, you will be prompted for these values. For further details, see the following screenshot. After entering these values, your Power BI report will retrieve the data relating to your Microsoft Defender for Cloud Apps.

You may also see the following message, which can be dismissed using the Discard Changes option.

Once you have configured the report, you can then publish it to your Power BI service, allowing the report to be shared within your organization. You can also set a refresh schedule ensuring that the data you see within your report is up to date.

Legal Information

Reports are provided on an "as is" basis. Neither Flexera nor its suppliers make any warranties, express or implied, statutory, or otherwise, including but not limited to warranties of merchantability, title, fitness for a particular purpose, or non infringement. You shall be responsible for the procurement of any third-party license rights necessary to use the Reports, including without limitation appropriate Power BI license rights. For the avoidance of doubt, Flexera shall retain ownership of all rights, entitlement, and interest in and to the Reports. Reports shall be deemed Confidential Information of Flexera and shall not be used by or disclosed to any third parties except as necessary to use the Reports in conjunction with your current license grant for SaaS Management.