>
    Strata Copilot
    Configure a CIE Directory
    Focus
    Download PDF
    Focus
    1. Home
    2. Identity
    3. Identify Users and Devices with Cloud Identity Engine
    4. Configure Directories for User Identification
    5. Configure a CIE Directory
    Download PDF
    Identity

    Configure a CIE Directory

    Table of Contents

    Configure a CIE Directory

    Learn how to configure a local directory for the Cloud Identity Engine.
    Where Can I Use This?What Do I Need?
    • NGFW
    • Prisma Access
    		The Cloud Identity Engine service is free; however, the enforcement points utilizing directory data may require specific licenses. Click here for more information.
    To configure a local directory for the Cloud Identity Engine, use the CIE Directory by completing the following steps.
    The following security measures apply for CIE Directory users:
    • Users must change their passwords after their first login.
    • If a user fails to log in successfully after five attempts, the user's account is locked for five minutes or until it's unlocked by an administrator. The time that the account is locked is based on the number of unsuccessful attempts; for example, after 20 failed attempts, the account is locked for 20 minutes or until it's unlocked by an administrator.
    • If a user fails to log in successfully after 24 attempts, the user's account is disabled until it's enabled by an administrator.
    1. Add the CIE Directory in the Cloud Identity Engine.
      1. Select Directory Add a new directory.
      2. Set Up a CIE Directory.
      3. Enter a unique Directory Name.
        The Cloud Identity Engine supports lowercase alphabetic characters, numeric characters, hyphens, periods, and underscores for the directory name. If you're using a NetBIOS name, the directory name must contain fewer than 16 characters.
      4. Click Submit to create the CIE Directory.
        Creating the directory takes some time, so wait until the Directories page displays before proceeding.
    2. Add users to the CIE Directory.
      1. On the Directories page, click Add User.
        The Cloud Identity Engine supports up to 200 users for the CIE Directory.
      2. Enter the user's First Name, Last Name, and Email.
      3. Enter a Password for the user or click Generate Password to generate a password.
        You can also optionally copy (
        ) the password.
        You must enter a password for the user before you can add the user to the directory.
      4. Click Create to add the user or users.
        If you have a .CSV file that contains the user information, click Bulk Import to import the .CSV file.
    3. Manage the directory and its users as necessary.
      As your directory needs change, manage and update the directory information.
      • To update user information, select Edit in the Actions column. Update the information for a user then click Update to confirm.
      • To require users to reset their passwords on their next login, select Force Password Reset from the Actions column.
      • To unlock a user's account, click the Unlock button in the Actions column.
      • If you no longer need to keep a user's information, select the user (or users) and click Delete and confirm the deletion. You can also select Delete User in the Actions column.
      • To ensure you have the latest directory information, select the Directories page and Refresh the specified directory from the Actions column.
      • If you no longer need a CIE Directory, select the Directories page, Remove the directory from the Actions column, and click Yes to confirm the deletion.
      Next Steps:

    © 2026 Palo Alto Networks, Inc. All rights reserved.