Activate SaaS Security Posture Management

Table of Contents

Activate SaaS Security Inline for Prisma Access

Activate SaaS Security Posture Management

Activate SaaS Security Posture Management (SSPM) on Strata Cloud Manager.

Important

Palo Alto Networks is rolling out a new, unified activation experience in stages. For supported SASE products, you might see the new activation console now, or you maybe directed to use the Hub for activation until the update reaches your tenant.

Where Can I Use This?	What Do I Need?
From email activation link Commercial deployments	SaaS Security Posture Management license Customer Support Portal account

Welcome to SaaS Security Posture Management activation. SaaS Security Posture Management helps detect and remediate misconfigured settings in sanctioned SaaS applications through continuous monitoring. The SaaS Security Posture Management license is a standalone license that is available only on tenants. It does not require any other app or prerequisite. After activation, you can log in to Strata Cloud Manager to onboard SaaS apps, assess and monitor your organization’s posture security, and remediate posture security risks.

Select Activate Subscription in your email, then use one of the following options.

First time activation
Return visit activation
Convert SaaS Security Posture Management from evaluation to production

First time Activation

Learn how to activate your SaaS Security Posture Management application for the first time if you have only one Customer Support Portal account.

Follow these steps for first time SaaS Security Posture Management activation on one Customer Support Portal account.

Allocate the product to the Recipient of your choice.
The name provided matches your Customer Support Portal account for convenience. You can use the name provided or change it.
Select a Region where you want to deploy your product.
The web interface shows if you have Prisma Access or NGFW available in this tenant where you can associate firewalls or devices.
Agree to the terms and conditions, and Activate.

A single default tenant is autocreated behind the scenes, and the product is activated in the tenant.

This tenant, and any others created by this Customer Support Portal account, will have the Superuser role.
Common ServicesProducts displays the status of the activation, such as initializing or complete.
After the status is complete, you must go to the Common ServicesDevice Associations tab to add firewalls to the tenant: Device Associations.
After the status is complete, you can launch SSPM from one of the following options.
- Launch from email:
- Launch from the Activation Console:
- Launch from Common ServicesProducts:
Get Started with SSPM.
(Optional) Manage identity and access.

Return Visit SaaS Security Posture Management Activation

Learn how to activate your SaaS Security Posture Management for repeat visits.

Follow these steps if you have already completed first time activation, you have already created your tenant hierarchy, and you are returning to activate another product in your existing hierarchy.

Allocate the subscription to the Recipient tenant of your choice.

You can hover over each tenant to see which apps you already activated.
Select a Region where you want to deploy your product.
Agree to the terms and conditions, and Activate.

Convert SSPM Evaluation to Production Through Common Services

Learn how to convert a standalone SaaS Security Posture Management (SSPM) evaluation license to a production license on a single tenant through Common Services.

If you have an evaluation license for standalone SaaS Security Posture Management (SSPM), you can convert it to a production license. After you receive an email from Palo Alto Networks identifying the SSPM license you are converting, click the email link to begin the activation process.

Select Get Started with SaaS Security Posture Management (SSPM) in your email.
You are automatically directed to Common ServicesSubscription & Add-ons, where you activate the subscription for your product.
Use one of the following activation methods.
- Select your existing Tenant to convert your evaluation license to a production license on the existing tenant:
- Select Create New to convert your evaluation license to a production license on a new tenant:
The Region is auto-populated with the same region that you used for the evaluation.
Agree to the terms and conditions, and Activate.
Common ServicesTenant Management displays the status of the activation, such as initializing or complete.
After the status is complete, you can launch SSPM from one of the following options.
- Launch from the Activation Console:
- Launch from Common ServicesTenant Management. You’ll notice that you have a new Contract serial number:
Get Started with SSPM documentation.
(Optional) Manage identity and access.