New Features - Cloud Identity Engine - April 2025

The Cloud Identity Engine now supports access in the South Africa (ZA) region for customers who must store the data that the Cloud Identity Engine synchronizes from their directories in that region to ensure compliance with their local data regulation requirements.

To maintain compatibility, your Cloud Identity Engine region must be the same as the region you configure in any associated Palo Alto Networks® apps or other app integrations.

If you're using a Cloud Identity agent, refer to Configure the Cloud Identity Agent to learn how to configure the agent to communicate within a specific region. If you use the Cloud Identity Engine for user authentication, refer to Configure the Cloud Identity Engine in an Authentication Profile to learn which regional endpoints you need to allow in your network security policy.

For more information on how the Cloud Identity Engine manages the data you allow it to access, including transfer, retention, and security, refer to the Cloud Identity Engine Solution Brief or the Cloud Identity Engine Privacy Datasheet.