>
    Strata Copilot
    Onboard a Zoom App to SSPM
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. Onboard SaaS Apps Supported by SSPM
    4. Onboard a Zoom App to SSPM
    Download PDF
    SaaS Security

    Onboard a Zoom App to SSPM

    Table of Contents

    Onboard a Zoom App to SSPM

    Connect a Zoom instance to SSPM to detect posture risks.
    Where Can I Use This?What Do I Need?
    • Strata Cloud Manager
    • SaaS Security Posture Management license
    Or any of the following licenses that include the Data Security license:
    • CASB-X
    • CASB-PA
    For SSPM to detect posture risks in your Zoom instance, you must onboard your Zoom instance to SSPM. Through the onboarding process, SSPM connects to Zoom by using a Zoom API. SSPM then uses that API to scan your Zoom instance for misconfigured settings, risky accounts, and third-party plugins. If there are misconfigured settings, SSPM suggests a remediation action based on best practices.
    SSPM gets access to your Zoom instance through OAuth 2.0 authorization. During the onboarding process, you are prompted to log in to Zoom and to grant SSPM the access it requires.
    To onboard your Zoom instance, you complete the following actions:

    Identify the Zoom Account for Granting SSPM Access

    During the onboarding process, SSPM will redirect you to log in to Zoom. After you log in, Zoom will prompt you to grant SSPM the access it needs to your Zoom instance.
    1. Identify the Zoom account that you will use to log in to Zoom during onboarding.
      SSPM will use this account to establish a connection to your Zoom instance. After SSPM establishes the connection, it will perform an initial scan of your Zoom instance, and will then run scans at regular intervals. The account that you use to establish the initial connection with SSPM must remain available. For this reason, we recommend that you use a dedicated service account to grant SSPM access. If you delete the service account, or change the account's password, the scans will fail and you will need to onboard Zoom again.
      When you onboard Zoom, SSPM gives you an option to connect with read-only permissions or with read and write permissions. The onboarding screen lists the API scopes that SSPM requires for each type of scan that it can run. The onboarding screen also lists the API scopes that SSPM requires to perform automated remediation of misconfiguration settings. After establishing a connection, SSPM will notify you if it is unable to run certain scans, or perform automated remediation, because the account did not have the permissions to grant access to certain scopes.
      Permissions for Read Access: To grant SSPM reduced permissions to perform configuration scans, risky account scans, third-party plugin scans, and identity scans, the account that you use to connect SSPM to your Zoom instance requires the following permissions. With only these reduced permissions, SSPM will not be able to perform automated remediation of misconfigured settings.
      • Users: View
      • Account settings: View
      • Account Profile: View
      • Marketplace: View
      • Admin Activity Logs: View
      • Role Management: View
      Permissions for Read and Write Access: To grant SSPM full read and write access to perform all of its scans and automated remediation, the account that you use to connect SSPM to your Zoom instance requires the following permissions.
      • Users: View
      • Account settings: View and Edit
      • Account Profile: View and Edit
      • Marketplace: View
      • Admin Activity Logs: View
      • Role Management: View
    2. Sign out of all Zoom accounts.
      Signing out of all Zoom accounts helps ensure that you sign in under the correct account during the onboarding process. Some browsers can automatically sign you in by using saved credentials. To ensure that the browser does not automatically sign you in to the wrong account, you can turn off any automatic sign-in option or clear your saved credentials. Alternatively, you can prevent the browser from using saved credentials by opening the Cloud Management Console in an incognito window.

    Connect SSPM to Your Zoom Instance

    By adding a Zoom app in SSPM, you enable SSPM to connect to your Zoom instance. You must consent to specific permissions when adding the Zoom app.
    1. Log in to Strata Cloud Manager.
    2. Select ConfigurationSaaS SecurityPosture SecurityApplicationsAdd Application and click the Zoom tile.
    3. On the Posture Security tab, Add New instance.
    4. Specify whether you want SSPM to connect with Read Permissions only or with Read and Write permissions.
      The onboarding page lists the API scopes that SSPM will access to complete scans and to perform automated remediation.
    5. Under posture security instances, Add Instance or, if there is already an instance configured, Add New instance.
      SSPM redirects you to the Zoom login page.
    6. Enter the credentials for the account that you identified earlier, and log in to Zoom.
      Zoom displays a consent form that details the access permissions that SSPM requires.
    7. Review the consent form and allow the requested permissions.
      SSPM connects to your Zoom instance, and displays whether it was able to access the API scopes that it requires. If SSPM is unable to access necessary scopes, it indicates which scans or actions it will not be able to perform.

    © 2026 Palo Alto Networks, Inc. All rights reserved.