Prisma Cloud Integration Reference

Lists certified components, supported operations, configuration modes, default out-of-the-box attributes for the integration between Prisma Cloud and Oracle Access Governance.

Components Certified for Integration with Oracle Access Governance

The components that you can integrate with are listed below.

Table - Certified Components

Component Type Component
System Prisma Cloud as a Managed System for all Cloud versions.

Supported Configuration Modes for Integrations

Oracle Access Governance integrations can be setup in different configuration modes depending on your requirement for provisioning accounts.

Prisma Cloud Orchestrated System supports the following mode:
  • Managed System

    You can manage accounts and entitlements for Prisma Cloud.

Supported Operations When Provisioning to Prisma Cloud

When you provision an account from Oracle Access Governance to Prisma Cloud certain operations are supported.

The Prisma Cloud Orchestrated System supports the following account operations when provisioning a user:

  • Create Account
  • Update Account
  • Delete Account
  • Enable Account
  • Disable Account
  • Assign Groups
  • Remove Groups

For more details see Oracle Access Governance Integration Functional Overview and Integrate with Prisma Cloud.

Default Supported Attributes

Oracle Access Governance supports the following default Oracle Infinity attributes.

Default Supported Account Attributes

Entity Account Attribute Oracle Access Governance Account Attribute Oracle Access Governance Display name
User __UID__(id) uid Unique Id
  __NAME__(username) name User login
  __ENABLE__ (active) status Status
  displayName displayName Name
  name.familyName lastName Last name
  name.formatted formattedName Formatted name
  name.givenName firstName First name
  primaryEmail email Email
  primaryEmailType emailType Email type
SecondaryEmails secondaryEmails secondaryEmails Secondary emails
  type type Type
  __GROUP__ groups Groups

Default Matching Rules

In order to map accounts to identities in Oracle Access Governance you need to have a matching rule for each orchestrated system.

The default matching rule for the orchestrated system is as follows:

Table - Default Matching Rules

Mode Default Matching Rule
Managed System

Account matching checks if incoming accounts match with existing identities.

Screen value:

User login = Employee user name