Skip to main content

Zscaler OneAPI

Integrate Zscaler OneAPI with Torq to connect to ZIA, ZPA, and ZDX through a single OAuth 2.0 API client and automate policy enforcement, private access changes, and user experience troubleshooting.

Zscaler is a cloud-native zero trust platform that secures user-to-internet, user-to-application, and digital experience monitoring across a distributed workforce. OneAPI is Zscaler's unified programmatic interface: a single gateway (api.zsapi.net) fronting the API resources of every Zscaler service, with API clients registered centrally in Zscaler's identity service and authorized through role-based access control.

A single Zscaler OneAPI integration in Torq lets you connect to Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), and Zscaler Digital Experience (ZDX) with one set of credentials - no separate ZIA API key, ZPA client secret, or ZDX key pair required.

Torq enables quick and easy integration with Zscaler OneAPI, so you can automate anything and everything within moments.

If you don't see a step you need, you can create your own in various ways, such as using the Send an HTTP Request step or Torq's Step Builder, and share it across your organization.

Use Zscaler OneAPI steps in a Torq workflow

Generate a Zscaler OneAPI client

  1. Navigate to API Clients: In the ZIdentity console, go to API > API Clients and click + Add API Client.

  2. Create a client:

    1. Enter a name and description for the client, and set the Access Token Validity.

    2. Under Validation Type, select Secret, set the expiry and copy the secret that was generated. Zscaler displays the secret only once.

    3. Under Resources, select the applicable scopes for the client.

  3. Click Save to create the client.

  4. Ensure the Status is Active and copy the Client ID.

Create a Zscaler OneAPI integration in Torq

  1. Navigate to the integration: In Torq, go to Build > Integrations > Steps > Zscaler OneAPI, then click Add Instance.

  2. Set up integration:

    1. Instance name: Enter a unique and meaningful name for the integration.

    2. Token URL: Enter the token URL for your console.

    3. Client ID: Paste the Client ID you copied earlier.

    4. Client secret: Paste the client secret you copied earlier.

    5. (Optional) If using ZPA, enter your ZPA tenant customer ID.

  3. Finalize: Click Add to save.

Related Articles
Did this answer your question?