SaaS Security Administrator's Guide
    : Onboard a Google Analytics App to SSPM
    Focus
    Download PDF
    Focus
    1. Home
    2. SaaS Security
    3. SaaS Security Administrator's Guide
    4. SaaS Security Posture Management
    5. Onboard SaaS Apps Supported by SSPM
    6. Onboard a Google Analytics App to SSPM
    Download PDF

    SaaS Security Administrator's Guide

    Onboard a Google Analytics App to SSPM

    Table of Contents

    Onboard a Google Analytics App to SSPM

    Connect a Google Analytics instance to SSPM to detect posture risks.
    For SSPM to detect posture risks in your Google Analytics instance, you must onboard your Google Analytics instance to SSPM. Through the onboarding process, SSPM connects to a Google Analytics API and, through the API, scans your Google Analytics instance for misconfigured settings. If there are misconfigured settings, SSPM suggests a remediation action based on best practices.
    SSPM gets access to your Google Analytics instance through OAuth 2.0 authorization. During the onboarding process, you are prompted to log in to Google Analytics and to grant SSPM the access it requires.
    To onboard your Google Analytics instance, you complete the following actions:

    Identify the Administrator Account for Granting SSPM Access

    During the onboarding process, you provide SSPM with your account ID, and SSPM redirects you to log in to Google Analytics. After you log in, Google Analytics will prompt you to grant SSPM the access it needs to your Google Analytics instance.
    1. Log in to the administrator account.
      1. Open a web browser and go to the Google Analytics login page.
      2. Log in using administrator credentials.
    2. Identify your account ID.
      1. Navigate to the administrator Account Settings page.
        1. Hover over the gear icon at the bottom-left side of the page and click Admin.
        2. Go to your Account Settings.
      2. On the administrator Account Settings page, copy the account ID and paste it into a text file.
        Do not continue to the next step unless you have copied the account ID. You must provide this information to SSPM during the onboarding process.
    3. Log out of all Google Analytics accounts.
      Logging out of all Google Analytics accounts helps ensure that you log in under the correct account during the onboarding process. Some browsers can automatically log you in by using saved credentials. To ensure that the browser does not automatically log you in to the wrong account, you can turn off any automatic login option or clear your saved credentials. Alternatively, you can prevent the browser from using saved credentials by opening the Cloud Management Console in an incognito window.

    Connect SSPM to Your Google Analytics Instance

    By adding a Google Analytics app in SSPM, you enable SSPM to connect to your Google Analytics instance. You must consent to specific permissions when adding the Google Analytics app.
    1. From the Add Application Page (Posture SecurityApplicationsAdd Application), click the Google Analytics tile.
    2. Under posture security instances, Add Instance or, if there is already an instance configured, Add New instance.
    3. Choose the option to Log in with Credentials.
    4. Enter your Account ID and Connect.
      SSPM redirects you to the Google Analytics login page.
    5. Log in to the Google Analytics administrator account.
      Google Analytics displays a consent form that details the access permissions that SSPM requires.
    6. Review the consent form and allow the requested permissions.

    © 2024 Palo Alto Networks, Inc. All rights reserved.