What is ZIdentity?
ZIdentity is Zscaler's identity service within the Zero Trust Exchange. It provides the user and device identity that ZIA, ZPA and ZDX policies build on, and for that it typically connects to an existing identity provider within the organisation, such as a directory service or a cloud identity solution. Because zero trust decisions rest on who is making a request and in what context, a reliable, up-to-date identity is the basic requirement for every risk-based access decision across all Zscaler services.
ZIdentity in detail
ZIdentity synchronises user and group data from existing identity sources and makes it usable for ZIA, ZPA and ZDX, rather than running a fully separate user management system in parallel. This shared identity base lets policies apply consistently to the same user, regardless of which service is active at the time. Zscaler now runs the service under the name Authentication Service (formerly ZIdentity); identity providers are typically connected through SAML with just-in-time or SCIM provisioning, and multi-factor authentication is included by default.
Technical access to identity data from external systems such as CentaurNexus goes through the Zscaler OneAPI interface, which provides identity, policy and status data in a structured form.
Why ZIdentity matters in Zscaler operations
Because identity is the shared foundation for ZIA, ZPA and ZDX, an identity problem usually affects several services at the same time. A user who suddenly cannot reach websites or private applications often has an identity problem in the background, not an isolated problem with a single service.
For the helpdesk, that means: anyone who cannot see a user's identity status loses valuable time in cases like this checking individual services in isolation, instead of spotting the shared cause.
Common sources of error
- Delayed synchronisation between the identity provider and ZIdentity leads to outdated group assignments.
- Identity problems get mistaken for an isolated ZIA or ZPA problem.
- No read-only visibility for the helpdesk into individual users' identity status.
- Role assignments in the identity provider and access policies in Zscaler drift apart.
ZIdentity in practice: what CentaurNexus contributes
CentaurNexus brings a user's identity status together with ZIA, ZPA and ZDX status, plus further signals such as PRA and EASM, in an extended 360-degree view through Unified Support Center. That lets the helpdesk see at a glance whether a reported problem has its root in identity or in a single service, with no admin rights of its own needed on the Zscaler platform. The broader context is covered in the guide Zscaler support without admin rights.
Related terms
Frequently asked questions about ZIdentity
ZIdentity is Zscaler's identity service within the Zero Trust Exchange. It provides the user and device identity that ZIA, ZPA and ZDX policies build on, and for that it typically connects to an existing identity provider within the organisation.
Usually not. ZIdentity synchronises and uses identities from an existing system such as Microsoft Entra ID or another identity provider, rather than replacing a fully separate user management system. The exact depth of integration should be checked for each environment.
Zero trust decisions rest on who is making a request and in what context, not on which network segment it comes from. Without reliable, up-to-date identity data, ZIA and ZPA could not make risk-based access decisions at all.
Because identity is the shared foundation for ZIA, ZPA and ZDX, an identity problem usually affects several services at the same time. A user who suddenly has neither internet access nor reach to private applications often has an identity problem, not an isolated problem with one service.
Typically, IT or identity teams manage the connection between ZIdentity and the existing identity provider centrally, while the operational helpdesk usually only needs read-only insight into individual users' identity status.
- Zscaler Help Portal: What Is Authentication Service? (formerly ZIdentity) - help.zscaler.com/zidentity/what-zidentity
Note: CentaurNexus is an independent product of SourcingBlox GmbH and not an offering of Zscaler, Inc. Product and brand names belong to their respective owners.