> ## Documentation Index
> Fetch the complete documentation index at: https://nango.dev/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Zscaler (OneAPI)

> Integrate your application with the Zscaler OneAPI for ZIA and ZPA

## 🚀 Quickstart

Connect to Zscaler OneAPI with Nango and see data flow in 2 minutes.

**1. Create the integration**

In Nango ([free signup](https://app.nango.dev)), go to **Integrations** -> *Configure New Integration* -> *Zscaler (OneAPI)*.

**2. Authorize Zscaler**

Go to **Connections** -> *Add Test Connection* -> *Authorize*, then enter your vanity domain, Zscaler cloud, ZPA customer ID, and the client ID and client secret of a ZIdentity API client. Later, you'll let your users do the same directly from your app.

**3. Call the Zscaler API**

Let's make your first request to the Zscaler Internet Access (ZIA) API to get the configuration activation status. Replace the placeholders below with your [Environment API key](https://nango.dev/docs/reference/backend/http-api/api-keys.md), integration ID, and connection ID:

**cURL**

```bash theme={null}
curl "https://api.nango.dev/proxy/zia/api/v1/status" \
  -H "Authorization: Bearer <NANGO-API-KEY>" \
  -H "Provider-Config-Key: <INTEGRATION-ID>" \
  -H "Connection-Id: <CONNECTION-ID>"
```

**Node**

Install Nango's backend SDK with `npm i @nangohq/node`. Then run:

```typescript theme={null}
import { Nango } from '@nangohq/node';

const nango = new Nango({ apiKey: '<NANGO-API-KEY>' });

const res = await nango.get({
    endpoint: '/zia/api/v1/status',
    providerConfigKey: '<INTEGRATION-ID>',
    connectionId: '<CONNECTION-ID>'
});

console.log(res.data);
```

Paths are relative to your API host, such as `https://api.zsapi.net` on the production cloud. ZIA paths start with `/zia/api/v1`, and Zscaler Private Access (ZPA) paths start with `/zpa/mgmtconfig/v1/admin/customers/<CUSTOMER-ID>`. Nango gets an access token with your client credentials and renews it before it expires.

Or fetch credentials with the [Node SDK](https://nango.dev/docs/reference/backend/backend-sdk/node.md#get-a-connection-with-credentials) or [API](https://nango.dev/docs/reference/backend/http-api/connections/get.md).

✅ You're connected! Check the **Logs** tab in Nango to inspect requests.

**4. Implement Nango in your app**

Follow our [quickstart](https://nango.dev/docs/getting-started/quickstart.md) to integrate Nango in your app.

## 📚 Zscaler (OneAPI) integration guides

* [How do I link my account?](https://nango.dev/docs/api-integrations/zscaler/connect)\
  Create a ZIdentity API client and find your vanity domain, Zscaler cloud, and ZPA customer ID.

Official docs: [Zscaler OneAPI](https://help.zscaler.com/oneapi)

## API gotchas

* Your Zscaler tenant must be on ZIdentity to use OneAPI. Tenants that still use the legacy per-product APIs aren't supported.
* This integration supports the production, beta, and government (FedRAMP) clouds. Each cloud has its own authentication domain and API host, which users pick when they connect. Zscaler doesn't offer a self-hosted OneAPI.
* ZPA paths include your ZPA customer ID, which is saved in the connection config as `customerId`.
* An API client only gets the scopes you assign on its **Resources** tab in ZIdentity. A `401` or `403` usually means a scope is missing.

## 🧩 Pre-built syncs & actions for Zscaler (OneAPI)

Enable them in your dashboard. Extend and customize to fit your needs.

*No pre-built syncs or actions available yet.*

> [!TIP]
>
> Not seeing the integration you need? [Build your own](https://nango.dev/docs/guides/functions/functions-guide.md) independently.

***


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.