The correct answer is Keycloak . In Forcepoint DSPM standalone deployments, user authentication and user import workflows are handled through the embedded Keycloak administration console. The official Forcepoint DSPM documentation states that “AD Users are added to Forcepoint DSPM through Keycloak” and then describes the workflow for configuring Keycloak’s User Federation capability. The process begins by opening the Keycloak admin console, logging in as an administrator, confirming that the gv realm is selected, navigating to User Federation , and adding an LDAP provider for the Active Directory source.

The distractors map to adjacent but incorrect concepts. User Federation is not the third-party product; it is the Keycloak feature used to connect LDAP or Active Directory identity stores. Kubernetes provides container orchestration and is not responsible for directory import. Rancher is used in platform or cluster management contexts, not AD identity synchronization. Okta can function as an identity provider in many enterprise environments, but it is not the specific product identified in the DSPM AD import workflow. References/topics: User Management, Keycloak Administration, gv Realm, Active Directory Integration, LDAP Provider, User Federation .