If traffic is coming from a known location (a branch office), users do not need to provide a tenant identifier. If you are using Secure Internet Access in explicit proxy mode with multiple tenants, you can define the locations where the traffic will be forwarded in explicit proxy mode. The proxy then can map the traffic from a location to your organization and apply policies accordingly.

You can configure a given site for Explicit Proxy (PAC file) based deployment by selecting Explicit Proxy as a traffic forwarding type.