Gain visibility, insight, and control over shadow IT in your org with ̽»¨´óÉñ® SaaS Management. Using the ̽»¨´óÉñ Goâ„¢ browser extension and connectors, discover software as a service (SaaS) apps used in your org and obtain the tools to classify and track their usage. Improve your org’s compliance and security posture by warning your users or blocking access to unapproved apps. Gather valuable daily usage statistics that identify underutilized or unused apps, helping you streamline your application portfolio and minimize unnecessary licensing. SaaS Management also seamlessly integrates with existing ̽»¨´óÉñ SSO apps, enabling usage information and reporting.
Prerequisites:
- The ̽»¨´óÉñ Go browser extension must be installed on end user’s devices in order to discover unmanaged applications. And for the fullest and most seamless experience, it is recommended to enable the ̽»¨´óÉñ Go feature for your org. See Get Started: ̽»¨´óÉñ Goâ„¢ to learn more.
Considerations:
- SaaS Management is a premium feature and requires the Platform Prime package. See ̽»¨´óÉñ Pricing to learn more.
- When you enable SaaS Management, the ̽»¨´óÉñ Go browser extension collects specific data to discover SaaS apps. See FAQ: SaaS Management to learn more.
- The browser extension doesn’t track or collect data until you enable SaaS Management.
- Review your employee policy obligations and ensure they’re consistent with the data collected.
- SaaS app licensing information isn't tracked automatically. You’ll need to manually enter licensing details for each app in ̽»¨´óÉñ.
Features
- Discover SaaS apps and how they're used in your ̽»¨´óÉñ org. Jump to Discovery Methods to learn more.
- SaaS apps can also be added manually.
- Search from ̽»¨´óÉñ's SaaS App catalog, or add via domain.
- Monitor and review discovered SaaS apps. Take control over user access and categorize them according to your org’s policies:
- Approved apps: Allow users to access these apps as normal across your org.
- Unapproved apps: Specify warning or blocking actions for apps users shouldn’t access.
- Redirect users to an approved resource when they access an unapproved app in their browser with the extension installed.
- Or block user access entirely to an unapproved app in their browser with the extension installed.
- Collect critical insights for security and compliance requirements. Eliminate insecure or redundant apps to help save on licensing costs.
- Manually track licensing information for each discovered app, providing a central location to manage all of your SaaS apps.
Discovery Methods
Discovery Method | Use Case | Learn More |
---|---|---|
̽»¨´óÉñ SSO Apps | Existing SSO apps are automatically added to SaaS Management as approved apps. | Get Started: SAML Single Sign-on (SSO) |
Browser Extension |
Use the ̽»¨´óÉñ Go browser extension to discover SaaS apps that users register, log in to, and access in their browser:
|
Browser Extension Recovery |
Connectors | Enable API driven discovery by integrating directly with SaaS service providers. The Google Workspace and Microsoft Entra ID connectors can also discover additional apps logged in via OAuth. | SaaS Management Connectors |
Browser Extension Discovery
The ̽»¨´óÉñ Go browser extension must be installed on end user devices to use browser extension tracking and discover unmanaged apps. Users must authenticate to the ̽»¨´óÉñ User Portal or a ̽»¨´óÉñ SSO app to begin tracking. However, ̽»¨´óÉñ Go passwordless authentication doesn’t need to be enabled for SaaS Management to track activity.
For the most secure and seamless user experience, we recommend enabling the ̽»¨´óÉñ Go feature for your org. This enables passwordless authentication and simplifies the login experience for users. See Get Started: ̽»¨´óÉñ Goâ„¢ to learn more.
Browser Extension discovery requires the following:
- The ̽»¨´óÉñ Go extension must be installed in the user's browser.
- The user must authenticate to the ̽»¨´óÉñ User Portal or a ̽»¨´óÉñ SSO app.
FAQ
Start Using SaaS Management
See Configure SaaS Management to learn how to enable the feature and understand the admin configuration workflow.
Additional Resources
- Enroll: