When SaaS Management is enabled, the 探花大神 Go browser extension collects data in the user\u2019s browser on their device and sends it to 探花大神. The data collected can be broken into the two categories that are reported in SaaS Management:<\/p>\n\n\n\n
- \n
- Login information\n
- \n
- User access to sites is monitored:\n
- \n
- The browser extension checks for a specific set of criteria to determine if the site visit is a login, registration, or a return visit using an email address or username for authentication. <\/li>\n\n\n\n
- If the user accesses a site that meets these criteria, the extension then checks if the site matches an existing 探花大神 SSO app in the org or an entry in the SaaS app catalog. <\/li>\n\n\n\n
- Only activity to a site that matches both of these conditions is reported to 探花大神.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- SaaS Management doesn\u2019t read or collect password data values. <\/li>\n\n\n\n
- Admins can also limit tracking to specific email domains to ensure users\u2019 personal activity is not monitored. For example, you can configure SaaS Management to track activity using only your company\u2019s email addresses. See Browser Extension Discoverability<\/a> to learn more.\u00a0<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Usage information:\n
- \n
- The browser extension also tracks page navigations to sites to build reports on when users access SaaS apps. There are three types of access:\n
- \n
- A new registration of an app.<\/li>\n\n\n\n
- A login or authentication to the app.<\/li>\n\n\n\n
- A return visit to the URL of the app from a previously authenticated session logged by the browser extension.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div><\/div><\/div>\n\n\n\nCan I prevent users or groups of users from being tracked?\u00a0<\/a>\n
Yes, you can exclude specific user groups from tracking in the SaaS Management settings. See Browser Extension Discoverability<\/a> to learn more.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
How can I track activity only from work email domains?<\/a>\nYou can specify which email domains you want to track and user activity only from these specified domains will be tracked. You can configure this in the SaaS Management settings. <\/p>\n<\/div><\/div><\/div>\n\n\n\n
Can you track logins if users don\u2019t access sites with 探花大神 Go?\u00a0\u00a0<\/a>\nYes, but users need to authenticate to the 探花大神 User Portal and establish a session first for SaaS Management to be able track activity in their browser.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
Does 探花大神 track personal activity and visits to sites that don\u2019t require a 探花大神 login? How does 探花大神 ensure that irrelevant activity is not logged?<\/a>\n探花大神 collects website visits under the following condition: if a user accesses a SaaS app, cookies are used to detect the account information. After detection, website visits are logged once a day to generate usage data. <\/p>\n\n\n\n
- \n
- Irrelevant activity is not tracked based on the following criteria:\n
- \n
- SaaS Management tracks logins, signups, and already logged in accounts to SaaS apps that are included in our SaaS app catalog.<\/li>\n\n\n\n
- SaaS Management only tracks website visits if an associated account has already been discovered to the given SaaS app.<\/li>\n\n\n\n
- If a user doesn’t have an account associated with the SaaS app and only visits the website, this data is not collected.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div><\/div><\/div>\n\n\n\nDoes 探花大神 detect or track activity using personal email addresses on managed devices even if the settings are configured to limit tracking to work email domains? If so, how long is that data retained and when is it deleted?<\/a>\n
By default, SaaS Management tracks events from all email domains, but you can restrict this in the settings and limit tracking to specific email domains. If the email domain matches a tracked domain, login and usage events are processed and sent to the backend; otherwise, no data is tracked, and all such events are discarded before reaching our backend.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
What happens with sites that require a login but don’t match a 探花大神 SSO app or an app in the SaaS app catalog?<\/a>\nIf an app or website is not part of 探花大神 SSO or the SaaS app catalog, SaaS Management doesn’t track any user activity. SaaS Management only tracks apps from the browser that are part of the SaaS app catalog.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
SaaS Apps<\/h2>\n\n\n\n
Which SaaS apps are supported? Does 探花大神 have a list of predetermined SaaS apps?\u00a0<\/a>\n探花大神 maintains a list of predetermined SaaS apps called the SaaS app catalog. SaaS Management tracks activity related to these apps only. User interaction with sites not on this list aren’t reported to SaaS Management. <\/p>\n\n\n\n
To check if a SaaS app is supported:<\/strong><\/p>\n\n\n\n
- \n
- Go to SaaS Management<\/strong> > Applications<\/strong> tab.<\/li>\n\n\n\n
- Click + Add App<\/strong>.<\/li>\n\n\n\n
- Under Choose SaaS App<\/strong>, search for the app. If the app appears in the list, it’s supported. <\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>Note:<\/strong> \nIf the app doesn’t appear in the list, you can create a custom app. See Manually Add Apps<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n<\/div><\/div><\/div>\n\n\n\n
Can I block user access to a SaaS app in their browser?<\/a>\nYes, SaaS Management gives you multiple options to restrict user access to unapproved apps. You can set the default option to warn or block users when accessing unapproved apps. You can also set specific overrides for each app within its review modal.<\/p>\n\n\n\n
<\/p><\/div>Note:<\/strong> \nApp blocking prevents navigation in the user\u2019s browser UI with the extension installed, but doesn\u2019t block network traffic or access to the site on the device.<\/p>\n <\/div><\/div><\/div><\/div>\n<\/div><\/div><\/div>\n\n\n\n
Browser Extension<\/h2>\n\n\n\n
What browser extension does SaaS Management use? Which browsers are supported?<\/a>\nSaaS Management uses the 探花大神 Go extension for browser tracking. The following browsers are supported:<\/p>\n\n\n\n
- \n
- Google Chrome<\/li>\n\n\n\n
- Chromium-based browsers (Brave)<\/li>\n\n\n\n
- Microsoft Edge<\/li>\n\n\n\n
- Mozilla Firefox<\/li>\n<\/ul>\n\n\n\n
See the Prerequisites in Get Started: 探花大神 Go<\/a> to learn more. <\/p>\n<\/div><\/div><\/div>\n\n\n\n
Does SaaS Management work differently if 探花大神 Go is enabled or disabled for the org?<\/a>\nWhen an org has 探花大神 Go enabled, users need to log in to the extension only once and their activities are tracked in every browser on the device that has the extension installed. <\/p>\n\n\n\n
However, if 探花大神 Go is disabled, users need to log in to the 探花大神 User Portal or a 探花大神 SSO app in each browser that has the extension installed. In other words, discovery works only in browsers that a) have the extension installed and b) have a 探花大神 User Portal or 探花大神 SSO app login.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
How can I distribute the 探花大神 Go browser extension to my users?<\/a>
- Click + Add App<\/strong>.<\/li>\n\n\n\n
- Go to SaaS Management<\/strong> > Applications<\/strong> tab.<\/li>\n\n\n\n
- Irrelevant activity is not tracked based on the following criteria:\n
- Usage information:\n
- User access to sites is monitored:\n