- \n
- The JumpCloud Go browser extension must be installed on end user\u2019s devices in order to discover unmanaged applications. And for the fullest and most seamless experience, it is recommended to enable the JumpCloud Go feature for your organization. See Get Started: JumpCloud Go\u2122<\/a> to learn more.\u00a0<\/li>\n<\/ul>\n\n\n\n
Considerations<\/strong>:<\/p>\n\n\n\n
- \n
- SaaS Management is a premium feature and requires the Platform Prime package. See JumpCloud Pricing<\/a> to learn more.<\/li>\n\n\n\n
- When you enable SaaS Management, the JumpCloud Go browser extension collects specific data to discover SaaS apps. Jump to the FAQ<\/a> to learn more.\n
- \n
- The browser extension doesn\u2019t track or collect data until you enable SaaS Management. <\/li>\n\n\n\n
- Review your employee policy obligations and ensure they\u2019re consistent with the data collected.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- SaaS app licensing information isn’t tracked automatically. You\u2019ll need to manually enter licensing details for each app in JumpCloud. <\/li>\n<\/ul>\n\n\n\n
Features<\/h2>\n\n\n\n
- \n
- Discover SaaS app use in your JumpCloud org. Apps are discovered and tracked from the following sources:\n
- \n
- Existing JumpCloud SSO apps are automatically added to SaaS Management as approved apps. See Get Started: SAML Single Sign-on (SSO)<\/a> to learn more. <\/li>\n\n\n\n
- Using the JumpCloud Go\u2122 browser extension, discover SaaS apps that users register, log in to, and access in their browser:\n
- \n
- Track user visits to SaaS apps to understand usage optimization. <\/li>\n\n\n\n
- Control which users and accounts are tracked by limiting SaaS Management to specific email domains or excluding certain user groups.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- SaaS apps can also be added manually.\n
- \n
- Search from JumpCloud’s SaaS App catalog, or add via domain.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Monitor and review discovered SaaS apps. Take control over user access and categorize them according to your org\u2019s policies:\n
- \n
- Approved apps: Allow users to access these apps as normal across your org.<\/li>\n\n\n\n
- Unapproved apps: Specify warning or blocking actions for apps users shouldn\u2019t access.\n
- \n
- Redirect users to an approved resource when they access an unapproved app in their browser with the extension installed.<\/li>\n\n\n\n
- Or block user access entirely to an unapproved app in their browser with the extension installed.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Collect critical insights for security and compliance requirements. Eliminate insecure or redundant apps to help save on licensing costs. <\/li>\n\n\n\n
- Manually track licensing information for each discovered app, providing a central location to manage all of your SaaS apps. <\/li>\n<\/ul>\n\n\n\n
Start Using SaaS Management <\/h3>\n\n\n\n
See Configure SaaS Management<\/a> to learn how to enable the feature and understand the admin configuration workflow.<\/p>\n\n\n\n
FAQ<\/h2>\n\n\n\n
What data does SaaS Management collect from users?<\/a>\nWhen SaaS Management is enabled, the JumpCloud Go browser extension collects data in the user\u2019s browser on their device and sends it to JumpCloud. The data collected can be broken into the two categories that are reported in SaaS Management:<\/p>\n\n\n\n
- \n
- Login information\n
- \n
- User access to sites is monitored:\n
- \n
- The browser extension checks for a specific set of criteria to determine if the site visit is a login, registration, or a return visit using an email address or username for authentication. <\/li>\n\n\n\n
- If the user accesses a site that meets these criteria, the extension then checks if the site matches an existing JumpCloud SSO app in the org or an entry in the SaaS app catalog. <\/li>\n\n\n\n
- Only activity to a site that matches both of these conditions is reported to JumpCloud.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- SaaS Management doesn\u2019t read or collect password data values. <\/li>\n\n\n\n
- Admins can also limit tracking to specific email domains to ensure users\u2019 personal activity is not monitored. For example, you can configure SaaS Management to track activity using only your company\u2019s email addresses. See Browser Extension Domain Tracking Settings<\/a> to learn more. <\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Usage information:\n
- \n
- The browser extension also tracks page navigations to sites to build reports on when users access SaaS apps. There are three types of access:\n
- \n
- A new registration of an app.<\/li>\n\n\n\n
- A login or authentication to the app.<\/li>\n\n\n\n
- A return visit to the URL of the app from a previously authenticated session logged by the browser extension.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div><\/div><\/div>\n\n\n\nWhat is the difference for how SaaS Management works with or without JumpCloud Go enabled?<\/a>\n
When an org has JumpCloud Go enabled, their users only need to log into the extension once and their activities will be tracked on every browser that extension works with. However, if JumpCloud Go is not enabled, the employees will need to have at least logged into the Jumpcloud User Portal one time for each browser. Discovery will work only on the browser that has a Jumpcloud User Portal login.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
Which Admin Portal roles have access to SaaS Management functionality?<\/a>\n- \n
- Full Edit Access: Admin, Admin with Billing, and Manager<\/li>\n\n\n\n
- Read Only: Help Desk, Read Only<\/li>\n\n\n\n
- Other roles do not have any access at this time.<\/li>\n<\/ul>\n<\/div><\/div><\/div>\n\n\n\nHow long does it take for data to populate after enabling SaaS Management?<\/a>\n
When a user authenticates to the User Portal on their managed device with the JumpCloud Go browser extension installed, data collection begins within 5 minutes. However, it can take at least 15 minutes for SaaS app data to appear in the Admin Portal.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
What SaaS Apps are supported? Does JumpCloud have a list of predetermined SaaS apps?\u00a0<\/a>\nJumpCloud maintains a list of predetermined SaaS apps called the SaaS app catalog. SaaS management tracks activity related only to these apps. User interaction with sites not on this list are not reported to SaaS Management.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
Can I prevent users or groups of users from being tracked?\u00a0<\/a>\nYes, you can exclude specific user groups from tracking in the SaaS Management settings. See Browser Extension User Tracking Settings<\/a> to learn more.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
How can I track activity only from work email domains?<\/a>\nYou can specify which email domains you want to track and user activity only from these specified domains will be tracked. You can configure this in the SaaS Management settings. <\/p>\n<\/div><\/div><\/div>\n\n\n\n
Are you able to track logins if users don\u2019t access sites with JumpCloud Go?\u00a0\u00a0<\/a>\nUsers need to authenticate to the JumpCloud User Portal and establish a session first for SaaS Management to be able track their activity in their browser.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
- Usage information:\n
- User access to sites is monitored:\n
- Login information\n
- Using the JumpCloud Go\u2122 browser extension, discover SaaS apps that users register, log in to, and access in their browser:\n
- Existing JumpCloud SSO apps are automatically added to SaaS Management as approved apps. See Get Started: SAML Single Sign-on (SSO)<\/a> to learn more. <\/li>\n\n\n\n
- Discover SaaS app use in your JumpCloud org. Apps are discovered and tracked from the following sources:\n
- When you enable SaaS Management, the JumpCloud Go browser extension collects specific data to discover SaaS apps. Jump to the FAQ<\/a> to learn more.\n
- SaaS Management is a premium feature and requires the Platform Prime package. See JumpCloud Pricing<\/a> to learn more.<\/li>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"){kind=icon}
<\/p><\/div>