![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"){kind=icon}
<\/p><\/div>
Review Get Started: SaaS Management<\/a> for a feature overview and FAQ: SaaS Management<\/a> to learn more. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Prerequisites<\/strong>:<\/p>\n\n\n\n Considerations<\/strong>:<\/p>\n\n\n\n To start using JumpCloud SaaS Management, enable it in the Admin Portal:<\/p>\n\n\n\n After enabling SaaS Management, existing JumpCloud SSO apps are added automatically. For SaaS app discovery on user devices, the browser extension begins tracking activity within five minutes. Users must authenticate to the User Portal first to establish a session for SaaS Management to begin tracking.<\/p>\n\n\n\n Users aren’t notified directly when SaaS Management is toggled on. However, you can choose to display an info card in the User Portal to inform users. Jump to SaaS Management on User Portal<\/a> to learn more. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Next, configure the following management settings to customize SaaS Management behavior.<\/p>\n\n\n\n Use these settings to fine tune browser extension tracking, exclude certain user groups, and customize action and response to unapproved apps. Choose to display a SaaS Management info card for users in their User Portal > Security page. This informs users that SaaS Management is enabled, and which email domains are being tracked by your org. Configure which methods SaaS Management can use to discover users and apps.<\/p>\n\n\n\n When users register, log in, or return to a SaaS app, they use an email address or username to authenticate. Control what activity is captured depending on the email address domain used for authentication:<\/p>\n\n\n\n Leverage user groups to control which users in your org are tracked by the browser extension.<\/p>\n\n\n\n When you classify discovered apps as unapproved, select the default action SaaS Management takes to warn or block your users in their browser with the extension installed:<\/p>\n\n\n\n Customize the default warning and blocking messages users see when accessing unapproved apps. <\/p>\n\n\n\n You can override these default settings for each app individually when you review the app. Jump to Reviewing an App<\/a> to learn more. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Connect SaaS Management directly to SaaS service providers to expand discovery and tracking capabilities. Connectors use APIs to collect information directly from SaaS service providers. See Understand SaaS Management Connectors<\/a> to learn more.<\/p>\n\n\n\n Now that you\u2019ve enabled and configured SaaS Management, you can review and manage all of your apps and connected users. <\/p>\n\n\n\n When you enable SaaS Management, the JumpCloud Go extension begins tracking user activity in their browser. Once data starts populating, the Overview<\/strong> tab serves as a dashboard for SaaS app activity within your org. See a list of all SaaS apps discovered in your org. Apps are broken out into the following categories:<\/p>\n\n\n\n Click on Columns<\/strong> to select columns for display. Click on Export<\/strong> to export a CSV file of your applications lists, useful for financial or compliance reporting.<\/p>\n\n\n\n In addition to letting SaaS Management automatically discover applications, you can easily add applications manually to start tracking, warning, and blocking access when necessary.<\/p>\n\n\n\n The domain is required, and if it matches with an app in our catalog you must choose that instead. If this app becomes added to our catalog at a later date, the custom app domain will have priority and continue working.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Even if you are adding an app to warn or block users from using it, logins and signups will still be tracked (although discovery is not guaranteed to be 100%).<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Apps that SaaS Management discovers appear in the Newly Discovered<\/strong> tab until you review and classify them as approved, unapproved, or ignored. <\/p>\n\n\n\n To review an app<\/strong>:<\/p>\n\n\n\n To set Access Restrictions<\/strong>:<\/p>\n\n\n\n If you set the app status as Unapproved<\/strong> in the previous section, use Access Restrictions <\/strong>to configure how to warn or block users from accessing the app:<\/p>\n\n\n\n You can select any app in the SaaS Management list to see an overview and additional information about it. To access app details<\/strong>:<\/p>\n\n\n\n To modify an app from the details page<\/strong>:<\/p>\n\n\n\n Keep track of app costs and usage all within SaaS Management. You can manually enter licensing information for each SaaS app. <\/p>\n\n\n\n To edit license information<\/strong>:<\/p>\n\n\n\n You can’t delete connected SSO apps directly from SaaS Management. Instead, delete them from JumpCloud SSO in the Admin Portal (USER AUTHENTICATION<\/strong> > SSO Applications<\/strong>). See Get Started: SAML Single Sign-on (SSO)<\/a> to learn more. <\/p>\n\n\n\n\n
\n
\n
Enabling SaaS Management <\/h2>\n\n\n\n
\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\"){kind=icon}
<\/p><\/div>Configuring General Settings<\/h2>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2025\/02\/saas_mgmt_settings_v2.png\")
<\/p>\n\n\n\nSaaS Management on User Portal<\/h3>\n\n\n\n
![](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_management_user_portal_security.png\")
<\/p>\n\n\n\nDiscovery Methods<\/h3>\n\n\n\n
\n
Browser Extension Discoverability <\/h3>\n\n\n\n
Domain Tracking<\/h4>\n\n\n\n
\n
User Tracking <\/h4>\n\n\n\n
\n
Unapproved Apps<\/h3>\n\n\n\n
Default Action for Unapproved Apps <\/h4>\n\n\n\n
\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_mgmt_warning_message_browser.png\")
<\/li>\n\n\n\n![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_mgmt_block_message_browser.png\")
<\/li>\n<\/ul>\n\n\n\nDefault Messaging for Unapproved Apps<\/h4>\n\n\n\n
<\/p><\/div>\n
\n
Configuring Connectors<\/h2>\n\n\n\n
Managing Applications <\/h2>\n\n\n\n
Overview Tab<\/h3>\n\n\n\n
![\"Overview](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_management_overview.png\")
<\/p>\n\n\n\n\n
Applications Tab<\/h3>\n\n\n\n
![\"SaaS](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_management_applications_tab.png\")
<\/p>\n\n\n\n\n
Manually Add Apps<\/h3>\n\n\n\n
\n
![\"add](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/11\/saasmgmt_addapp1.png\")
<\/li>\n\n\n\n\n
\n
![\"add](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/11\/saasmgmt_addapp2.png\")
<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>\n
![\"custom](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/11\/saasmgmt_addapp3.png\")
<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Reviewing an App<\/h3>\n\n\n\n
\n
\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\"){kind=icon}
<\/p><\/div>\n
\n
\n
Viewing App Details<\/h3>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/11\/saas_mgmt_app_details2.png\")
<\/p>\n\n\n\n\n
\n
\n
\n
Editing Licensing Information<\/h3>\n\n\n\n
\n
\n
\n
Deleting an App<\/h3>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\"){kind=icon}
<\/p><\/div>