![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"){kind=icon}
<\/p><\/div>
Review Get Started: SaaS Management<\/a> for a feature overview and FAQ. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Prerequisites<\/strong>:<\/p>\n\n\n\n Considerations<\/strong>:<\/p>\n\n\n\n To start using JumpCloud SaaS Management, enable it in the Admin Portal:<\/p>\n\n\n\n After enabling SaaS Management, existing JumpCloud SSO apps are added automatically. For SaaS app discovery on user devices, the browser extension begins tracking activity within five minutes. Users must authenticate to the User Portal first to establish a session for SaaS Management to begin tracking.<\/p>\n\n\n\n Users aren’t notified directly when SaaS Management is toggled on. However, you can choose to display an info card in the User Portal to inform users. Jump to SaaS Management on User Portal<\/a> to learn more. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Next, configure the following management settings to customize SaaS Management behavior.<\/p>\n\n\n\n Use these settings to fine tune browser extension tracking, exclude certain user groups, and customize action and response to unapproved apps. Choose to display a SaaS Management info card for users in their User Portal > Security page. This informs users that SaaS Management is enabled, and which email domains are being tracked by your org. When users register, log in, or return to a SaaS app, they use an email address or username to authenticate. Control what activity is captured depending on the email address domain used for authentication:<\/p>\n\n\n\n Leverage user groups to control which users in your org are tracked by the browser extension.<\/p>\n\n\n\n When you classify discovered apps as unapproved, select the default action SaaS Management takes to warn or block your users in their browser with the extension installed:<\/p>\n\n\n\n Customize the default warning and blocking messages users see when accessing unapproved apps. <\/p>\n\n\n\n You can override these default settings for each app individually when you review the app. Jump to Reviewing an App<\/a> to learn more. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Now that you\u2019ve enabled and configured SaaS Management, you can review and manage all of your apps and connected users. <\/p>\n\n\n\n When you enable SaaS Management, the JumpCloud Go extension begins tracking user activity in their browser. Once data starts populating, the Overview<\/strong> tab serves as a dashboard for SaaS app activity within your org. See a list of all SaaS apps discovered in your org. Apps are broken out into the following categories:<\/p>\n\n\n\n Usage is calculated using a combination of how often individual accounts access an app and the percentage of total accounts accessing the app. For example, app usage is categorized as High if 50% of assigned accounts use the app 5 or more days in a 30 day period. In addition to letting SaaS Management automatically discover applications, you can easily add applications manually to start tracking, warning, and blocking access when necessary.<\/p>\n\n\n\n The domain is required, and if it matches with an app in our catalog you must choose that instead. If this app becomes added to our catalog at a later date, the custom app domain will have priority and continue working.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Even if you are adding an app to warn or block users from using it, logins and signups will still be tracked (although discovery is not guaranteed to be 100%).<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Apps that SaaS Management discover appear in the Newly Discovered<\/strong> tab until you review and classify them as approved, unapproved, or ignored. <\/p>\n\n\n\n To review an app<\/strong>:<\/p>\n\n\n\n To set Access Restrictions<\/strong>:<\/p>\n\n\n\n If you set the app status as Unapproved<\/strong> in the previous section, use Access Restrictions <\/strong>to configure how to warn or block users from accessing the app:<\/p>\n\n\n\n You can select any app in the SaaS Management list to see an overview and additional information about it. To access app details<\/strong>:<\/p>\n\n\n\n To modify an app from the details page<\/strong>:<\/p>\n\n\n\n Keep track of app costs and usage all within SaaS Management. You can manually enter licensing information for each SaaS app. <\/p>\n\n\n\n To edit license information<\/strong>:<\/p>\n\n\n\n You can’t delete connected SSO apps directly from SaaS Management. Instead, delete them from JumpCloud SSO in the Admin Portal (USER AUTHENTICATION<\/strong> > SSO Applications<\/strong>). See Get Started: SAML Single Sign-on (SSO)<\/a> to learn more. <\/p>\n\n\n\n When you delete an app from SaaS Management, all accounts, usage, and insights are also deleted. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n The Users tab gives you an overview of all SaaS app users in your org, which apps they have access to, and how frequently they use them. <\/p>\n\n\n\n You can select any user in SaaS Management to see additional information, including app activity and login methods.<\/p>\n\n\n\n To access user details<\/strong>:<\/p>\n\n\n\n\n
\n
\n
Enabling SaaS Management <\/h2>\n\n\n\n
\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\"){kind=icon}
<\/p><\/div>Configuring SaaS Management Settings<\/h2>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_management_settings.png\")
<\/p>\n\n\n\nSaaS Management on User Portal<\/h3>\n\n\n\n
![](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_management_user_portal_security.png\")
<\/p>\n\n\n\nBrowser Extension Domain Tracking<\/h3>\n\n\n\n
\n
Browser Extension User Tracking <\/h3>\n\n\n\n
\n
Default Action for Unapproved Apps <\/h3>\n\n\n\n
\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_mgmt_warning_message_browser.png\")
<\/li>\n\n\n\n![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_mgmt_block_message_browser.png\")
<\/li>\n<\/ul>\n\n\n\nDefault Messaging for Unapproved Apps<\/h3>\n\n\n\n
<\/p><\/div>\n
\n
Managing Applications <\/h2>\n\n\n\n
Overview Tab<\/h3>\n\n\n\n
![\"Overview](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_management_overview.png\")
<\/p>\n\n\n\n\n
Applications Tab<\/h3>\n\n\n\n
\n
App Usage<\/h4>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_management_applications_tab.png\")
<\/p>\n\n\n\nManually Add Apps<\/h3>\n\n\n\n
\n
![\"add](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/11\/saasmgmt_addapp1.png\")
<\/li>\n\n\n\n\n
\n
![\"add](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/11\/saasmgmt_addapp2.png\")
<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>\n
![\"custom](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/11\/saasmgmt_addapp3.png\")
<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Reviewing an App<\/h3>\n\n\n\n
\n
\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\"){kind=icon}
<\/p><\/div>\n
\n
\n
Viewing App Details<\/h3>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_mgmt_app_overview_linear.png\")
<\/p>\n\n\n\n\n
\n
\n
Editing Licensing Information<\/h3>\n\n\n\n
\n
\n
\n
Deleting an App<\/h3>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\"){kind=icon}
<\/p><\/div>Managing Users<\/h2>\n\n\n\n
\n
![\"SaaS](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_management_users_tab.png\")
<\/li>\n<\/ul>\n\n\n\nViewing User Details<\/h3>\n\n\n\n
\n