When SaaS Management is enabled, the JumpCloud Go browser extension collects data in the user\u2019s browser on their device and sends it to JumpCloud. The data collected can be broken into the two categories that are reported in SaaS Management:<\/p>\n\n\n\n
- \n
- Login information\n
- \n
- User access to sites is monitored:\n
- \n
- The browser extension checks for a specific set of criteria to determine if the site visit is a login, registration, or a return visit using an email address or username for authentication. <\/li>\n\n\n\n
- If the user accesses a site that meets these criteria, the extension then checks if the site matches an existing JumpCloud SSO app in the org or an entry in the SaaS app catalog. <\/li>\n\n\n\n
- Only activity to a site that matches both of these conditions is reported to JumpCloud.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- SaaS Management doesn\u2019t read or collect password data values. <\/li>\n\n\n\n
- Admins can also limit tracking to specific email domains to ensure users\u2019 personal activity is not monitored. For example, you can configure SaaS Management to track activity using only your company\u2019s email addresses. See Browser Extension Domain Tracking Settings<\/a> to learn more. <\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Usage information:\n
- \n
- The browser extension also tracks page navigations to sites to build reports on when users access SaaS apps. There are three types of access:\n
- \n
- A new registration of an app.<\/li>\n\n\n\n
- A login or authentication to the app.<\/li>\n\n\n\n
- A return visit to the URL of the app from a previously authenticated session logged by the browser extension.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div><\/div><\/div>\n\n\n\nCan I prevent users or groups of users from being tracked?\u00a0<\/a>\n
Yes, you can exclude specific user groups from tracking in the SaaS Management settings. See Browser Extension User Tracking Settings<\/a> to learn more.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
How can I track activity only from work email domains?<\/a>\nYou can specify which email domains you want to track and user activity only from these specified domains will be tracked. You can configure this in the SaaS Management settings. <\/p>\n<\/div><\/div><\/div>\n\n\n\n
Can you track logins if users don\u2019t access sites with JumpCloud Go?\u00a0\u00a0<\/a>\nYes, but users need to authenticate to the JumpCloud User Portal and establish a session first for SaaS Management to be able track activity in their browser.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
Does JumpCloud track personal activity and visits to sites that don\u2019t require a JumpCloud login? How does JumpCloud ensure that irrelevant activity is not logged?<\/a>\nJumpCloud collects website visits under the following condition: if a user accesses a SaaS app, cookies are used to detect the account information. After detection, website visits are logged once a day to generate usage data. <\/p>\n\n\n\n
- \n
- Irrelevant activity is not tracked based on the following criteria:\n
- \n
- SaaS Management tracks logins, signups, and already logged in accounts to SaaS apps that are included in our SaaS app catalog.<\/li>\n\n\n\n
- SaaS Management only tracks website visits if an associated account has already been discovered to the given SaaS app.<\/li>\n\n\n\n
- If a user doesn’t have an account associated with the SaaS app and only visits the website, this data is not collected.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div><\/div><\/div>\n\n\n\nDoes JumpCloud detect or track activity using personal email addresses on managed devices even if the settings are configured to limit tracking to work email domains? If so, how long is that data retained and when is it deleted?<\/a>\n
By default, SaaS Management tracks events from all email domains, but you can restrict this in the settings and limit tracking to specific email domains. If the email domain matches a tracked domain, login and usage events are processed and sent to the backend; otherwise, no data is tracked, and all such events are discarded before reaching our backend.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
What happens with sites that require a login but don’t match a JumpCloud SSO app or an app in the SaaS app catalog?<\/a>\nIf an app or website is not part of JumpCloud SSO or the SaaS app catalog, SaaS Management doesn’t track any user activity. SaaS Management only tracks apps from the browser that are part of the SaaS app catalog.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
SaaS Apps<\/h2>\n\n\n\n
Which SaaS apps are supported? Does JumpCloud have a list of predetermined SaaS apps?\u00a0<\/a>\nJumpCloud maintains a list of predetermined SaaS apps called the SaaS app catalog. SaaS Management tracks activity related to these apps only. User interaction with sites not on this list aren’t reported to SaaS Management.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
Can I block user access to a SaaS app in their browser?<\/a>\nYes, SaaS Management gives you multiple options to restrict user access to unapproved apps. You can set the default option to warn or block users when accessing unapproved apps. You can also set specific overrides for each app within its review modal.<\/p>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>Note:<\/strong> \nApp blocking prevents navigation in the user\u2019s browser UI with the extension installed, but doesn\u2019t block network traffic or access to the site on the device.<\/p>\n <\/div><\/div><\/div><\/div>\n<\/div><\/div><\/div>\n\n\n\n
Browser Extension<\/h2>\n\n\n\n
Does SaaS Management work differently if JumpCloud Go is enabled or disabled for the org?<\/a>\nWhen an org has JumpCloud Go enabled, users need to log in to the extension only once and their activities are tracked in every browser on the device that has the extension installed. <\/p>\n\n\n\n
However, if JumpCloud Go is disabled, users need to log in to the JumpCloud User Portal or a JumpCloud SSO app in each browser that has the extension installed. In other words, discovery works only in browsers that a) have the extension installed and b) have a JumpCloud User Portal or JumpCloud SSO app login.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
How can I distribute the JumpCloud Go browser extension to my users?<\/a>
- Irrelevant activity is not tracked based on the following criteria:\n
- Usage information:\n
- User access to sites is monitored:\n