Managing a diverse set of SaaS tools is a common challenge for many of our customers. Typically, organizations use hundreds of different SaaS tools, and gaining complete visibility into the usage of each active tool to gain full transparency and combat shadow IT can be a daunting task.


This is where Sastrify's Discovery via SSO integrations comes into play.

IN THIS ARTICLE

How Sastrify uses SSO to discover active subscriptions


Sastrify seamlessly integrates with four major SSO providers to power the tool stack discovery. This feature automatically detects subscriptions, imports your entire tool stack, and continuously updates it by identifying all SaaS tools accessed through your organization's SSO logins.


We simply leverage the centralized nature of SSO tools to provide complete transparency and visibility into usage, allowing you to keep your stack up to date.


When new IT products or subscriptions are discovered, Sastrify will list them under the Discovered tab in your tool stack. You can review these tools and decide whether to mark them as "in use" or archive them if they’re not part of your active subscriptions.


Learn more about how to work with the Discovered page in this article.




Please note that the SSO integration discovery method does not collect spend data - because SSO by its nature does not handle spend information. It will only discover the newly discovered subscriptions and list them on the Discovered page without any specific details.


Which SSO providers do we integrate with?


Google Workspace
✔
Microsoft
✔
Okta
✔
JumpCloud 
✔


How to set up Tool Discovery via SSO (Single Sign-On) integrations



It's important to note that users setting up the usage analytics integration must have administrative (admin role) permissions to both the selected tools/providers and to Sastrify, as certain permissions must be granted for the integration to work properly.



Tool Discovery via SSO (Single Sign-On) integrations can be accessed from Integrations > Discovery.


To set up a new integration:

  1. Click the Connect button next to your preferred SSO provider.

  2. A setup page will open with specific configuration details for the selected provider.

  3. For Google Workspace, Microsoft, and Okta: Toggle the Usage Analytics switch to Active to enable tracking of usage patterns for tools linked to the selected SSO provider.

  4. Follow the technical steps provided to complete the connection:

    • Google Workspace and Microsoft: You will be prompted to sign in, and will be redirected to the admin setup page.

    • Okta: Enter your OAuth 2.0 app credentials. Refer to this guide for a step-by-step walkthrough on setting up an Okta integration.

    • JumpCloud: Provide your API key, retrievable from your JumpCloud's API Settings, to establish the connection.


Frequently Asked Questions

Please refer to the Discovery via SSO Integration FAQ page for a complete list of frequently asked questions