Managing a diverse set of SaaS tools is a common challenge for many of our customers. Typically, organizations use hundreds of different SaaS tools, and gaining complete visibility into the usage of each active tool to gain full transparency and combat shadow IT can be a daunting task.


This is where Sastrify's Discovery via SSO integrations come into play.

IN THIS ARTICLE

How Sastrify uses SSO to discover active subscriptions


Sastrify seamlessly integrates with four major SSO providers—Google, Okta, Microsoft, and Jump—to power the tool stack discovery. This feature automatically detects subscriptions, imports your entire tool stack, and continuously updates it by identifying all SaaS tools accessed through your organization's SSO logins.


We simply leverage the centralized nature of SSO tools to provide complete transparency and visibility into usage, allowing you to keep your stack up to date.


When new IT products or subscriptions are discovered, Sastrify will list them under the Discovered tab in your tool stack. You can review these tools and decide whether to mark them as "in use" or archive them if they’re not part of your active subscriptions.


Learn more about how to work with the Discovered page in this article.




Please note that the SSO integration discovery method does not collect spend data - because SSO by its nature does not handle spend information. It will only discover the newly discovered subscriptions and list them on the Discovered page without any specific details.


Which SSO providers do we integrate with?


Google Workspace
✔
Microsoft
✔
Okta
✔
JumpCloud 
✔


How to set up Tool Discovery via SSO (Single Sign-On) discovery integrations


Tool Discovery via SSO (Single Sign-On) discovery integrations can be accessed from Integrations > Discovery.



To set up a new integration:

  1. Click the "Connect" button on any of the SSO provider options.
  2. If your company uses multiple providers supported by Sastify, you can connect to multiple providers and activate them simultaneously.
  3. It's important to note that users setting up the integration to Google, Microsoft, or Okta must have administrative permissions, as certain permissions must be granted for the integration to work properly.
  4. A specific provider page will open with specific information about each provider. Click the "Connect" button to continue.
  5. You can also opt to enable usage analytics tracking to monitor usage patterns for each tool associated with your chosen SSO provider. We highly recommend activating this feature. Simply toggle the switch to 'active'.
  6. Proceed with the technical steps to create the connection.
    1. Google Workspace & Microsoft SSO will direct you to the admin page;
    2. Okta asks for your API token & domain name;
    3. While JumpCloud will require an API key to connect.

Tool-Specific Requirements & Permissions


For Microsoft:

To set up and configure usage analytics integration for Microsoft, you need the following roles:



For Okta:

Sastrify will need read-only access to the following endpoints:

  • /api/v1/apps
  • /api/v1/apps/{appid}/users
  • /api/v1/users
  • /api/v1/logs

Frequently Asked Questions

Please refer to the Discovery via SSO Integration FAQ page for a complete list of frequently asked questions