You don't know your real SaaS count until you check what's connected to your identity provider. Learned this the hard way this week

Комментарии

• u/TheKingOfSpite·1·1 авг. 2026 г., 15:50

  In 365 you can just ban users from signing up to apps of their own volition. Instead they have the option to request access from admins and then we get that. Surely there is a similar feature in Gsuite

  • u/ParticularHat714·1·1 авг. 2026 г., 16:19

    Yeah Google has it too. Yeah you can block unconfigured third party apps and require admin approval for the rest. We just enabled it after we did the audit. problem is it only stops new sign ups, but those that were already connected we have to manually review each grant and revoking what we dont recognize.

• u/[deleted]·1·1 авг. 2026 г., 16:30

  [removed]

• u/Worried-Writer-7033·1·1 авг. 2026 г., 16:41

  Sounds more like a procurement policy gap not just tool gap. Using the sign in with Google exists because there is no friction to stop it. The employees do not need to go through IT because most IT depts will takes 3 days to approve a vendor while you can just be in in 3 seconds if you ignore. We added a step in our onboarding process that mandates manager approval for any SaaS tool linked to company identity. Its basically a policy with teeth. Still these tools gets used but then atleast someone knows about them.

• u/MeetJoan·1·1 авг. 2026 г., 19:02

  This is the gap most SSPMs have — they're built around app inventory, but OAuth grants via 'Sign in with Google/Microsoft' bypass provisioning entirely, so there's nothing to inventory in the first place. The raw OAuth audit you did is the right move and honestly should be a recurring quarterly check, not a one-off. Some orgs pair it with a DLP policy that flags new third-party OAuth grants in real time rather than discovering them retroactively - worth looking at if Google Workspace's admin console exposes that for your tier. Are you planning to make the OAuth review a regular cadence now, or was this a one-time cleanup?