Manage Your SaaS in Lumos

Last updated: October 8, 2024

Lumos gives IT teams unprecedented visibility into their company's SaaS environment.

Connect a couple of key integrations to Lumos and you'll quickly see what apps your employees are using, even ones you didn't know about. The results will surprise you!

Better visibility is the first step to SaaS management, but it doesn't stop there. That's why we give you tools to proactively manage your company's SaaS so that you can stay ahead of common issues like license overages and redundant apps.

How Does Lumos Discover SaaS?

When you activate your Lumos account, we ask you to connect your IdP and email provider. See📄 Activating Your Lumos Account

Lumos uses these integrations to do SaaS discovery in three ways.

  • IdP Scanning

    Lumos scans the apps in your company's approved directory (Okta, for example) and sees who has access to which apps.

  • OAuth Tokens

    Lumos finds the OAuth tokens that are linked to employee email accounts and tells you where they've used their email profile to sign in.

  • Email Subject Lines

    Lumos scans the subject lines of emails your employees have received and uses AI to figure out what they've likely signed up for. Billing or password-related emails are strong indicators here!

Once the discovery is complete, you get visibility into approved apps and apps you didn't even know people were using from the Apps tab.

All_Apps.png

Lumos will show you hundreds of apps, many of which you may not have even realized your employees were using!

This visibility transforms the way you can manage your SaaS.

You Need To Manage, Not Just Discover

Discovering all of the apps your company uses is a game-changer, but what you probably want to do is take action on all of this info.

By connecting your IdP + email provider, Lumos also gets rich info about your employees, such as their status (active vs. terminated) and team.

Lumos combines this info with your discovered apps to create a dashboard rich with insights. This dashboard is a great place for you to see where you can save money on unused software and find unsanctioned apps employees have signed up for without IT approval.

Insights_Dashboard.png

The dashboard gives you a quick summary of which apps active employees can access but aren't using (inactive accounts) and which apps still have active accounts linked to terminated employees (terminated user accounts).

From the dashboard, you can deactivate an employee's account in any app that's integrated directly to Lumos in just a few clicks. See📄 How-To: Connect an Integration

Many IT leaders have said that their Lumos investment paid for itself in the first year by just using this dashboard to reclaim unused licenses!

Good Governance Is Proactive, Not Reactive

The main dashboard helps you get your SaaS licenses back on track, but how do you develop good habits so that things don't get messy again?

You can also define proactive workflows that will reach out to admins in the event that someone still has access to an app they aren't using.

Zoom_-_Inactive_Account_Workflow.png

You can define an automated process for any integrated app that notifies admins when someone isn't using it anymore. Admins will get a message via email or Slack that allows them to remove the employee's access with just a single click.

Inactive_Workflow_Alert.png

More Resources

Ready to start proactively managing your SaaS in Lumos? Check out these resources for more info.