Assigned and Shadow IT Users

Question

I see the Assigned Users and Shadow IT Users columns in the Apps table. What do these mean?

Answer

Both of these numbers are calculated by looking at the Account Status column for the app and counting accounts in a specific status.

• Assigned Users - The total number of accounts with an Account Status of "Active", "Access created", or "Staged".

• Shadow IT Users - The total number of accounts with an Account Status of "Discovered". If a possible user account was discovered for this employee via Shadow IT discovery, and the employee doesn't have access to this app in your IdP or an account in the app (confirmed via integration), their account is labeled as "Discovered". See📄 How-To: Connect an Integration

FAQs

If an account is included in the "Assigned Users" count, does that mean they have an active account in the service provider?

No!

The only time this is guaranteed is if the source of the user account has a Lumos logo next to it. See📄 App Source Reference

The Assigned Users number also consists of people with a tile assigned to their identity in your IdP (Okta, OneLogin, etc.). However, having a tile assigned does not guarantee they have an account in the service provider (if the tile represents a "bookmark app", for example).

Why does Lumos call "discovered" accounts "Shadow IT"?

Many of our customers believe that possible accounts discovered via Shadow IT that don't have a confirmed account in the app (or in your IdP) should be investigated further, so we label these as shadow IT.