When AI & SaaS Management is enabled, the JumpCloud Go browser extension collects data in the user\u2019s browser on their device and sends it to JumpCloud. The data collected can be broken into the two categories that are reported in SaaS Management:<\/p>\n\n\n
- \n\n
- Login information\n\n
- \n\n
- User access to sites is monitored:\n\n
- \n\n
- The browser extension checks for a specific set of criteria to determine if the site visit is a login, registration, or a return visit using an email address or username for authentication. <\/li>\n\n\n
- If the user accesses a site that meets these criteria, the extension then checks if the site matches an existing JumpCloud SSO app in the org or an entry in the AI and SaaS app catalog.\u00a0<\/li>\n\n\n
- Only activity to a site that matches both of these conditions is reported to JumpCloud.<\/li>\n\n<\/ul>\n\n<\/li>\n\n\n
- AI & SaaS Management doesn\u2019t read or collect password data values.\u00a0<\/li>\n\n\n
- Admins can also limit tracking to specific email domains to ensure users\u2019 personal activity is not monitored. For example, you can configure AI & SaaS Management to track activity using only your company\u2019s email addresses. See Browser Extension Discoverability<\/a> to learn more.\u00a0<\/li>\n\n<\/ul>\n\n<\/li>\n\n\n
- Usage information:\n\n
- \n\n
- The browser extension also tracks page navigations to sites to build reports on when users access AI and SaaS apps. There are three types of access:\n\n
- \n\n
- A new registration of an app.<\/li>\n\n\n
- A login or authentication to the app.<\/li>\n\n\n
- A return visit to the URL of the app from a previously authenticated session logged by the browser extension.<\/li>\n\n<\/ul>\n\n<\/li>\n\n<\/ul>\n\n<\/li>\n\n<\/ul>\n\n<\/div><\/div><\/div>\n\n\n\nCan I prevent users or groups of users from being tracked?\u00a0<\/a>\n
Yes, you can exclude specific user groups from tracking in the AI & SaaS Management settings. See Browser Extension Discoverability<\/a> to learn more.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
How can I track activity only from work email domains?<\/a>\nYou can specify which email domains you want to track and user activity only from these specified domains will be tracked. You can configure this in the SaaS Management settings. <\/p>\n<\/div><\/div><\/div>\n\n\n\n
Can you track logins if users don\u2019t access sites with JumpCloud Go?\u00a0\u00a0<\/a>\nYes, but users need to authenticate to the JumpCloud User Portal and establish a session first for SaaS Management to be able track activity in their browser.<\/p>\n\n\n\n
![](https://jumpcloud.com/"//wp-content//themes//jumpcloud//assets//images//gutenberg-blocks//tip-icon.png/")
<\/p><\/div>Tip:<\/strong> \nIf you are using Google Workspace Managed Chrome browsers, you can enable seamless authentication to start tracking without requiring users to authenticate first. See AI & SaaS Management: Enable JumpCloud Go Extension Seamless Authentication in Chrome<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n<\/div><\/div><\/div>\n\n\n\n
Does JumpCloud track personal activity and visits to sites that don\u2019t require a JumpCloud login? How does JumpCloud ensure that irrelevant activity is not logged?<\/a>\nJumpCloud collects website visits under the following condition: if a user accesses a SaaS app, cookies are used to detect the account information. After detection, website visits are logged once a day to generate usage data. <\/p>\n\n\n\n
- \n
- Irrelevant activity is not tracked based on the following criteria:\n
- \n
- AI & SaaS Management tracks logins, signups, and already logged in accounts to AI and SaaS apps that are included in our app catalog.<\/li>\n\n\n\n
- AI & SaaS Management only tracks website visits if an associated account has already been discovered to the given AI or SaaS app.<\/li>\n\n\n\n
- If a user doesn’t have an account associated with the AI or SaaS app and only visits the website, this data is not collected.<\/li>\n\n\n\n
- JumpCloud Agent only identifies desktop applications that match the AI and SaaS app catalog.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/div><\/div><\/div>\n\n\n\nDoes JumpCloud detect or track activity using personal email addresses on managed devices even if the settings are configured to limit tracking to work email domains? If so, how long is that data retained and when is it deleted?<\/a>\n
By default, AI & SaaS Management tracks events from all email domains, but you can restrict this in the settings and limit tracking to specific email domains. If the email domain matches a tracked domain, login and usage events are processed and sent to the backend; otherwise, no data is tracked, and all such events are discarded before reaching our backend.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
What happens with sites that require a login but don’t match a JumpCloud SSO app or an app in the AI and SaaS app catalog?<\/a>\nIf an app or website is not part of JumpCloud SSO or the AI and SaaS app catalog, AI & SaaS Management doesn’t track any user activity. AI & SaaS Management only tracks apps from the browser that are part of the AI and SaaS app catalog.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
AI and SaaS Apps<\/h2>\n\n\n\n
Which AI and SaaS apps are supported? Does JumpCloud have a list of predetermined AI and SaaS apps?\u00a0<\/a>\nJumpCloud maintains a list of predetermined AI and SaaS apps in the respective app catalog. AI & SaaS Management tracks activity related to these apps only. User interaction with sites not on this list aren’t reported to AI & SaaS Management.<\/p>\n\n\n\n
To check if a SaaS app is supported:<\/strong><\/p>\n\n\n\n
- \n
- Go to Access<\/strong> > AI &<\/strong> SaaS Management<\/strong> > Applications<\/strong> tab.<\/li>\n\n\n\n
- Click + Add App<\/strong>.<\/li>\n\n\n\n
- Under Choose SaaS App<\/strong>, search for the app. If the app appears in the list, it’s supported. <\/li>\n<\/ol>\n\n\n\n
![](https://jumpcloud.com/"//wp-content//themes//jumpcloud//assets//images//gutenberg-blocks//note-icon.png/")
<\/p><\/div>Note:<\/strong> \nIf the app doesn’t appear in the list, you can create a custom app. See Manually Add Apps<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n<\/div><\/div><\/div>\n\n\n\n
Can I block user access to a AI or SaaS app in their browser?<\/a>\nYes, AI & SaaS Management gives you multiple options to restrict user access to unapproved apps. You can set the default option to warn or block users when accessing unapproved apps. You can also set specific overrides for each app within its review modal.<\/p>\n\n\n\n
<\/p><\/div>Note:<\/strong> \nApp blocking prevents navigation in the user\u2019s browser UI with the extension installed, but doesn\u2019t block network traffic or access to the site on the device.<\/p>\n <\/div><\/div><\/div><\/div>\n<\/div><\/div><\/div>\n\n\n\n
Browser Extension<\/h2>\n\n\n\n
What browser extension does AI & SaaS Management use? Which browsers are supported?<\/a>\n\nAI & SaaS Management uses the JumpCloud Go extension for browser tracking. The following browsers are supported:<\/p>\n\n\n
- \n\n
- Google Chrome<\/li>\n\n\n
- Chromium-based browsers (Brave)<\/li>\n\n\n
- Microsoft Edge<\/li>\n\n\n
- Mozilla Firefox<\/li>\n\n<\/ul>\n\n\n
See the Prerequisites in Get Started: JumpCloud Go<\/a> to learn more. <\/p>\n\n<\/div><\/div><\/div>\n\n\n\n
Does AI & SaaS Management work differently if JumpCloud Go is enabled or disabled for the org?<\/a>\n\nWhen an org has JumpCloud Go enabled, users need to log in to the extension only once and their activities are tracked in every browser on the device that has the extension installed. <\/p>\n\n\n
However, if JumpCloud Go is disabled, users need to log in to the JumpCloud User Portal or a JumpCloud SSO app in each browser that has the extension installed. In other words, discovery works only in browsers that a) have the extension installed and b) have a JumpCloud User Portal or JumpCloud SSO app login.<\/p>\n\n\n
<\/p><\/div>Tip:<\/strong> \n\nIf you are using Google Workspace Managed Chrome browsers, you can enable seamless authentication to start tracking without requiring users to authenticate first. See AI & SaaS Management: Enable JumpCloud Go Extension Seamless Authentication in Chrome<\/a>.<\/p>\n\n <\/div><\/div><\/div><\/div>\n\n<\/div><\/div><\/div>\n\n\n\n
How can I distribute the JumpCloud Go browser extension to my users?<\/a>\nYou can use a JumpCloud policy or CBCM to distribute the browser extension. See Get Started: JumpCloud Go<\/a> to learn more.<\/p>\n<\/div><\/div><\/div>\n\n\n\n
General Questions<\/h2>\n\n\n\n
Which Admin Portal roles have access to AI & SaaS Management functionality?<\/a>\n\n- \n\n
- Full Edit Access: Admin, Admin with Billing, and Manager<\/li>\n\n\n
- Read Only: Help Desk, Read Only<\/li>\n\n\n
- Other roles do not have any access at this time.<\/li>\n\n<\/ul>\n\n<\/div><\/div><\/div>\n\n\n\n
- Click + Add App<\/strong>.<\/li>\n\n\n\n
- Go to Access<\/strong> > AI &<\/strong> SaaS Management<\/strong> > Applications<\/strong> tab.<\/li>\n\n\n\n
- Irrelevant activity is not tracked based on the following criteria:\n
- Usage information:\n\n
- User access to sites is monitored:\n\n