![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\"){kind=icon}
<\/p><\/div>
Review Get Started: AI & SaaS Management<\/a> for a feature overview and FAQ: AI & SaaS Management<\/a> to learn more.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Prerequisites<\/strong>:<\/p>\n\n\n\n Considerations<\/strong>:<\/p>\n\n\n\n To start using JumpCloud SaaS Management, enable it in the Admin Portal:<\/p>\n\n\n\n If your data is stored outside of the US, check which login URL you should be using depending on your region. If your organization uses LDAP, RADIUS, or requires firewall allow list configuration, the Fully Qualified Domain Names (FQDNs) will also be region specific. See JumpCloud Data Centers<\/a> for the URLs, FQDNs, and IP addresses.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n After enabling AI & SaaS Management, existing JumpCloud SSO apps are added automatically. For SaaS app discovery on user devices, the browser extension begins tracking activity within five minutes. Users must authenticate to the User Portal first to establish a session for AI & SaaS Management to begin tracking.<\/p>\n\n\n\n Users aren’t notified directly when AI & SaaS Management is toggled on. However, you can choose to display an info card in the User Portal to inform them. Jump to SaaS Management on User Portal<\/a> to learn more.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Next, configure management settings to customize AI & SaaS Management behavior.<\/p>\n\n\n\n Use these settings to fine tune browser extension, enable device discovery, exclude certain user groups, and customize action and responses to unapproved apps. Choose to display a SaaS Management info card for users in their User Portal > Security page. This informs users that SaaS Management is enabled and which email domains are being tracked. Configure the methods AI & SaaS Management uses to discover users and apps.<\/p>\n\n\n\n JumpCloud Go only tracks app usage after a user signs into the JumpCloud User Portal or a managed SSO app. Data for dormant accounts will not appear until the next user login occurs.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n When users register, log in, or return to a SaaS app, they use an email address or username to authenticate. Control what activity is captured based on the email address domain used:<\/p>\n\n\n\n Leverage user groups to control which users in your org are tracked by the browser extension.<\/p>\n\n\n\n When you classify discovered apps as unapproved, select the default action AI & SaaS Management takes to warn or block users in their browser with the extension installed:<\/p>\n\n\n\n Jump to Setting Browser Access Restrictions<\/a> to see what these messages look like when displayed in the browser.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Customize the default warning and blocking messages users see when accessing unapproved apps. <\/p>\n\n\n\n You can override these default settings for each app individually when you review the app. Jump to Reviewing and Editing Apps<\/a> to learn more. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n Define groups of users who won\u2019t receive warning or blocking messages and bypass AI & SaaS Management restrictions. You can also define excluded user groups for each app during the review process. Jump to Setting Browser Access Restrictions<\/a>.<\/p>\n\n\n\n This feature requires JumpCloud Go browser extension version 1.3.10 and later.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n This setting automatically deletes app accounts associated with removed JumpCloud users. You can specify the number of days (15, 30, or 90) after a JumpCloud user is removed for their associated app accounts to be deleted. You can also set this to Never<\/strong> to prevent account auto-deletion.<\/p>\n\n\n\n Customize how AI & SaaS Management sends email notifications to admins.<\/p>\n\n\n\n Proactively manage generative AI apps by setting their approval status before they are fully discovered in your org.<\/p>\n\n\n\n Manage AI usage, adoption, and governance across your org with a dedicated Shadow AI Dashboard<\/strong>. You can view key insights on AI adoption rate, users with AI access, usage by department, and most active users. Approve<\/strong>, Unapprove<\/strong>, or Ignore <\/strong>applications in the AI App Catalog<\/strong> to define their status immediately, without waiting for discovery. This secures your org against high-risk generative AI apps from the start, providing early governance and control over which AI apps your users can access. Jump to Setting Browser Access Restrictions<\/a>. Connect AI & SaaS Management directly to over 50 SaaS and upcoming AI service providers to expand discovery and tracking capabilities. Connectors use APIs to collect information directly from these service providers. See AI & SaaS Management Connectors<\/a> to learn more.<\/p>\n\n\n\n Now that you\u2019ve enabled and configured AI & SaaS Management, you can review and manage your apps and connected users. <\/p>\n\n\n\n When you enable AI & SaaS Management, JumpCloud begins tracking application activity via the browser extension, connectors, and the JumpCloud Agent. Once data populates, the Overview<\/strong> tab serves as a dashboard for all SaaS and desktop application activity within your org. This tab includes key metrics and insights:<\/p>\n\n\n\n See a list of all SaaS apps discovered in your org. Apps are broken out into the following categories:<\/p>\n\n\n\n Click Edit Columns<\/strong> to select columns to display. Click Export<\/strong> to export a CSV file of your applications list which can be used for financial or compliance reporting.<\/p>\n\n\n\n In addition to automatic discovery, you can easily add applications manually to start tracking, warning, and blocking access when necessary.<\/p>\n\n\n\n Apps discovered by SaaS Management appear in the Newly Discovered <\/strong>tab until you classify them as approved, unapproved, or ignored. You can also edit details for apps already classified.<\/p>\n\n\n\n To review or edit apps<\/strong>:<\/p>\n\n\n\n When bulk reviewing apps, the same settings apply to all selected app.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n You can also reclassify apps by going to appropriate tab (Approved<\/strong>, Unapproved<\/strong>, or \n
\n
\n
Enabling SaaS Management <\/h2>\n\n\n\n
\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\"\/){kind=icon}
<\/p><\/div>\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\"){kind=icon}
<\/p><\/div>Configuring General Settings<\/h2>\n\n\n\n
![\"JumpCloud](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2025\/12\/AI-and-SaaS-general-settings-scaled.png\")
<\/p>\n\n\n\nSaaS Management on User Portal<\/h3>\n\n\n\n
![](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/10\/saas_management_user_portal_security.png\")
<\/p>\n\n\n\nDiscovery Methods<\/h3>\n\n\n\n
\n
<\/p><\/div>\n
Browser Extension Discoverability <\/h3>\n\n\n\n
Domain Tracking<\/h4>\n\n\n\n
\n
User Tracking <\/h4>\n\n\n\n
\n
Browser Access Restrictions<\/h3>\n\n\n\n
Default Action for Unapproved Apps <\/h4>\n\n\n\n
\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\"){kind=icon}
<\/p><\/div>Default Messaging for Unapproved Apps<\/h4>\n\n\n\n
<\/p><\/div>\n
\n
Exclude from Browser Access Restrictions<\/h4>\n\n\n\n
<\/p><\/div>Auto-delete Former Employee Accounts<\/h3>\n\n\n\n
Notifications<\/h3>\n\n\n\n
\n
![\"Auto-delete](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2025\/06\/saas_mgmt_settings_v3_pt2.png\")
<\/li>\n<\/ul>\n\n\n\nMonitoring Shadow AI<\/h2>\n\n\n\n
Shadow AI Dashboard<\/h3>\n\n\n\n
![\"JumpCloud](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2025\/12\/AI-SaaS-Management-overview.png\")
<\/p>\n\n\n\nDefining AI App Status via the AI App Catalog<\/h3>\n\n\n\n
![\"JumpCloud](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2025\/12\/AI-app-catalogue.png\")
<\/p>\n\n\n\nConfiguring Connectors<\/h2>\n\n\n\n
Managing Applications <\/h2>\n\n\n\n
Overview Tab<\/h3>\n\n\n\n
![\"JumpCloud](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2025\/12\/Ai-and-SaaS-overview.png\")
<\/p>\n\n\n\n\n
Applications Tab<\/h3>\n\n\n\n
![\"JumpCloud](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2025\/12\/AI-and-SaaS-overview-1.png\")
<\/p>\n\n\n\n\n
Manually Add Apps<\/h3>\n\n\n\n
\n
![\"add](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/11\/saasmgmt_addapp1.png\")
<\/li>\n\n\n\n\n
\n
![\"add](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/11\/saasmgmt_addapp2.png\")
<\/li>\n<\/ol>\n<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>\n
\n
Reviewing and Editing Apps<\/h3>\n\n\n\n
\n
\n
\n
<\/p><\/div>\n
\n
\n
<\/p><\/div>