Connecting a SaaS lets Factorial IT create, change and delete its accounts for you. Use it for every SaaS where you want access to follow the employee lifecycle.

Feature/Functionality

Overview

There are three ways to add a SaaS. Pick the one the SaaS supports:

• From the SaaS catalogue. For SaaS that Factorial IT connects to out of the box. "SaaS catalogue" lists each one, the vendor plan it needs and what you can manage.
• As a custom SAML SaaS. For any SaaS with SAML single sign-on (SSO). Factorial IT, Google or Entra acts as the identity provider.
• Tracked manually. For SaaS Factorial IT cannot connect to. You give it an owner and handle its accounts through tasks.

How to use

1. Go to SaaS > Directory and click Add a SaaS.
2. Look for the SaaS in the catalogue list below the custom options.
3. Open it and follow the steps on screen. Depending on the SaaS, you will be asked for:
   • SSO: metadata or certificates, so the SaaS trusts Factorial IT.
   • SCIM provisioning: credentials that allow Factorial IT to create and update accounts.
   • API integration: an API key you generate in the SaaS.
4. Open the Logs tab of the SaaS and check that the sync is running.

After connecting

• Set provisioning rules to decide which employees get an account.
• To connect the same SaaS more than once, such as one Google Workspace per entity, see "Connect several instances of the same SaaS".

Troubleshooting and FAQ

Troubleshooting

• The SaaS is not in the catalogue. If it supports SAML SSO, add it as a custom SAML SaaS. If not, track it manually.
• The sync does not show as active in the Logs tab. Go back over the details you entered (metadata, credentials or API key) and check them against the SaaS admin console.

FAQ

1. Which connection type should I use?
   Whichever the SaaS offers. The steps on screen ask only for what that SaaS needs.
    
2. Can I connect two accounts of the same SaaS?
   Yes. Each one becomes its own instance. See "Connect several instances of the same SaaS".