Getting started with Shadow IT detection

Shadow IT is the use of SaaS services by employees without the company’s knowledge. This service detects it.

Shadow IT

In a broad sense, shadow IT includes employees using services like LINE or Messenger with customers. In this documentation, shadow IT refers to services that are not officially approved as company tools. Shadow IT consists of services that the company does not track or control. Detecting and managing it properly is key to stronger security and compliance.

Benefits of detecting shadow IT

Detecting and visualizing shadow IT provides three key benefits.

Benefit	Key effect
Reduced security risk	Identify and address risks of data leaks or malware infections caused by unauthorized services at an early stage.
Compliance adherence	Prevent violations of regulations (such as the Act on the Protection of Personal Information) and internal policies, and handle audits smoothly.
IT asset visibility and optimization	Gain a complete picture of IT assets, leading to cost reduction and the provision of appropriate alternative solutions.

Flow from shadow IT setup to detection

This service detects service usage through the browser extension, Admina Tracker, and login history.

Service (shadow IT) detection Detect Shadow IT How Shadow IT detection works with Google Workspace
Browser extension distribution Distribute and install the browser extension
1. How to distribute the browser extension Windows standalone setup Windows GPO Windows Intune Distribute the browser extension (Mac and MDM) Distribute the browser extension (Google Workspace)
Data collection and review Check usage in the event log
Shadow IT management and operations Use the Shadow IT management ledger

Main shadow IT detection methods

This service collects logs from multiple data sources to accurately track shadow IT usage.

Detection method	Details
Google login (Google Auth)	Via OAuth integration with Google Workspace, usage logs (access logs) are retrieved for SaaS services that employees log into using their Google account.
Microsoft 365 (Microsoft Auth)	Using Microsoft 365 credentials (OAuth), usage logs are retrieved for SaaS services that employees log into with their Microsoft account.
Microsoft Entra ID (Microsoft Auth)	Via integration with Microsoft Entra ID (formerly Azure AD), sign-in logs and usage data are retrieved.
Extension (browser extension)	By distributing a browser extension, the URLs and activity of SaaS services used by employees are detected and recorded in detail.
Admina Tracker	Install Admina Tracker on devices to detect and record SaaS usage from running applications. This includes desktop apps that are not used through a browser.

Introduction

Guides by use case

Guides by feature

Admin settings

FAQ and troubleshooting

Getting started with Shadow IT detection

Shadow IT

Benefits of detecting shadow IT

Flow from shadow IT setup to detection

Main shadow IT detection methods

​Shadow IT

​Benefits of detecting shadow IT

​Flow from shadow IT setup to detection

​Main shadow IT detection methods

Shadow IT

Benefits of detecting shadow IT

Flow from shadow IT setup to detection

Main shadow IT detection methods