> ## Documentation Index
> Fetch the complete documentation index at: https://support.i.moneyforward.com/llms.txt
> Use this file to discover all available pages before exploring further.

# 0. From Getting Started to Shadow IT Detection

> This page explains the flow from getting started to detecting shadow IT.

This service detects situations where employees are using SaaS services without the company's knowledge — known as shadow IT.

### Shadow IT

Shadow IT broadly includes employees using services like LINE or Messenger with customers, but in the context of our service description, shadow IT refers to services that are not officially approved as company tools.

Detecting and properly managing shadow IT — services that the company does not track or control — is key to strengthening security and maintaining compliance.

#### Benefits of detecting shadow IT

Detecting and visualizing shadow IT provides three key benefits.

| Benefit                              | Key effect                                                                                                                                       |
| ------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------ |
| Reduced security risk                | Identify and address risks of data leaks or malware infections caused by unauthorized services at an early stage.                                |
| Compliance adherence                 | Prevent violations of regulations (such as the Act on the Protection of Personal Information) and internal policies, and handle audits smoothly. |
| IT asset visibility and optimization | Gain a complete picture of IT assets, leading to cost reduction and the provision of appropriate alternative solutions.                          |

#### Flow from shadow IT setup to detection

This service detects service usage through browser extension distribution and login history.

1. **Service (shadow IT) detection**
   [Detect services (shadow IT)](/en/it-management/shadow-it/pz89ebygib-discovery)
   [How shadow IT detection works using Google Workspace (reference article)](/en/it-management/shadow-it/8nwq5urwh5-shadow-it)

2. **Browser extension distribution**
   [Distribute the browser extension to detect shadow IT and collect service activity](/en/it-management/shadow-it/7q1wryx3dk-extension)

   1. **How to distribute the browser extension**
      [Distribute Windows browser extensions (GPO/MDM support)](/en/it-management/shadow-it/a496chhkbm-2-7-windows-bat)
      [Distribute Chrome extensions using the Google Workspace Admin Console](/en/it-management/shadow-it/bbb2v722bm-extension-bdv)
      [Distribute and configure Chrome extensions on Mac using configuration profiles and MDM](/en/it-management/shadow-it/udu2t8mwne-mac-plist)
      [Browser Extension Setup Guide (Windows GPO)](/en/it-management/shadow-it/qegqblx598-windows-gpo)

3. **Data collection and review**
   [Check service usage in the event log](/en/it-management/shadow-it/oepl0j5y5g-eventlog)

4. **Shadow IT management and operations**
   [How to use the shadow IT management ledger](/en/it-management/shadow-it/fazgtahebn-shadow-it-management)

<h4 id="detection-methods">
  Main shadow IT detection methods
</h4>

This service collects logs from multiple data sources to accurately track shadow IT usage.

| Detection method                    | Details                                                                                                                                                       |
| ----------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Google login (Google Auth)          | Via OAuth integration with Google Workspace, usage logs (access logs) are retrieved for SaaS services that employees log into using their **Google account**. |
| Microsoft 365 (Microsoft Auth)      | Using Microsoft 365 credentials (OAuth), usage logs are retrieved for SaaS services that employees log into with their **Microsoft account**.                 |
| Microsoft Entra ID (Microsoft Auth) | Via integration with Microsoft Entra ID (formerly Azure AD), sign-in logs and usage data are retrieved.                                                       |
| Extension (browser extension)       | By distributing a **browser extension**, the URLs and activity of SaaS services used by employees are detected and recorded in detail.                        |