Tracking corporate SaaS app account logins
By adding your corporate domains to the FortiDLP Console, you can identify when users log in to corporate SaaS app accounts via browser login events. These domains will be compared with the domain of the email address used to log in, and if there is a match, the event will be classified as corporate. If you do not provide any domains or if no domains are matched, the event will be classified as non-corporate.
These classifications will also be used in the SaaS apps module to report the number of apps that have been accessed with a corporate or non-corporate account at least once. For more information, refer to Dashboard tab in the FortiDLP Console User Guide.
|
Your corporate classifications will only apply to events generated after your domains are added or updated. Subdomains will match. For example, if one of your corporate domains is "company.com" and a user logs in with the account username "mary@sales.company.com", the login event will be classified as corporate. Domainless logins, where the username is not an email address, are classified as non-corporate by default. You can classify them as corporate on a per-app basis in the SaaS apps module. For more information, refer to Classifying domainless SaaS app account logins in the FortiDLP Console User Guide. |
How to add your corporate email address domains
- In the FortiDLP Console, on the left-hand sidebar, click
. - Under General, select the SaaS apps tab.
- In the Track corporate SaaS app account logins section, type a list of your corporate domains, with each domain starting on a new line.
- Click Save.