Application Event - SaaS Integration

Event

SaaS Integrations - any connected SaaS Apps - specifically shows the link (giving possibly dangerous permissions) is detected between SaaS applications.

Recommended action

Contact the customer or user and make them aware of this event. Confirm the customer is aware of the external data source or SaaS app that has been granted access. This alert will appear only once. Future connections will be recorded as logged events. If the external data source or SaaS App integrations are not authorized, immediately block access in the primary SaaS App management panel. 

For Microsoft 365, refer to Enterprise Applications.

For Google Workspace, refer to 3rd party app access.

Alert type

Critical alert