> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getprimo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# SaaS Management overview

> Discover the SaaS your company uses, provision and revoke accounts with the employee lifecycle, and track licences and costs.

SaaS Management centralizes your employees' accounts and their access to SaaS. Connect your email provider first, then discover the SaaS in use and connect the ones you want to provision automatically.

<CardGroup cols={3}>
  <Card title="1. Connect your email provider" icon="envelope" href="/saas/get-started/connect-email-provider">
    Connect Google Workspace or Microsoft Entra ID to enable SaaS discovery, automated provisioning, and identity sync.
  </Card>

  <Card title="2. Activate SaaS discovery" icon="magnifying-glass" href="/saas/get-started/activate-saas-discovery">
    Find every SaaS your employees use by activating SaaS discovery through Google Workspace or the Primo Chrome Extension.
  </Card>

  <Card title="3. Connect your SaaS" icon="plug" href="/saas/connect-apps">
    Connect a SaaS from the catalog with SSO, SCIM, or API credentials to provision accounts automatically.
  </Card>
</CardGroup>

***

## What you can do

* Create accounts and assign licences, groups, and roles at onboarding with [provisioning rules](/saas/rules).
* Revoke access and transfer Drive files and emails at [offboarding](/employees/automated-offboardings).
* Connect any SaaS that supports SAML single sign-on (SSO) as a [custom SAML SaaS](/saas/configure-sso).
* Find shadow IT, unused licences, and the SaaS each employee uses.

## Glossary

### Single sign-on (SSO)

An authentication method that gives an employee access to several SaaS with one set of credentials, for example signing in to Notion with Google.

### System for Cross-domain Identity Management (SCIM)

A standard protocol that automates the account lifecycle (creation, update, deletion) in a SaaS from the identity provider.

### Just-in-time (JIT) provisioning

An account is created automatically the first time an employee signs in to the SaaS through SSO. Notion, Asana, and Zoom support it.

### SSO tax

Some SaaS vendors charge extra to enable SSO or SCIM. See [The SSO Wall of Shame](https://sso.tax/) for a list.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.