Creating an integration for Savvy Shadow IT

Integrate Savvy with Oomnitza and put the spotlight on Shadow IT. Get key security information such as who accessed the apps, which apps were accessed, and when they were accessed. IT Security can monitor the information in Oomnitza to decide whether access should be allowed or denied.
 

Figure: Overview of tasks to sync Savvy with Oomnitza

Plan

Retrieve authorization and connection details from Savvy

Request a bearer token from Savvy. The user who generates the bearer token must be an administrator with a global role.

Request a bearer token from Savvy. The link is accessible only to Savvy subscribers. See Savvy Security API Reference.

Connect

To easily find the records that are uploaded to Oomnitza, it's best practice to create a dedicated user account for each integration. This will make it easier for you to retrieve the records that are uploaded to Oomnitza from the vendor application. 

Creating integration users 

Creating the integration

1. Click Configuration.
2. On the Integrations: Overview page, click Block view .
3. Scroll down to the Shadow IT Integrations section and click the Savvy tile.
4. Click Connect.
5. As API key, enter the authorization token that you generated in Savvy.
6. Type the first few letters of the name of the integration user that you created and then select the user from the list. If an integration user isn’t specified, the integration user is set to [e-mail].
7. Add one or more integration contacts. The persons you add will receive and in-app notification and an email when an integration fails, starts processing but fails to complete processing within 24 hours, or fails to run when scheduled.
8. Select a default Oomnitza role such as Employee. All user records that are uploaded from Netskope will be assigned the role that you select. A record for each user will be added to the People page.
9. Select the lookback synchronization period for the initial load of records from Savvy.
10. Select the format that you want to use for the username.
11. If you don’t want users to log in to Oomnitza, select Restrict access to Oomnitza.
12. Click NEXT.
13. Create a schedule to sync with Oomnitza.
14. Click Finish.

Test

To test the integration, click the tile in the Saas Management Integration section and click RUN NOW. To check for errors, click Sync Sessions.

Monitor

To monitor the SaaS application records that are uploaded to Oomnitza, create a search. 

When you use the search that you created to review the records that were uploaded to Oomnitza on the Software page, the name of the SaaS application that was accessed is displayed, and the name of the user who created the integration. 

To review the users who accessed the SaaS apps, click a record, click an app, and then click the Users tab. Hover the mouse over the last activity info icon to get more details. To view the user’s Oomnitza record, hover the mouse over the user’s name and click the link.

Related articles

• Creating a search for SaaS records
• Creating dashboards for SaaS applications
• Creating a dashboard for unsanctioned SaaS apps