Handling Shadow IT

Duration20 minOfferModule Shadow ITPrerequisitesConfigure detection

Objectives

• I can filter the inventory by status
• I can read the Events, Accounts, and Domains tabs of a detected application
• I can choose between adding, creating a ticket, blacklisting, or ignoring

0 / 3 objectives achieved — check them off as you go through the lesson.

Why it's useful

Detection is not enough: each reported application requires a decision. Either the tool is useful and should become a managed application, with SSO and folder sharing. Or it is tolerated without being integrated. Or it is dangerous and must be blocked. The inventory serves to make these decisions one by one, and to no longer be disturbed by those already made.

Your turn

1. In the sidebar, click on Shadow IT. By default, only Pending applications are displayed. → Shadow IT
2. Click on the detected application from the previous lesson and browse its tabs: Events (what has been reported), Accounts (the credentials used), Domains (the associated subdomains).
3. Open its ⋮ menu and choose Add to allowed applications. The status changes to Completed.
4. Go to the new application and configure its sharing: without sharing, no one has access. → Share an application
5. Return to the inventory, use the Status menu to display Completed and Ignored applications.

Your decision	Action
The tool is useful, we manage it	Add to allowed applications
We need to discuss it with the team first	Create a ticket (followed in the Messages tab)
The tool is tolerated, without integration	Ignore
The tool is prohibited	Blacklist

caution

Blacklist adds the domain to the anti-phishing blacklist and blocks access for your users. This blacklist is managed by the Anti-phishing module: you will find the domain there, and that is where you remove it if needed.

Check your understanding

1You add a detected application to your applications. What remains to be done?

2What does it mean to Ignore an application?

3Which tab shows the credentials used on a detected application?

4Editing the name or icon of an application in the Edit tab…

Key takeaways

• Three statuses: Pending, Completed, Ignored.
• Four decisions: add, create a ticket, ignore, blacklist.
• An added application must still be shared to be used.

Congratulations, you have completed this module. Choose the next one from the à la carte modules.