Applications & Data · SaaS
SaaS
Applications operated entirely by a provider and consumed over the internet, where your responsibilities are identity, configuration and data.
FoundationalUpdated 2026-09-01
Overview
SaaS shifts operations to the vendor but concentrates risk in identity and configuration. Every SaaS tenant is a separate administrative surface with its own roles, sharing model, audit log and integration permissions.
Sustainable SaaS management means a register of applications with owner, data classification, SSO status, provisioning method, admin roles, log retention and exit plan.
Security considerations
- Require SSO with MFA and SCIM provisioning; local accounts in SaaS bypass every corporate control.
- Review OAuth integrations and third party app permissions per tenant.
- Confirm audit log retention and backup/export capability before onboarding.
