Skip to content
IT Atlas

Applications & Data · SaaS

SaaS

Applications operated entirely by a provider and consumed over the internet, where your responsibilities are identity, configuration and data.

FoundationalUpdated 2026-09-01

Overview

SaaS shifts operations to the vendor but concentrates risk in identity and configuration. Every SaaS tenant is a separate administrative surface with its own roles, sharing model, audit log and integration permissions.

Sustainable SaaS management means a register of applications with owner, data classification, SSO status, provisioning method, admin roles, log retention and exit plan.

Security considerations

  • Require SSO with MFA and SCIM provisioning; local accounts in SaaS bypass every corporate control.
  • Review OAuth integrations and third party app permissions per tenant.
  • Confirm audit log retention and backup/export capability before onboarding.