Auto-Populated Office 365 and Office 365 Client Credentials License Information The SaaS Management integrations with Office 365 and Office 365 Client Credentials offer a License Information integration task that automatically retrieves the name of the Office 365 plan, license type, and total allowed number of licenses. This auto-populated Office 365 and Office 365 Client Credentials license information provides a more complete view of your Microsoft SaaS entitlements and component usage by displaying: Assigned entitlements. User’s license activity (based on the user’s last login) for O365 Exchange, O365 OneDrive, O365 SharePoint, O365 Skype, O365 Yammer, O365 Teams, and O365 Outlook. A 7 Services filter in the Office 365 Activity tab, which helps you narrow the focus of your organization’s Office 365 license activity. The details for this new License Information integration task can be found in the following sections of the Office 365 and Office 365 Client Credentials integration instructions. Information Stored Application Access integration task now stores the last activity date for Outlook. License Information integration task was added, which stores the License Name, License Type, and Purchased Quantity. Minimum Permissions Required The Directory.Read.All permission is required for the License Information integration task. Auto-Populated Office 365/Office 365 Client Credentials License Information This new section provides step-by-step instructions to enable the License Information integration task. API Endpoints Application Roster The following API was added: https://graph.microsoft.com/v1.0/subscribedSkus Application Access The following API was added: https://graph.microsoft.com/beta/reports/getEmailActivityUserDetail  License Information A new API was added https://graph.microsoft.com/v1.0/subscribedSkus   Reclamation The following API was added: https://graph.microsoft.com/v1.0/subscribedSkus Application Task Tracking The Application Task Tracking chart was updated to include a License Information column. Office 365 and Office 365 Client Credentials were added to the License Information column. For more information on new features and enhancements for Flexera One, see  What's New in Flexera One . ... View more

Updated Minimum Permissions Required for G Suite Integration G Suite SaaS application integration issues have occurred due to permissions issues. In response, the Minimum Permissions Required section for the G Suite integration instructions were updated to clarify application permissions based on the integration task and the user role. For more information on new features and enhancements for Flexera One, see  What's New in Flexera One . ... View more

ServiceNow Integration Secured with OAuth2 Authentication SaaS Management now offers OAuth2 with password grant type authentication for ServiceNow. Many organizations are adopting security polices that require this authentication method. The ServiceNow OAuth2 integration instructions describe how to integrate with SaaS Management. ServiceNow OAuth2 has also been added to the Application Task Tracking chart. For more information on new features and enhancements for Flexera One, see  What's New in Flexera One . ... View more

Import Jobs API SaaS Management offers an Import Jobs API that helps you: Add a SaaS application not currently supported by SaaS Management through a direct integration for rightsizing Add and view Single Sign-On (SSO) data for rightsizing and optimization from any SSO provider The following topics are covered in Loading SaaS Data via the Import Jobs API. Import Jobs API Workflow Model Relationships Required Flexera One Roles and API Endpoints Adding a Managed SaaS Application SaaS Data Payload OpenAPI (Swagger) documentation (see API For SaaS Management OpenAPI Specification.) For more information on new features and enhancements for Flexera One, see  What's New in Flexera One . ... View more

Workday Report Options The Workday report options were clarified for the Human Capital Management (Workday) integration. In the section “Sending Report Credentials to the SaaS Management Administrator”, there are two report options: Full and Partial. The following text clarifies each option. Report Options (Full/Partial): This applies to the Report-based Workday integration (“Workday Report” and not “Human Capital Management”) and determines what Flexera One does with the results received from Workday. Full - A complete overwrite of the existing HR Roster in SaaS Management with the new result set received from Workday. Partial (default, if left blank) - Keep the existing HR Roster in SaaS Management, and update it with the result set received from Workday. For more information on new features and enhancements for Flexera One, see  What's New in Flexera One . ... View more

Updated HR Roster Information for Okta Platform Integration The Okta Platform integration now stores the following information for the HR Roster integration task: Location Department For more information on new features and enhancements for Flexera One, see  What's New in Flexera One . ... View more

Updated Minimum Permissions Required and API Endpoints for ServiceNow Integration Minimum Permissions Required The Minimum Permissions Required section for the ServiceNow integration instructions were updated to clarify application permissions based on the integration task and the user role. Role Description Integration Task Name rest_api_explorer This role is required for retrieving the ServiceNow users and activities details. Application Roster Application Access user_admin This role is necessary for user license management in the reclamation task. License Reclamation   API Endpoints The following ServiceNow API endpoints were updated. Application Roster and Application Access https://<<instance>>.service-now.com/api/now/stats/sys_user https://<<instance>>.service-now.com/api/now/table/sys_user Reclamation https://<<instance>>.service-now.com/api/now/v2/table/sys_user/{sys_id} For more information on new features and enhancements for Flexera One, see What's New in Flexera One. ... View more

Active User Count for the Domo Integration To resolve the active user count for the Domo integration, the Application Access integration task now tracks all events, including the user’s last login, using the Domo Audit Log API. Details regarding this update can be found in the following sections of the Domo Integration Instructions: Information Stored for the Application Access integration task Minimum Permissions Required Step 6 of Integrating Domo with SaaS Management - changed application scope to “Audit and User” Application Access API endpoint: https://api.domo.com/v1/audit ... View more

Integrations Secured with OAuth2 Client ID and Client Secret Authentication SaaS Management has expanded the number of SaaS integrations you can authenticate using OAuth2 with Client ID and Client Secret. Many organizations are adopting security polices that require this authentication method. In addition to Office 365, Project, and Visio, SaaS Management now offers OAtuh2 with Client Credentials authentication for Azure, Dynamics 365, and Power BI. The links below provide instructions on how to obtain the client credentials and tenant ID in the Microsoft Azure Portal and how to integrate each application with SaaS Management. Azure Client Credentials Dynamics Client Credentials Power BI Client Credentials For details, see the SaaS Management February 2021 Feature List. ... View more

Updated Minimum Permissions Required for Microsoft SaaS Applications Microsoft SaaS application integration issues have occurred due to permissions issues. In response, the Minimum Permissions Required section for the following SaaS Management integration instructions were updated to clarify application permissions based on the integration task and the user role. Applications with OAuth2 Authentication Method Azure Dynamics 365 Office 365 Power BI Project (Microsoft) Visio Applications with OAuth2 Client Credentials Authentication Method Office 365 Client Credentials Project Client Credentials Visio Client Credentials For details, see the SaaS Management February 2021 Feature List. ... View more

Slack for Enterprise Grid Integration Instructions Slack is a cloud-based proprietary instant messaging platform developed by Slack Technologies. These integration instructions are for users integrating with Slack using the Enterprise Grid. Information Stored The following table describes the available integration tasks and stored data. Integration Task Information Stored Application Roster User ID Email First Name Last Name Active Date Application Access User ID Last Login Notes   NOTE: The information stored is subject to change as enhancements are made to the product. Minimum Permissions Required Administrator Authentication Method OAuth2 API Endpoints Application Roster https://api.slack.com/scim/v1/Users  Application Access https://api.slack.com/audit/v1/logs For details, see the February 2021 SaaS Management Feature List. ... View more

Updated Zoom Integration Instructions The table of stored information for the Application Roster and Application Access integration tasks was updated and an API endpoint was added to the   Zoom Integration Instructions . Application Roster The User ID is now stored in   SaaS Management . Application Access The Meeting Name and Meeting Date are now stored in   SaaS Management . Application Access API Endpoint The following API endpoint is now available. https://api.zoom.us/v2/users/<userId>/meetings   For release details, see the January 2021 release notes. ... View more

Office 365 Client Credentials License Differentiation and License Reclamation License Differentiation SaaS Management offers a license differentiation feature that allows you to view users by license type. To view this license differentiation feature, navigate to the Activity tab of the Office 365 Client Credentials Application Details screen where you can filter and export the Office 365 Client Credentials license types. The total spend for the Office 365 Client Credentials accounts displayed in the Office 365 Client Credentials Application Details screen is based on the license cost details entered in the License Details  tab. For details, refer to  Entering license details for license differentiation . . Application Task Tracking License Differentiation   has been added to Office 365 Client Credentials in the   Application Task Tracking   chart. License Reclamation License Reclamation is the process of taking back licenses from application users. These users fall into one of the following scenarios. Employees who are inactive in your organization’s HR Roster Application users who have never logged in to an application Application users who are inactive Reclaimed licenses help optimize SaaS spend and increase procurement efficiency because you avoid buying additional licenses for new license requests. You also limit security risks by reclaiming licenses from inactive employees in your HR Roster. To achieve these goals,   SaaS Management   provides an automated License Reclamation workflow. In addition,   SaaS Management ’s reclamation history tracks each step of the License Reclamation workflow and each License Reclamation status. For details, refer to   Reclaiming Licenses . The   Office 365 Client Credentials integration instructions   were updated to reference the following license reclamation information: Office 365 Client Credentials License Reclamation Minimum Permissions Required Reclamation API Endpoint Application Task Tracking Office 365 Client Credentials License Reclamation As part of the Reclamation task, only the license that is tracked under the Office 365 Client Credentials application is reclaimed or unassigned. The remaining licenses that are assigned to the user are unaffected. To reclaim an Office 365 Client Credentials license, see   Reclaiming Office 365 User Licenses . Minimum Permissions Required User.ReadWrite.All   permissions are required to modify the license assigned to the user. Reclamation API Endpoint https://graph.microsoft.com/v1.0/users   {id | userPrincipalName}/assignLicense   Application Task Tracking Reclamation   has been added to Office 365 Client Credentials in the   Application Task Tracking chart . For release details, refer to the   January 2021 release notes .   ... View more

Office 365 License Reclamation License Reclamation is the process of taking back licenses from application users. These users fall into one of the following scenarios. Employees who are inactive in your organization’s HR Roster Application users who have never logged in to an application Application users who are inactive Reclaimed licenses help optimize SaaS spend and increase procurement efficiency because you avoid buying additional licenses for new license requests. You also limit security risks by reclaiming licenses from inactive employees in your HR Roster. To achieve these goals, SaaS Manager provides an automated License Reclamation workflow. In addition, SaaS Manager’s reclamation history tracks each step of the License Reclamation workflow and each License Reclamation status. For details, refer to Reclaiming Licenses. The Office 365 integration instructions were updated to reference the following license reclamation information: Office 365 License Reclamation Minimum Permissions Required Reclamation API Endpoint Application Task Tracking Office 365 License Reclamation As part of the Reclamation task, only the license that is tracked under the Office 365 application is reclaimed or unassigned. The remaining licenses that are assigned to the user are unaffected. Minimum Permissions Required User.ReadWrite.All permissions are required to modify the license assigned to the user. Reclaiming Office 365 User Licenses The following steps explain how to reclaim Office 365 user licenses using the SaaS Manager user interface. To reclaim Office 365 user licenses: On the left-hand navigation of Flexera One, click SaaS. On the SaaS Applications menu, click Managed. The Managed Applications screen appears. For a new Office 365 integration, add the Office 365 application. Refer to Adding an Application. Select the Reclamation integration task from the Add Application screen. Click Authorize, and proceed to step 5. For an existing Office 365 integration, on the Managed Applications screen, select the appropriate  Office 365 instance link. Navigate to the  Office 365 Application Details screen and select the Integration tab. In the Action column of the Integration Tasks table, click Disabled to enable the Reclamation integration task. Click Save and proceed to step 6. To enable license reclamation, navigate to the  Office 365 Application Details screen and select the Integration tab. In the Integration Tasks table, select Enabled in the Action column for the Reclamation task. To reclaim Office 365 licenses, refer to Reclaiming Licenses.  Reclamation API Endpoint https://graph.microsoft.com/v1.0/users {id | userPrincipalName}/assignLicense Application Task Tracking Reclamation   has been added to  Office 365  in the   Application Task Tracking   chart. For release details, refer to the   January 2021 release notes.   ... View more

Office 365 Client Credentials  The   Office 365 Client Credentials Integration Instructions   document how to integrate this application with   SaaS Manager   using the authentication method OAuth2 with client credentials. For now, these integration instructions are separate from the   Office 365   integration instructions. A future integration enhancement for Office 365 includes a single application supporting both authentication methods, OAuth2 and OAuth2 with client credentials. For release details, refer to the   December 2020 release notes .   ... View more