# Site Name Torii Support Documentation ## URL https://support.toriihq.com/hc/en-us # Page Title App Owner Access - For New App Owners ## Page URL https://support.toriihq.com/hc/en-us/articles/10782531198619--App-Owner-Access-For-New-App-Owners ## Page Description Hello! and Welcome to Torii:) You are now a proud owner of an application in Torii! What is Torii? Torii is a SaaS management tool that ## Details ### How can we help? ### App Owner Access - For New App Owners Hello! and Welcome to Torii:) You are now a proud owner of an application in Torii! Torii is a SaaS management tool that automatically discovers and maps all cloud applications, licenses, and users. It automates all daily SaaS-related tasks resulting in SaaS cost reductions, less time spent on managing its technology and improved productivity and internal policies so that you get the most out of your software.Torii is Managed by IT, but you, as an app owner, can view and manage apps assigned to you. #### What can you do in Torii? #### Why am I an app owner? You were assigned as an app owner because the organization trusts you to help manage part of the org SW stack, To ensure that there are no wasted licenses and expenses and that only the company-approved users are using it. Usually, you will become the app owner for the following reasons: #### How does Torii help you to manage the SaaS app? Torii provides a holistic view of the applications you are in charge of. Torii is the organization's primary tool for managing its software.The company uses Torii to learn the primary contacts for each app, its business justification, how much it costs the organization, etc. #### How can I enter Torii? Enter Torii using the link in the email notification you received. #### Application Information # Page Title App Owner Access - For Torii Admins ## Page URL https://support.toriihq.com/hc/en-us/articles/10234789921051--App-Owner-Access-For-Torii-Admins ## Page Description Overview As a Torii admin, you can provide the different Application Owners access to Torii from which they can View, Control, and ## Details ### How can we help? ### App Owner Access - For Torii Admins As a Torii admin, you can provide the different Application Owners access to Torii from which they can View, Control, and Manage the applications under their responsibility. Note that External users can not access Torii via the App owner access mechanism. Designated guidance for app owners is located under The Application Owners category in our Help Center. There, they can find targeted information (articles & a video) for App management.Additionally:When first accessing Torii, the app owners will get a popup referring them to the article and video.Also, while using the Torii app, clicking the "help" icon will direct them to this category. #### Who is an App owner? Read more about it in the "Assign Application Owners" article #### View and Manage App owners #### Email notification The email notification is sent only to new Torii users who haven't already received an invitation to Torii. #### What can an App owner do? App Owners who are not Torii users (like admin, IT, Procurement, etc) will be able to view only the Application information under their ownership. App Owners who also have a defined Torii role like IT admin, Procurement, or another custom role: #### Information about SSO Q: Can a Torii user be assigned as an App owner? A: Yes, and it is expected that some of the Torii users will also act as App owners, mostly for the core IT Apps. Torii users have scopes and permissions derived by the role assignment defined by the Admin. The role assigned to the Torii user defines this user's capabilities throughout the Torii platform. The main difference is in the single App page, where the Torii user will gain additional permissions over his owned Apps Q: What will happen once I revoke the Access to App Owners? A: Once revoking access, all App owners' access to Torii is canceled. No email notification is sent. The Apps owner's assignment doesn't change. Only their access to Torii is revoked. Q: Can I revoke a specific App owner's access to Torii? A: It can only be done by changing the app's ownership Q: Can App Owners change their ownership over Apps? A: Only users with Applications "Take action" permission level can change app ownership Q: What happens when assigning an additional App to an App owner? A: The added App will be included in the view created for that App Owner; no additional invite mail will be sent Q: What can I do if an app owner hasn't received the email invitation? Re-invite users is available for PENDING users (users who have not followed the log-in to Torii via email). Re-assign the employee to the app as an App owner. App ownership assignment triggers Email invites to users who do not have access to Torii. Q: Who will be the invite sender? A: The invite email is sent from the user who has assigned an owner to an app Q: Can external users get access to Torii via the App Owner access? A: No, external users can not access Torii via the App owner access mechanism # Page Title App Owner Access Overview (for App Owners) ## Page URL https://support.toriihq.com/hc/en-us/articles/11519737289371--App-Owner-Access-Overview-for-App-Owners ## Page Description Related Articles App Owner Access - For New App Owners App Owner - Recommended Articles App Owner - Recommended Videos Importing ## Details ### How can we help? ### App Owner Access Overview (for App Owners) # Page Title Browser Extension Overview ## Page URL https://support.toriihq.com/hc/en-us/articles/8176041690907--Browser-Extension-Overview ## Page Description Additional Resources Torii's Browser Extension Whitepaper Related Articles Download Torii's Browser Extension Introduction to Torii's ## Details ### How can we help? ### Browser Extension Overview ##### Additional Resources Torii's Browser Extension Whitepaper # Page Title Closed App in Use, New App Discovered, and Application Meets Criteria Trigger Overview ## Page URL https://support.toriihq.com/hc/en-us/articles/8437052640667--Closed-App-in-Use-New-App-Discovered-and-Application-Meets-Criteria-Trigger-Overview ## Page Description Related Articles Workflow Triggers Overview ## Details ### How can we help? ### Closed App in Use, New App Discovered, and Application Meets Criteria Trigger Overview # Page Title Contract Meets Criteria Trigger Overview ## Page URL https://support.toriihq.com/hc/en-us/articles/8440877501851--Contract-Meets-Criteria-Trigger-Overview ## Page Description Related Articles Workflow Triggers Overview ## Details ### How can we help? ### Contract Meets Criteria Trigger Overview # Page Title Deploying the App Catalog ## Page URL https://support.toriihq.com/hc/en-us/articles/8837031887003--Deploying-the-App-Catalog ## Page Description Related Articles Application Catalog Communication Application Catalog User Guide ## Details ### How can we help? ### Deploying the App Catalog # Page Title Deploying the Browser Extension ## Page URL https://support.toriihq.com/hc/en-us/articles/8436454312603--Deploying-the-Browser-Extension ## Page Description Related Articles Browser Extension Communication Streamline Browser Extension Deployment Activating Torii's Browser Extension ## Details ### How can we help? ### Deploying the Browser Extension # Page Title [DRAFT] Q&A: Why is the Google Workspace integration connection stuck on "Testing"? ## Page URL https://support.toriihq.com/hc/en-us/articles/17584217780123--DRAFT-Q-A-Why-is-the-Google-Workspace-integration-connection-stuck-on-Testing ## Page Description Question/Issue: The Google Workspace integration gets stuck in "Testing". Cause: The organization's IT Security department had ## Details ### How can we help? ### [DRAFT] Q&A: Why is the Google Workspace integration connection stuck on "Testing"? Question/Issue: The Google Workspace integration gets stuck in "Testing". The organization's IT Security department had deployed an access policy which blocked API connection. # Page Title Freshdesk Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/17755741077147--Freshdesk-Integration ## Page Description Overview Torii integrates with your Freshdesk account and syncs: Users list - Name, email and status License - Shows if the user has ## Details ### How can we help? ### Freshdesk Integration Torii integrates with your Freshdesk account and syncs: Note that Torii can support multiple FreshService accounts Make sure you have a Freshdesk account and you are the organization admin. #### Connect Freshdesk Integration Go to the Integrations page and click on the Freshdesk tile In the "Connect Freshdesk" window, enter: and click Connect #### Integration Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table # Page Title Google Workspace Integration Overview ## Page URL https://support.toriihq.com/hc/en-us/articles/10805244384411--Google-Workspace-Integration-Overview ## Page Description Related Articles: Google Workspace (G Suite) Integration How to Integrate Google Workspace ## Details ### How can we help? ### Google Workspace Integration Overview # Page Title How to Integrate Google Workspace ## Page URL https://support.toriihq.com/hc/en-us/articles/10809941043227--How-to-Integrate-Google-Workspace ## Page Description Related Articles Google Workspace (G Suite) Integration Google Workspace Integration Overview ## Details ### How can we help? ### How to Integrate Google Workspace # Page Title How to Save a Filter as a Custom View ## Page URL https://support.toriihq.com/hc/en-us/articles/9326263503003--How-to-Save-a-Filter-as-a-Custom-View ## Page Description Related Articles Filtering the Users Table Recommended Custom Views to Save ## Details ### How can we help? ### How to Save a Filter as a Custom View # Page Title How to Use Matching Rules ## Page URL https://support.toriihq.com/hc/en-us/articles/10223214248859--How-to-Use-Matching-Rules ## Page Description Related Articles What Are Matching Rules? ## Details ### How can we help? ### How to Use Matching Rules # Page Title License Not in Use and License Count Threshold Trigger Overview ## Page URL https://support.toriihq.com/hc/en-us/articles/8437141242011--License-Not-in-Use-and-License-Count-Threshold-Trigger-Overview ## Page Description Related Articles Workflow Triggers Overview ## Details ### How can we help? ### License Not in Use and License Count Threshold Trigger Overview # Page Title Manually Running a Workflow ## Page URL https://support.toriihq.com/hc/en-us/articles/8441203216667--Manually-Running-a-Workflow ## Page Description Related Articles Manually Run Workflows ## Details ### How can we help? ### Manually Running a Workflow # Page Title NetSuite Integration Overview ## Page URL https://support.toriihq.com/hc/en-us/articles/9315448147355--NetSuite-Integration-Overview ## Page Description Related Articles NetSuite Integration How to Use Matching Rules How to Use Matching Rules ## Details ### How can we help? ### NetSuite Integration Overview # Page Title Personalization Tokens Overview ## Page URL https://support.toriihq.com/hc/en-us/articles/8441066921755--Personalization-Tokens-Overview ## Page Description Related Articles Personalization Tokens Overview Default Personalization Tokens List ## Details ### How can we help? ### Personalization Tokens Overview # Page Title Retroactively Running a Workflow ## Page URL https://support.toriihq.com/hc/en-us/articles/10222954295323--Retroactively-Running-a-Workflow ## Page Description Related Articles How to Activate a Workflow ## Details ### How can we help? ### Retroactively Running a Workflow # Page Title Running a Single Action ## Page URL https://support.toriihq.com/hc/en-us/articles/8441071057435--Running-a-Single-Action ## Page Description Related Articles Action Statuses Overview Why Are Actions 'In Progress' for So Long? ## Details ### How can we help? ### Running a Single Action # Page Title SAP SuccessFactors Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/10237590554651--SAP-SuccessFactors-Integration ## Page Description Set up SAP SuccessFactors integration and get all the insights in Torii's dashboard Overview Torii integrates with SAP SuccessFactors and ## Details ### How can we help? ### SAP SuccessFactors Integration Torii integrates with SAP SuccessFactors and syncs: Users list - All employees with company email, Roles, Status & License #### Connect SuccessFactors integration to Torii #### Update the User Lifecycle settings Now, to ensure you get the user lifecycle information in Torii, define SuccessFactors as your Human resource management system. On the next scheduled sync, the user's status will be reflected in Torii. # Page Title Setting Up Request Access Policies ## Page URL https://support.toriihq.com/hc/en-us/articles/8836910227739--Setting-Up-Request-Access-Policies ## Page Description Related Articles How to Automate Request Access Policies ## Details ### How can we help? ### Setting Up Request Access Policies # Page Title Setting Up the App Catalog ## Page URL https://support.toriihq.com/hc/en-us/articles/8836935729051--Setting-Up-the-App-Catalog ## Page Description Related Articles Introduction to the App Catalog App Catalog Settings ## Details ### How can we help? ### Setting Up the App Catalog # Page Title User Joins, User Left, and User Meets Criteria Trigger Overview ## Page URL https://support.toriihq.com/hc/en-us/articles/8437095291931--User-Joins-User-Left-and-User-Meets-Criteria-Trigger-Overview ## Page Description Related Articles Workflow Triggers Overview ## Details ### How can we help? ### User Joins, User Left, and User Meets Criteria Trigger Overview # Page Title Workflows Overview ## Page URL https://support.toriihq.com/hc/en-us/articles/8440885258267--Workflows-Overview ## Page Description Related Articles Workflow Triggers Overview ## Details ### How can we help? ### Workflows Overview # Page Title 15Five Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/15952992902427-15Five-Integration ## Page Description Overview Torii integrates with 15Five and syncs the list of users, their app status, and licenses. Torii can sync multiple 15Five ## Details ### How can we help? ### 15Five Integration #### Integrate 15Five with Torii # Page Title 1Password Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5168368550171-1Password-Integration ## Page Description Setup your 1Password integration and get all the insights in Torii's dashboard Torii integrates with 1Password and syncs the user list ## Details ### How can we help? ### 1Password Integration Setup your 1Password integration and get all the insights in Torii's dashboard Torii integrates with 1Password and syncs the user list and the user's status and last authentication date. The last authentication date can be seen on 1Password's dashboard in the Reports -> Team Report page. In order for Torii to pull sign-in info from 1Password, you will be asked to provide a Master Password and Secret Key of an administrator. We suggest to create a dedicated administrator user for the integration which has no access to any secrets or vaults data and only has permissions to read/take-action on users, groups and vaults. Note: This integration does not support 1Password accounts with Multi-Factor Authentication enforced. In this case, if you have a 1Password SCIM Bridge, you can use the 1Password SCIM Bridge integration to connect 1Password. We recommend using the regular 1Password integration (detailed on this page). Torii allows to take actions, such as inviting, suspending and removing users. Here are some notes regarding the different actions: ##### Inviting a user to 1Password This action is available only to accounts with a 1Password Business Subscription. The process of inviting a user is: Use the action from Torii to invite users to your 1Password account. 1Password will send an email to the users, asking them to complete their registration. A 1Password account owner needs to confirm each user on 1Password's website. ##### Granting access to vault(s) Users can be added to selected vaults. If a user already has access to the vault, no action will be taken. If a user is part of a group that already has access to the vault, the user will not be added to the vault. ##### Revoking access to vault(s) Users can be removed from selected vaults. Note that if a user has access to the vault via his Group membership, that access will not be revoked. It is advised to remove users from Groups in order to revoke all access to vaults. # Page Title 1Password SCIM Bridge Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/34390372618139-1Password-SCIM-Bridge-Integration ## Page Description We recommend using the 1Password integration which provides more data and capabilities. If you cannot use it due to enforced MFA and ## Details ### How can we help? ### 1Password SCIM Bridge Integration We recommend using the 1Password integration which provides more data and capabilities. If you cannot use it due to enforced MFA and prefer to use the SCIM Bridge integration, please contact support (support@toriihq.com) and request the addition of the 1Password SCIM Bridge integration to your account. To connect 1Password SCIM Bridge to Torii, follow these steps: Once the integration is successfully connected and synced, a green checkbox will appear # Page Title 360Learning Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5730830130587-360Learning-Integration ## Page Description Overview Torii integrates with 360Learning and syncs the users: emails, names, photos, statuses, and last login time. Prerequisites ## Details ### How can we help? ### 360Learning Integration Torii integrates with 360Learning and syncs the users: emails, names, photos, statuses, and last login time. The API key is available for clients with a subscription of a minimum of 12 months. Request an API Key & Company ID by contacting your Customer Success Partner (CSP) or by creating a request from the app settings #### Integration Process To connect 360Learning to Torii, follow these steps: Go to the Torii's Integrations page and click the 360Learning tile In the Connect 360Learning window, enter the Company ID In the Access token field, paste the access token Once the integration is connected and synced, it will display a green checkbox # Page Title Abstract Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5730736521755-Abstract-Integration ## Page Description Overview Torii integrates with Abstract and syncs the users' list. Prerequisites Users are authenticated using SAML single ## Details ### How can we help? ### Abstract Integration Torii integrates with Abstract and syncs the users' list. #### Connect Abstract to Torii To connect Abstract to Torii, follow these steps: Once the integration is connected and synced, it will display a green checkbox. # Page Title Activate the Torii Browser Extension as an End-User ## Page URL https://support.toriihq.com/hc/en-us/articles/5146307348251-Activate-the-Torii-Browser-Extension-as-an-End-User ## Page Description Learn how end-users should activate the installed Torii browser extension Overview Once the Torii browser extension is installed, either ## Details ### How can we help? ### Activate the Torii Browser Extension as an End-User Learn how end-users should activate the installed Torii browser extension Once the Torii browser extension is installed, either manually or by organization deployment, the end-user will be asked to activate the extension by signing in. The sign-in process is short and simple, there is no need to sign up first for a Torii account. Note: as an alternative, you can send a Browser Activation Email to your users. The email will allow a one-click activation of the extension. #### Deployment Video Deploying the Browser Extension Step 1: Click on the Torii extension in your browser's extensions bar. Step 3: Enter your business email address and click Next Step 4: Click Go in order to get a Magic Link sent to your email. The magic link allows one-click login to Torii and will activate the extension. Step 5: Check your email inbox for a mail with the subject of Sign in to Torii and click the Sign in as button. Step 6: You should see the following success screen. The extension has been activated and you can close the tab. Step 7: The extension will now show you assigned in with your email address. That's it. If you'd like to learn more about the extension, please see the extension documentation for end-users. # Page Title Add Branching Logic to Workflows (IF ELSE branch action) ## Page URL https://support.toriihq.com/hc/en-us/articles/19586813353755-Add-Branching-Logic-to-Workflows-IF-ELSE-branch-action ## Page Description Introduction SaaS management processes are often dynamic, and can be slightly different as a function of managed entity attributes. Here ## Details ### How can we help? ### Add Branching Logic to Workflows (IF ELSE branch action) SaaS management processes are often dynamic, and can be slightly different as a function of managed entity attributes. Here are examples of use cases where you might want to automate variations of the same process: 1. Employee onboarding The employee onboarding process typically consists of generic steps, such as creating an Okta user account for each new employee. However, specific steps within this process may vary depending on the employee's role. If the new employee joins the Sales team, it may be necessary to automatically assign them a Salesforce license. On the other hand, if the new employee is an engineer, you should create a Jira Cloud user account for them. 2. License optimization When a user no longer utilizes an assigned license, it's more cost-effective to reassign it to another employee. However, the specific steps in this process may differ based on the characteristics of the licensed user. For instance, if they hold an executive position, it's likely that an approval is required before revoking their license. Conversely, for regular employees, you may prefer to proceed immediately and revoke the license after a specific period of inactivity. 3. Access provisioning When a user requests access to an app from Application catalog, you are likely to have different access policies based on user roles. For example, if a user belongs to Sales department and requests access to Salesforce, they will be automatically provisioned with a license. However, if a user is associated with a different department, they will need approval from app owner before access can be granted. With Torii's IF-ELSE branch action, you can segment the same workflow into multiple branches, ensuring that you cover the entire process comprehensively through a single automation. #### How to create branches In this section, we'll delve into configuring the IF-ELSE branch action and create a workflow that supports onboarding for different roles based on employee attributes in the HR management system. 1. Create a workflow with a "User meets criteria" trigger 2. Apply a generic filter. Set up a filter that will be applied to every new employee who joins the organization. For example, if you're using HRMS software like Hibob, you can create a filter where "Hibob start date is exactly 7 days from now." 3. Add generic actions. Include actions that are generic and should be applied to any new employee, such as "Create Okta user" and "Create Slack account." 4. Define Role-Specific Sub-Automations Now it's time to define sub-automations that will be specific to different employee roles. Add the IF ELSE action. Note that this action will be automatically added with two branches - the first branch with specific conditions that need to be set and the second branch (None met) for users who do not meet the conditions in the first branch. 5. Define a filter for the first branch. This filter will be applied to the entity enrolled in the workflow. For instance, if the workflow trigger is "User Meets Criteria," you'll need to set up a filter for the user. The filter setup is similar to what you used in the trigger setup. In our example, let's set the filter to "Hibob department is Sales." Feel free to rename the branch for easier visualization on the workflow canvas. 6. Add more branches or actions Now you can add additional branches and define their filters, or add specific actions to the Sales branch. In our example, let's create branches for other departments where unique licenses are required during onboarding. 7. Assign actions to branches. Each branch should receive actions that are specific to new employees from the designated departments. For example, Sales team members may be assigned Salesforce licenses, while Engineering employees receive Jetbrains licenses. 8. Add actions to the "None met" branch. We recommend adding actions to the "None Met" branch, to receive notifications in case you forget to cover all use cases. For instance, you can add a "Send Slack notification" action with a message like: "New employee has joined. Okta and Slack users were created, but no unique department licenses were assigned." 9. Activate your workflow Now you can activate your workflow. When the workflow executes, you will see which branch was selected in the workflow audit log, in the details of the IF ELSE branch action. 1. Is the IF ELSE branch action supported with all triggers? The IF ELSE action is supported with all triggers, apart of App event and License count threshold. We also support the IF ELSE action in Access request policies in Application catalog. 2. What happens is a user meets multiple conditions and falls under multiple branches? Will all branches be executed? Torii evaluates branch conditions from left to right. It checks the leftmost branch first, followed by the branch to its right, and so on. Consequently, only one branch will be applied to the user - specifically, the first branch in which the conditions are met. 3. Can I create nested branches? For example, I would like to create a dedicated branch for Engineering onboarding, and then define different automation paths for Engineering managers and Developers. Yes, you can create nested branches. Another approach to achieve a similar outcome is by including multiple filters within a branch, similar to how it's done in the setup of the "User Meets Criteria" trigger. This offers flexibility in tailoring automation paths for specific roles or criteria. 4. Is there a limit to the number of branches I can add to the IF-ELSE action? Yes, you can add a maximum of 20 branches to a single IF-ELSE action. If you need to add more branches, you can insert another IF-ELSE action as a sub-branch beneath the "None met" branch and add the remaining branches there. In general, we recommend maintaining a reasonable number of branches within the IF-ELSE action to ensure the manageability of your workflow. 5. Is there a limit to the number of nested IF ELSE actions I can add to a workflow? There is currently no limit to the number of nested IF ELSE actions. # Page Title Add Google Workspace (G Suite) Groups by Location ## Page URL https://support.toriihq.com/hc/en-us/articles/4833380676635-Add-Google-Workspace-G-Suite-Groups-by-Location ## Page Description This was submitted by Ori at Logz.io! Onboarding employees is time-consuming. Utilize workflows to automate as much of the process as ## Details ### How can we help? ### Add Google Workspace (G Suite) Groups by Location Onboarding employees is time-consuming. Utilize workflows to automate as much of the process as possible. Onboarding workflows can be general to all new employees and can be segmented to allow you to fine-tune the audience. This example looks at the new employee's HRIS location and will automatically add them to the appropriate Google group(s). Additionally, this workflow then alerts the IT team that this has been completed. # Page Title Add New Users to Google Workspace (G Suite) Groups Based on Departments ## Page URL https://support.toriihq.com/hc/en-us/articles/4833563364251-Add-New-Users-to-Google-Workspace-G-Suite-Groups-Based-on-Departments ## Page Description Onboarding new employees can be time-consuming. Workflows can help with tasks that impact all users, such as adding them to Zoom, and ## Details ### How can we help? ### Add New Users to Google Workspace (G Suite) Groups Based on Departments Onboarding new employees can be time-consuming. Workflows can help with tasks that impact all users, such as adding them to Zoom, and workflows can become granular to support actions needed for a subset of users. This example uses multiple data sources to add users to Google Workspace groups based on their department. # Page Title Adding and Editing Custom Apps ## Page URL https://support.toriihq.com/hc/en-us/articles/5128377514779-Adding-and-Editing-Custom-Apps ## Page Description Managing Manually Added Custom Apps If you need to add an app to Torii that isn't yet available in Torii's application database, you can ## Details ### How can we help? ### Adding and Editing Custom Apps Managing Manually Added Custom Apps If you need to add an app to Torii that isn't yet available in Torii's application database, you can easily do so by adding a custom app. This is also useful for internal tools that are unlikely to be included in Torii's application database. Here's how to create, view, and update custom applications. #### Create Custom Apps These are created by clicking on the Plus ("+") sign in the top right of the Applications Page. Then add your application name and click on "Add a custom app". Custom apps can be created by clicking on the Plus ("+") sign at the top right of the Applications Page. Start by adding your application name and then click on "Add a custom app". This action will open a modal that allows you to enter the necessary information. Fill out this information and click "Add application". You also have the option to upload a custom application logo. The recommended size is a square ratio with a minimum resolution of at least 50x50 pixels. #### Magic auto-fill When adding a custom app, Torii uses AI to automatically fill in the app’s name, logo, and domain based on the URL you enter—saving time and ensuring consistent, high-quality data. Just provide the URL and let Torii do the rest. Once added, the app will appear in your application list. Under "Sources," you can see who created it. #### View Custom Apps All custom apps can be viewed in the Custom Applications tab under Settings. #### Edit Custom Apps While in the Custom Applications tab you will be able to edit the information with any custom app. You can do this by clicking on the edit button to the right of the application. This will open the app modal so you can edit any information (other than the name). #### Hide Custom Apps You can hide custom apps just like any other app. You will be able to see all hidden apps under the Hidden Applications tab in Settings. You can hide them via the Applications Page or Custom Applications tab. # Page Title Adding Contracts Manually (Powered by AI) ## Page URL https://support.toriihq.com/hc/en-us/articles/18658958629531-Adding-Contracts-Manually-Powered-by-AI ## Page Description How to add a contract To add a new contract, go to Renewals>Contracts or to the app specific contracts tab. Click on the "Add ## Details ### How can we help? ### Adding Contracts Manually (Powered by AI) ### How to add a contract To add a new contract, go to Renewals>Contracts or to the app specific contracts tab. ### How Magic Auto-Fill works Torii's Auto-Fill feature is powered by AI, providing a seamless solution for contract data entry. This feature facilitates access to third-party AI tools and functionality which process customer data. Learn more about how Torii uses AI in this article. Here's how it works: Parsing Contract Text: When you upload a contract in PDF format, an AI model reads through the document, extracting crucial information. Auto-Populating Contract Form: Torii's AI intelligently extracts and fills in key contract details into the contract form, saving you time and reducing the risk of errors. Review and Edit: You have the flexibility to review, edit, and input additional data points as needed. This ensures that the contract details are accurate and comprehensive. ##### Supported file formats This feature relies on extracting text directly from the PDF. Therefor it only supports PDFs with live text. Image based PDFs are not supported. ##### Supported fields Torii AI will parse line items from the contract PDF and populate the following fields in the Line Items table: Description – A brief summary of the item or service. Quantity – The number of units purchased. Unit Cost – The cost per individual unit. Final Unit Cost – Automatically calculated by applying any tax and discount to the unit cost. Discount (%) – The discount applied to the unit cost, shown as a percentage. Cost Period – Indicates the time period to which the unit cost applies. Note that some line items or specific fields may not be parsed automatically. You can fine-tune the Line Items list by comparing the results with the PDF preview on the right. Please note that, currently, custom fields are not supported, and you will need to enter them manually. ##### Supported languages While our model supports all Latin languages, it's important to note that contracts in English are likely to be parsed with higher accuracy. Q: What AI Models does Torii use for the Magic Auto-fill feature? A: Torii uses multiple OpenAI models to parse uploaded contract data. For your privacy and security, the data is not used for training the AI models. # Page Title Adding Distribution Lists to Workflow Actions ## Page URL https://support.toriihq.com/hc/en-us/articles/4702308992411-Adding-Distribution-Lists-to-Workflow-Actions ## Page Description How to add distribution lists when they are not detected While creating an email action within workflows you might want to add a ## Details ### How can we help? ### Adding Distribution Lists to Workflow Actions While creating an email action within workflows you might want to add a distribution list in the "From:", "To:" and "CC:" fields in addition to individual users. This way you can ensure an entire team received the emails as opposed to individuals only. You might run into a scenario where you will want to use a distribution list that does not appear as an option. Here are the different ways to add it to the platform so it will become an action. Within the "To" or "From" fields, in the email, type in the complete email address and then click on "Add new user with email" Then type in the First Name and Last Name that you would like to display for this email or group and click "Add new user" This new email address or group should now be selectable Add the email as a "Read-only Admin" Torii User in the Team tab within Settings You will see this as a pending user Delete this userPro Tip: If you have access to this email address you can accept the invite to choose a specific display First and Last name. Once this has been completed you can delete the user. You can now select this user in any email sending or receiving field # Page Title Adding Domains to a Torii Account ## Page URL https://support.toriihq.com/hc/en-us/articles/4680676907931-Adding-Domains-to-a-Torii-Account ## Page Description Whitelist alternate domains to expand Torii's reach within your organization Torii manages users and applications across your SaaS ## Details ### How can we help? ### Adding Domains to a Torii Account Torii manages users and applications across your SaaS stack. The "Current Users" and "Past Users" lists are populated by users from all whitelisted domains. There might come a time when additional domains need to be whitelisted within your Torii account. When this occurs, please reach out to Torii Support (support@toriihq.com) and include the following: A list of domains A line of text attesting that the company has ownership of the addresses # Page Title Adding License Costs ## Page URL https://support.toriihq.com/hc/en-us/articles/5129879701915-Adding-License-Costs ## Page Description Overview Go to the Licenses screen to input and visualize license costs within Torii. This page includes all applications' licenses that ## Details ### How can we help? ### Adding License Costs Go to the Licenses screen to input and visualize license costs within Torii. This page includes all applications' licenses that have been connected through one of our direct integrations. (Go to the Calculating Cost Per User article to see how Torii calculates the cost per user.) #### Entering license currency If the contract you signed is in a different currency from the one configured in Torii, you don't want to lose sight of the original license cost on the contract you signed.Torii enables you to enter and see the original value of the license cost according to the signed contract currency: ##### Similar Articles: Calculating Cost Per User Chargeback Report # Page Title Adding Users to Slack Channels ## Page URL https://support.toriihq.com/hc/en-us/articles/5145981381019-Adding-Users-to-Slack-Channels ## Page Description How to add users to Slack channels 1. Use the "Invite Slack user to channels" action You can select multiple channels from ## Details ### How can we help? ### Adding Users to Slack Channels 1. Use the "Invite Slack user to channels" action You can select multiple channels from the list, or enter multiple channel IDs. 2. Adding users to channels in Slack can be achieved by way of Slack groups. #### Sending notifications to Slack channel To send notifications to private channels you need to invite the Torii app to the channel.Tag the app as @Torii, and approve when Slack asks you to invite the app to the channel.If the app was invited to the private channel, you would be able to select to send notifications to this channel along with other channels. # Page Title Adobe Enterprise Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5168753174555-Adobe-Enterprise-Integration ## Page Description Set up your Adobe Enterprise integration and get all the insights in Torii's dashboard. Torii integrates with Adobe Enterprise and syncs ## Details ### How can we help? ### Adobe Enterprise Integration Set up your Adobe Enterprise integration and get all the insights in Torii's dashboard. #### Connect Adobe Enterprise to Torii To connect to Adobe Enterprise, you will need to get the following Service account credentials: Click here to see how to obtain this information. Once you have this information: #### Create OAuth Server-to-Server Torii allows users to take actions, such as removing users. Here are some notes regarding the different actions: Users can be removed from the organization. The deleted user will no longer be able to login into his account or access provisioned licenses. Note that if you choose not to delete user data, then: The user will be removed from the Users menu in the Adobe Admin Console. The user’s cloud-stored assets are still available. Otherwise, if you choose to delete user data, then: The user will be removed from the Directory users menu, which implies a loss of account metadata and associated cloud assets. Note that Enterprise IDs and Federated IDs are account types that are owned by the organization, so the account is also deleted. Adobe IDs are never deleted because they are owned by the user, not the organization. # Page Title ADP Workforce Now Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166133228443-ADP-Workforce-Now-Integration ## Page Description Set up the ADP integration and get all the insights in Torii's dashboard Overview Torii integrates with ADP Workforce Now and ## Details ### How can we help? ### ADP Workforce Now Integration Torii integrates with ADP Workforce Now and syncs: Users list - All employees with company email, Job title, and Status. Torii can support multiple ADP Workforce Now accounts Please ensure all users in ADP have an email attributed to them.Users without an email will not be displayed in Torii. To connect ADP integration to Torii, you must get ADP's information: Client ID, Client secret, Private key, and Certificate. #### Connect ADP integration to Torii To connect ADP to Torii, follow the below steps: Once the integration is connected and synced, it will display a green checkbox. #### Update the User Lifecycle settings. To ensure you get the user lifecycle information in Torii, define the ADP as your Human resource management system. The users' statuses will be reflected in Torii on the next scheduled sync. # Page Title Advanced Data Engine With Torii's Personalization Tokens ## Page URL https://support.toriihq.com/hc/en-us/articles/7081311424667-Advanced-Data-Engine-With-Torii-s-Personalization-Tokens ## Page Description Overview Customization is a crucial aspect of configuring robust automation. Torii's Advanced Data Engine enables you to be fully ## Details ### How can we help? ### Advanced Data Engine With Torii's Personalization Tokens Customization is a crucial aspect of configuring robust automation. Torii's Advanced Data Engine enables you to be fully flexible when populating rich data from Torii into workflows using our Personalization tokens. Use our powerful tokens to: #### What are personalization tokens? Personalization tokens are variables populated with data from Torii. Tokens available in workflows are related either to the workflow trigger or to the workflow actions. For example: We have three token types: #### Where can personalization tokens be used? Use Personalization tokens to populate data into text fields (like when sending emails or Slack notifications from a workflow). You can bring up an interactive menu of personalization tokens simply by typing the "@" symbol. The most common scenarios would be to use tokens in: Let's look at a few examples. #### Example 1: User Onboarding Torii provides robust support for your onboarding/offboarding processes by seamlessly connecting and pulling employee data from your core systems (HRMS & Identity provider) as your absolute source of truth. New User Onboarding Workflow SSO automatically populating the HRMS information requires 0 effort from the IT side, with no need for manual action or additional sync tools Send an Email to a new employee. In this example, the workflow includes a "send email" action in which you welcome the new employees to the organization.Note that Torii enables you to make your email very personal and informative. You can refer the new employees with their "Preferred name", add their manager email, personalize it with "Welcome to the IT team!" etc. #### Example 2: Application Onboarding When Torii discovers a new app, notify the security owner and ask if it can be sanctioned (approved). Attach as many details as needed to help the owner make a decision. #### Example 3: Contract Renewal Create a workflow in which you notify and assign a ticket to the App Budget owners to let them know an App renewal time is arriving. Open a Zendesk ticket, and add data about the contract and app that might be relevant for the renewal decision. Q: Where can I find a full list of the default Personalization Tokens?A: in the "Personalization Tokens List" article Q: Can data about app usage and license activity be added as a token?A: Dynamic data points cannot be added as tokens at the moment. Q: What happens if I added a custom field as a token and then deleted the custom field from Settings?A: We will show the "Unknown" value in emails or notifications and remove the token from the list of available tokens in Workflows. The previously selected token in the workflow will appear as [invalid placeholder]. You should edit the workflow to remove the irrelevant token. # Page Title Aha! Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/11381308158107-Aha-Integration ## Page Description Overview Torii integrates with your Aha! account and syncs the users' names, emails, statuses, roles, and licenses. Note that ## Details ### How can we help? ### Aha! Integration #### Connect Aha! Integration # Page Title AI (GPT) Actions ## Page URL https://support.toriihq.com/hc/en-us/articles/36726298957083-AI-GPT-Actions ## Page Description Overview AI (GPT) Actions is a powerful new feature in Torii that allows you to integrate the intelligence of OpenAI directly into your ## Details ### How can we help? ### AI (GPT) Actions AI (GPT) Actions is a powerful new feature in Torii that allows you to integrate the intelligence of OpenAI directly into your SaaS management workflows. Whether you're automating complex decisions, crafting personalized Slack messages, or enriching your app data—Torii’s AI (GPT) Actions help you automate smarter and work faster with natural language prompts. #### What Are AI (GPT) Actions? AI (GPT) Actions let you send a prompt to OpenAI from within a Torii workflow. The AI returns a structured response, which Torii automatically uses as inputs for subsequent workflow steps. Automate Data Updates: Dynamically update fields like SSO support, product tier, or compliance flags. Generate Personalized Messages: Quickly craft Slack or email messages with just a prompt. Enrich Workflows with Intelligence: Let AI handle decision-making logic so you don’t have to. #### Example Use Cases AI (GPT) Actions support a variety of use cases across your SaaS management workflows. Some common examples include: Application SSO Verification: Automatically verify if a sanctioned application supports OKTA SSO, and update relevant application fields. Smart App Renewal Communication: Generate professional, personalized Slack reminders to app owners before an app’s renewal. Field Calculation or Transformation: Use AI prompts to calculate or reformat field values. Add an AI Action in the workflow editor. Enter your prompt using natural language. Define a Response Mapping to extract specific parts of the AI response into named tokens. These tokens can be reused in later steps of the workflow using the format [@token-name], such as [@email-subject] or [@email-body]. For example, if the AI Action generates an email, you might map the response fields subject and body to email-subject and email-body. These mapped tokens can then be referenced in a subsequent Send Email action. Here are a few sample prompts to get started: Data Enrichment Check App Compatibility with Okta SSO and Tier Requirements Personalized Messages Generate a Personalized Slack or Email Message for App Renewal Write a short and professional email to the owner of the application [Trigger.Contract.App.Name] whose renewal date is approaching. The email should:- Mention the app name: [Trigger.Contract.App.Name]- Address the app owner by name: [Trigger.Contract.Owner.Last-name]- Include the renewal date: [Trigger.Contract.Details.End-date]- Prompt them to review the usage and decide whether to renew, upgrade, or cancel- Offer to help if they have questions Sign off as the IT team. Field Calculation or Transformation Convert a Date Format When configuring an AI (GPT) Action, you can choose whether to enable the Search the web option. When enabled, the AI will fetch real-time information from the internet to improve the relevance and accuracy of its responses. This can be helpful for answering time-sensitive or knowledge-extending queries. However, enabling this option may increase latency and API costs. To use Search the web, your organization must first provide an OpenAI API key under Settings → AI Settings. You can find detailed instructions for setting this up in Managing AI Settings. Keep prompts clear and specific. Response mapping is mandatory and must not be left blank or incomplete. Make sure each AI action defines at least one response field for the output to be usable in subsequent actions. #### Model and Usage Limits The AI (GPT) Action uses OpenAI’s GPT-4o model behind the scenes to generate responses based on your prompts. While this enables powerful and flexible automation, Torii-enforced rate limits apply only when using Torii’s built-in GPT access. If your organization provides its own OpenAI API key via Settings → AI Settings, no rate limits are applied by Torii, and usage is governed solely by your OpenAI account limits. By default, this action does not perform live internet searches. However, if you enable the Search the web option, GPT can retrieve real-time information from the internet to enhance its responses. # Page Title Aircall Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/33221317111067-Aircall-Integration ## Page Description Overview Torii integrates with Aircall and syncs the following: User Fields License Types Email Aircall Status ## Details ### How can we help? ### Aircall Integration Torii integrates with Aircall and syncs the following: ##### Accounts & Permissions ##### How to Generate the Required Values Log in to your Aircall account. Navigate to the API section: Generate an API Key: Important: After confirming, the API Key will no longer be accessible. Ensure you copy and save it securely during this step. #### How to Connect the Integration Q: Can I connect multiple Aircall accounts to Torii?A: Yes, Torii supports syncing multiple Aircall accounts. Q: What happens if I lose my API Key?A: If the API Key is lost, you’ll need to generate a new one by following the steps in the How to Generate the Required Values section. For further assistance, please contact Torii Support. # Page Title Airtable Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/8090152625179-Airtable-Integration ## Page Description Set up Airtable integration and get all the insights in Torii's dashboard Overview Torii integrates with your Airtable account and syncs ## Details ### How can we help? ### Airtable Integration Torii integrates with your Airtable account and syncs the user data: ID, email, first name, last name, status, license status, last visit time & creation time. Airtable Enterprise account ##### Connect Airtable Enterprise integration to Torii Click Connect to Airtable In the Connect Airtable box enter the API Key (the Personal Access Token) Once the integration is connected and synced, it will display a green checkbox. # Page Title Alert IT When Important Apps Are Not In Use ## Page URL https://support.toriihq.com/hc/en-us/articles/4833533477915-Alert-IT-When-Important-Apps-Are-Not-In-Use ## Page Description This was submitted by Maks at Kustomer! There are some tools that all employees must be using. Workflows can send alerts when this is ## Details ### How can we help? ### Alert IT When Important Apps Are Not In Use There are some tools that all employees must be using. Workflows can send alerts when this is not the case.The example below shows an alert when a user has not used 1Password in 30 days. This alerts IT to a potential issue or a training opportunity. # Page Title All-inclusive actions audit log ## Page URL https://support.toriihq.com/hc/en-us/articles/26645680691867-All-inclusive-actions-audit-log ## Page Description Introduction Torii displays a centralized filterable and exportable audit log, containing a complete list of actions that were taken in ## Details ### How can we help? ### All-inclusive actions audit log Torii displays a centralized filterable and exportable audit log, containing a complete list of actions that were taken in Torii. The log includes: The actions log allows easy troubleshooting and answering auditing questions. Questions that you can answer by looking at the actions log: - Did someone remove a Salesforce license from an employee? - Who requested access to Asana during last 6 months? - Which automations usually result in errors and why? - Which approval requests have not been answered? ##### Action log columns and filters Yes. 2 filters are available: Action type - the name of the specific action User from action - the user on whom the action was applied The context in which an action was executed: Yes. 4 filters are available: The specified channel name already exists. ##### How to find answers in the log Let's see how we can apply filters to answer questions listed at the beginning of the article. 1. Did someone remove a Salesforce license from an employee (e.g. Mary Rose)? Filter the log by: 2. Who requested access to Asana during last 6 months? 3. Which automations usually result in errors and why? Now you can export the log to CSV and perform advanced analysis, grouping the actions by Action type. 4. Which approval requests have not been answered? Q: What is the timeframe for actions displayed in the log? A: We present all actions, from the moment an organization was created in Torii. Q: Does the log include updates made as a result of an integration sync? For example, if a user was removed from an app because they did not return in the last sync, will that be reflected? A: No. We only expose actions that happened in Torii, as a result of Torii automation or Torii user manual action. # Page Title New User Training #12: All the Audits ## Page URL https://support.toriihq.com/hc/en-us/articles/8490740501915--New-User-Training-12-All-the-Audits ## Page Description This is video 12 out of 13 in the New User training series. Learn how Torii surfaces security risks in Security, what data ## Details ### How can we help? ### New User Training #12: All the Audits This is video 12 out of 13 in the New User training series. #### Questions for Implementation #### Continue Your Training Series Congratulations on Completing Training! Now What? #### Additional Resources Users Map and Location Application Risk Levels # Page Title Amplitude Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5730703260443-Amplitude-Integration ## Page Description Overview Torii integrates with Amplitude and syncs the users' list. Prerequisites The User Management API works in tandem with ## Details ### How can we help? ### Amplitude Integration Torii integrates with Amplitude and syncs the users' list. The User Management API works in tandem with permission groups and Enterprise-level project-level permissions Available for customers on an Enterprise plan Users are authenticated using SAML single sign-on Users are provisioned by an Identity Provider using SCIM To make sure SCIM is set up correctly before integrating with Torii, please check with your IT team, Amplitude's help center, or their support. #### Integration Process To connect Amplitude to Torii, follow these steps: Go to Torii's Integrations page and click the Amplitude tile In the Connect Amplitude window, note that Torii already identified and prepopulated the Base URL and Authentication Method fields. In the Access token field, paste the access token Once the integration is connected and synced, it will display a green checkbox. # Page Title App Comparison ## Page URL https://support.toriihq.com/hc/en-us/articles/4682511375899-App-Comparison ## Page Description Discover similar apps used in your organization and explore their attributes and usage trends side-by-side The explosion of cloud ## Details ### How can we help? The explosion of cloud applications has created a reality where IT teams are experiencing challenges controlling and managing their companies’ SaaS ecosystems. Use Torii powerful "Compare" page to find out which similar applications are used in your organization and to identify cost-saving and consolidation opportunities. #### Recommended comparisons Navigate to the "Compare" tab on the Applications page to see a list of similar applications Torii suggests you compare. Torii automatically determines which comparison recommendations you should pay attention to based on app similarities, usage, and license overlap. One of the parameters that will help you to decide if to drill down to a comparison is the number of overlapping users. It shows how many users were discovered in all apps listed in a comparison row. If the number is high (for example, 30 users were discovered in both Asana and Monday), it might signal that you have a cost-saving opportunity through duplicate licenses deprovisioning. If there are specific applications you want to explore side-by-side, you can skip the suggestions list and freely select up to 4 apps after clicking the "Create custom comparison" button. #### Side-by-side view Clicking the "Compare" button takes you to a dedicated page where you can analyze the parameters of apps side-by-side. The table at the top of the page shows brief summary of app parameters. You can see how much you spent on each app in the last 12 months, open app contracts and discover levels of security risk for apps connected to GSuite, Azure AD or Slack. The ACTIVE USERS chart shows how many employees in the organization have been using each app over time. Look at the trend to discover which apps are gaining popularity and which are being abandoned. For example, in the chart below you can clearly see that Monday was becoming more and more popular over time while Asana was losing users. Click on the link below app names on the left to view employees who were active in each app during the last 30 days. USAGE chart complements insights you get from the Active users trend, by showing how engaged your employees are with each app. In the chart below you can see that over time employees were spending less time in Asana, while visiting Monday more and more frequently. The user overlap diagram shows employees that were discovered in multiple apps. The more overlapping different circles are, the more employees were discovered in both tools in parallel. Use the diagram to: Discover users with duplicate licenses and explore their usage patterns, to identify cost-saving opportunities. Discover similar apps being used by different employee groups, to identify consolidation opportunities. Click on the overlap area to open the user list and sort the list by usage, to discover if employees are equally active in overlapping tools. For example, in the screenshot below you can see that employees who have licenses for both Asana and Monday are active mostly on Monday. As a result, you might decide to immediately deprovision duplicate Asana licenses and save costs. In the below example, you see a different pattern, where there is no overlap, and similar tools are used by different employees. It might happen due to decentralized SAAS management, when tools are purchased by teams and without IT approval. Using different tools for the same need is a risk factor for collaborative projects and knowledge sharing. In this scenario, you might decide to approach employees using each app to learn more about their needs, and to come up with a consolidation plan, moving all employees to one tool. With data readily available, you can decide which app to work with going forward based on facts and not on intuition. We recommend using the Torii Compare page to get insights before renewing contracts and purchasing new apps. # Page Title App Owner - Recommended Articles ## Page URL https://support.toriihq.com/hc/en-us/articles/11292972177051-App-Owner-Recommended-Articles ## Page Description View specific application expenses Custom Filters & Saved Views Enrich Application Details Contracts and Procurement Management How ## Details ### How can we help? ### App Owner - Recommended Articles # Page Title Apple Developer Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5188660472859-Apple-Developer-Integration ## Page Description Set up your Apple Developer integration and get all the insights in Torii's dashboard Torii integrates with your Apple Developer ## Details ### How can we help? ### Apple Developer Integration Set up your Apple Developer integration and get all the insights in Torii's dashboard Torii integrates with your Apple Developer account and syncs the list of active and invited users. Note: This integration supports only the Apple Developer Program and not Apple Developer Enterprise Program or the iOS Developer University Program. #### Connecting the integration Q: I am getting an error: "User invitation has expired or is no longer valid" what should I do? A: You need to go to the App Store Connect homepage and click "accept" on the latest version of the developer agreement. You can read more on the Apple Developer forum: https://developer.apple.com/forums/thread/744178 You can always contact our support team for help at support@toriihq.com. # Page Title Application Catalog Communication ## Page URL https://support.toriihq.com/hc/en-us/articles/5132494627867-Application-Catalog-Communication ## Page Description How to communicate the release of the application catalog to your employees. This is the process recommended for Torii admins after you ## Details ### How can we help? ### Application Catalog Communication This is the process recommended for Torii admins after you published the application catalog in Torii by toggling the Enable for all employees toggle button. (See below.) The next step is to communicate the app catalog to your employees. Torii’s suggested best practice process is as follows: Send a company-wide email Send an IT help desk message Build a wiki (Confluence, Sharepoint, Asana, Notion, etc.) page detailing how to use the app catalog #### 1. Company-Wide Email Template Purpose: Inform all employees about a new tool that gives them visibility into approved SaaS apps and how to request access an application. Subject: [Company Name] Employee Software Application Catalog Body: Starting today, you can access [Company Name’s] Software Application Catalog by [insert how you want employees to access the app catalog. Possible examples could be a tile in your SSO dashboard or your service desk portal] Our Software Application Catalog displays applications that are approved and available to use within [Company Name]. This is your one-stop shop to browse apps and learn the following: What applications are available How to request access to applications How to request a new application you don’t see available And more!To learn more, like how to add an app to the catalog, visit [link to a wiki page or your collaboration software like confluence, Sharepoint, Asana, etc.]. #### 2. IT Helpdesk Message Template Purpose: Inform all of [Company Name] about a new tool that gives them more visibility into approved tools and how to request access Sent by: Bot (if available) or Banner on the Service Desk Portal If you missed the email sent earlier today, you now have access to [Company Name’s] Application Catalog! It can be accessed via [insert how you’d like your employees to access the app catalog. Example: your Okta Dashboard by clicking the ‘Torii’ tile] To learn more, like how to add an app to the catalog, click here [insert wiki page, or confluence, notion, asana, etc.]. #### 3. Wiki Page(s) Template ##### Page 1: Application Catalog Looking for what apps are available? Or need help finding a tool? [Company Name] has an Application Catalog of approved tools to help you pick the right app for your needs. ##### Navigating to the Application Catalog You can navigate to [Company Name’s] Application Catalog the following way/ways: [insert way you want employees to navigate to app catalog]: Click the Torii tile from your [Insert SSO SAML name] dashboard. ##### Page 2: Requesting Access to an Application When you are inside the Application Catalog and select an app tile, you will see the “Request access" button on the app information panel. You can then request access to the application you want to use. [Based on the IT admin setup, clicking the button will either redirect the employee to a different domain (e.g. help desk) or run an automatic action (read more in Request application access workflow article)]. This right-hand navigation panel displays more than just how to request access. You’ll find: Tool description Owner of the tool Number of app users Features supported by the tool ##### Page 3: Request an Application Be Added to the Catalog In case you can’t find an application you are interested in using within the catalog, you can submit a request for a new app. To achieve this, you need to click the "Request a new application" link above the apps list. This will redirect you to [another page as defined by an admin] where you will be asked to provide details about the app you would like to use. #### Additional Application Catalog articles # Page Title Application Catalog - How to automate new application requests ## Page URL https://support.toriihq.com/hc/en-us/articles/25885814704027-Application-Catalog-How-to-automate-new-application-requests ## Page Description Prerequisite We recommend reading the "Applications Catalog Settings" article. Overview As a Torii admin, you can configure ## Details ### How can we help? ### Application Catalog - How to automate new application requests We recommend reading the "Applications Catalog Settings" article. As a Torii admin, you can configure what will happen when employees request new apps that are not yet in use by your organization. Torii supports the following capabilities: ### Configuration steps #### App catalog settings View and edit policies In the New application request policies tab you will be able to create and edit automated policies as well as monitor and view policy runs. Please note that although you can create any number of policies for testing purposes, only one policy can be active. If you want to replace an active policy, deactivate it before activating a new one. ##### Create a new policy ##### Monitor policy runs Click the number under the Triggered column in the policies table. Here you'll be able to see all submitted requests and drill down to their run details. Q: Will requested applications show up in Torii?A: Yes. Requested applications will be added to Torii with a Requested state. If the requested app was already discovered it will not change its state. Q: Will a requested app cause new app discovered workflow to trigger?A: No. Q: What happens if the custom policy is invalid?A: If your active policy becomes invalid it will not be triggered and new application requests will not be handled. Q: Can an employee submit a request for a Closed or Hidden app?A: Closed apps will be available for requestingHidden apps will be disabled for requesting with a label: Request blocked. #### Additional Application Catalog articles Request Access Policies # Page Title Application Catalog - How to Automate "Request Access" Process ## Page URL https://support.toriihq.com/hc/en-us/articles/8002279125275-Application-Catalog-How-to-Automate-Request-Access-Process ## Page Description Prerequisite We recommend reading the "Applications Catalog Settings" article. Overview As a Torii admin, you can configure ## Details ### How can we help? ### Application Catalog - How to Automate "Request Access" Process We recommend reading the "Applications Catalog Settings" article. As a Torii admin, you can configure what will happen when employees request access to apps in the catalog. Torii supports the following capabilities: #### View and customize the "Request Access" process. #### When will you build custom policies? In some cases, Torii's default workflow (send an email to the app owner) is sufficient; however, in some cases, you might want to customize the "Send Request" behavior, for example: #### How to view and edit access policies Click the View and edit policies button (step 3 above) to see all policies. #### How to configure a new policy? #### Watch this video - Request Access Policies Q: Can I edit my default policy?A: Yes. Open the policy (workflow) and edit the actions. Once you edit the default policy, it will apply to all apps which do not have custom policies. Q: What happens if the custom policy is invalid?A: The default policy will take over and run once an access request is submitted. Q: What happens if I deactivate a custom policy?A: The default policy will take over and run once an access request is submitted. Q: Where can I see the history of app request submissions?A: Click the Triggered counter and open the policy log. You will see a list of submitted requests. Custom policies log will list requests for dedicated apps. The default policy log will list requests for all apps which do not have a custom policy. Q: What happens if an access request policy encounters an error?A: If Slack notifications are enabled in Workflows, you will receive a Slack notification regarding the access request policy error. If you don't have Slack notifications enabled in Workflows, the error will be shown in the Action log which is found by clicking on the number in the Triggered column. Q: Is the "Compose email" button action different from Torii's default automation policy?A: Yes. Selecting "Compose email" as a button action results in opening the email client with an email template when an employee clicks the "Request access" button in the catalog. It's up to the employee to send a request and it is not monitored in Torii. The default automation policy sends an email automatically on the employee's behalf. The employee does not need to perform any manual action. Moreover, this automatic action is registered in Torii and can be viewed in the default policy log, making it easier for auditing. Q: For the "Compose email" button action, how to Make the "Request Access to an Application" Open Your Email Client?A: The "Request access to an application" feature on the Application Catalog utilizes the browser capabilities to open a desktop email client (like Outlook), or a web-based email client (like Gmail), by using a "mailto-link." Chrome browsers support mailto-links by default, but some browsers might have been configured to disallow opening mailto-links. Here's an example of a mailto-link so you can verify if your browser is configured correctly: open email client test To ensure Chrome opens email links, follow these steps: Copy and paste chrome://settings/handlers to Chrome's address bar, and make sure the "Allow sites to ask to become default handlers" toggle is on. Go to Google Mail, click on the handlers button, and choose "Allow" Copy and paste chrome://settings/handlers to Chrome's address bar, and make sure you see mail.google.com listed. #### Additional Application Catalog articles Request Access Policies # Page Title Application Owners & Stakeholders ## Page URL https://support.toriihq.com/hc/en-us/articles/4572379134747-Application-Owners-Stakeholders ## Page Description Overview Each SaaS application should have an owner. The owner is the go-to person for any question you may have about a specific ## Details ### How can we help? ### Application Owners & Stakeholders Each SaaS application should have an owner. The owner is the go-to person for any question you may have about a specific application, like why are we using this app? Why did expenses go up in February? Should we renew this application? In some cases, the application owner is from the relevant business unit; in others, you may appoint someone from the IT department to own it. Applications without owners present a slippery slope to losing control over your SaaS. An application may have more than one owner. #### App owner types There are two owner types, Primary and non-primary. Once assigned, you can see them from the main application page >> APP OWNERS section. Note that the owner types are the same entity except for their title.The “Primary owner” type was added to enable delegating tasks to a specific owner.In workflows, you can approach the Primary owners - through the primary app owner token or all the owners of the app - using the All App owners token. #### How to assign application owners As you assign more owners, Torii will suggest relevant owners for the assignment based on similar products and usage information. #### How to update application owners #### How to view app owners In the Applications page: #### App owners in a workflow ### App stakeholders Often, there are users other than the app owner(s) who are assigned to an app. These can be people with other relevant roles such as budget or contract owners, application experts or legal counsel, or even vendor contacts. App stakeholders refer to all users who are assigned to an app, whether they are an app owner or any other role. Any user assigned to an app field of the type Employee or Multiple Employee is considered an app stakeholder. #### How to create application stakeholder roles #### How to view app stakeholders # Page Title Application Privacy & Security Certifications and Compliance ## Page URL https://support.toriihq.com/hc/en-us/articles/27078441124635-Application-Privacy-Security-Certifications-and-Compliance ## Page Description Introduction Privacy and security standard certifications are crucial benchmarks that organizations strive to achieve to demonstrate ## Details ### How can we help? ### Application Privacy & Security Certifications and Compliance Privacy and security standard certifications are crucial benchmarks that organizations strive to achieve to demonstrate their commitment to protecting sensitive information and maintaining robust security measures. These certifications validate that an organization's practices align with established frameworks and regulations designed to safeguard data privacy and prevent unauthorized access. While there are many different standards with their own set of requirements and proof of eligibility processes, there are several common standards which many organizations strive to uphold. Available for customers on the Enterprise plan #### What data can Torii provide me? Torii provides information on the following standards: For each discovered application in your tenant, Torii provides information for the above mentioned standards, which includes: Please note: this information is currently only available for Enterprise Torii customers. #### Where can I see this information? The compliance data can be found in several areas in Torii: #### What can I use this data for? Centralized compliance data enhances SaaS governance by simplifying audits, increasing transparency, and bolsters risk management across software portfolio. Here are some examples of how to use this information to maximize your benefit from it: Some best practice recommendations to maximize this data are: # Page Title Application Risk Levels ## Page URL https://support.toriihq.com/hc/en-us/articles/4700987020059-Application-Risk-Levels ## Page Description How application risk levels are being calculated? For applications that were discovered through OAuth, Torii shows the OAuth risk level ## Details ### How can we help? ### Application Risk Levels For applications that were discovered through OAuth, Torii shows the OAuth risk level associated with each application. Those risk levels can be viewed from the security page. #### About OAuth 2.0 Scopes OAuth 2.0 uses scopes as a mechanism to limit an application's access to a user's account. An application can request one or more scopes, this information is then presented to the user in the consent screen, and the access token issued to the application will be limited to the scopes granted. #### Torii Risk Levels The risk levels are determined according to the OAuth scopes that the users have granted to the application to their Google Workspace (G-Suite)/Azure-AD/Slack accounts. High: Apps with modify access Medium: Apps with read-only access to sensitive data Low: Apps with read-only access to non-sensitive data Sensitive data is defined by Torii as any personal information except your basic profile information, such as: Additionally, it also refers to any non-personal information on your account, such as: # Page Title Application Usage Data ## Page URL https://support.toriihq.com/hc/en-us/articles/5129309596955-Application-Usage-Data ## Page Description Torii application usage data sources Overview Torii shows the application and user usage information. Usage information brings valuable ## Details ### How can we help? ### Application Usage Data Torii shows the application and user usage information. Usage information brings valuable insights for understanding your SaaS stack utilization: User page - usage column ##### Usage components On the Applications page, you will find the Usage most detailed information. APPLICATION USAGE chart presents the average number of days the application was used or logged into in a month. Application Sources Under Unique users you can see the sources from which this month's numbers were received like direct integration, SSO, and Torii browser extension Presents all USER ACTIVITY sources You can additionally find the usage sources in the DATA SOURCES area ##### Usage data sources For Torii to provide usage insights, Torii uses several data sources to offer aggregated application usage data: Direct integrations, Single Sign-On (SSO), Desktop Agents (MDM), and Torii browser extension. Single Sign-On (SSO) For applications integrated with one of the SSO providers below, Torii will count how many times a user logged into an app through SSO. If your organization is using a desktop agent to help monitor and secure your employee's computers, Torii can integrate with it to provide usage data (as collected by those agents). Torii can discover user accounts from the following desktop agents: Torii browser extension Torii browser extension is a powerful tool to discover Shadow-IT, but beyond that, it also provides application and user-level usage information. Direct integrations Some applications provide usage information in their API. The applications listed below provide usage data when directly integrating with them. You can find information about actual events considered usage in dedicated app articles. Q: Why is usage information not available for an app? A: If usage level is not available, you will see a message saying Torii does not have data about user activity and application usage. The reason for that can be one of the following: The application is not one of the applications listed above that provide usage information from their API. If the app is one of the listed above, but you still see no usage, you might need to reconnect the app with a different set of permissions. The application is not connected to your SSO provider. The browser extension is not deployed. Q: What does the "Torii does not have enough data" tooltip mean?A: In case the only usage source of an application is a browser extension, and there are less than 10 users in the organization who reported usage in the last 30 days, Torii does not have enough data to show user activity and usage trends.To be able to view user activity and usage, make sure all employees in your organization installed browser extension. You can open the extension status report, to see how many employees report from browser extension and send a browser extension activation email, if needed. Another option to enrich user activity and usage data are to put the app behind your SSO provider and get the data about app logins. Q: Why do I see no usage from a direct source for a connected app? For example, I connected 1Password but saw usage only from the browser extension. A: Most apps do not provide usage data in their API. For integrated apps that do not provide usage via direct source, Torii shows a disabled direct source icon with a tooltip. Q: I connected Office 365, which is listed as an app with a direct usage source, but no usage from Office 365 is coming. A: You might need to reconnect the app with different permissions set or reconfigure the app admin console settings. Torii will indicate it in the UI and redirect to the detailed Help article. Q: Why is usage information not available for an application, but the Last used date is? A: Many applications provide information about each user's last used date / last sign-in date, even when usage data is not provided.Torii will show this date as the last used date but not show "Usage over time" graphs. # Page Title Applications Catalog Settings ## Page URL https://support.toriihq.com/hc/en-us/articles/8000343125915-Applications-Catalog-Settings ## Page Description Prerequisite Read the "Introduction to Application Catalog - Admin" article Overview Customize the appearance and the behavior ## Details ### How can we help? ### Applications Catalog Settings Read the "Introduction to Application Catalog - Admin" article Torii allows you to fully customize your application catalog by configuring which information about apps to expose to your employees. For example, you can add app usage guidelines that are specific to your org or show which teams you recommend to use the app. You can also configure if employees can request access to existing or new apps from the catalog page.Settings page #### Select Applications Application catalog default is to show all sanctioned applications.However, Torii allows you to configure rules to populate your application catalog automatically. Torii allows you to configure dynamic rules that automatically apply to all apps in your SaaS stack to add or remove them from the catalog. Set up the rules once, and Torii will maintain the catalog for you! ##### Configure filters within the application catalog settings page #### Select Application Fields In the "Select Application Fields" section, you can add and remove fields displayed on the right-side panel when a user selects a specific application. The fields you can select are either Torii predefined fields (description, owner, tags, and users) or application custom fields that you defined in the Application Details section. Any field you select is immediately added to the panel on the right to provide you with a visual preview of how the information is going to be displayed in the catalog. You can change the order of the fields by dragging and dropping the field boxes up and down. #### Request access to an application As a Torii admin, you can configure what will happen when employees request access to apps in the catalog. Read the - Application Catalog - How to Automate "Request Access" Process article to learn more #### Request new application If you want your employees to be able to request access to an application not in the catalog, enable the "Request New App" button to streamline your employee's requests. Read Application Catalog - How to automate new application requests to learn more. #### Publish the application catalog Once the Application catalog is configured and ready, turn on the Enable for all employees toggle. Copy the link and communicate it to all employees. Here you will find our recommendation on communicating the Application Catalog to the employees. Watch this video - App Catalog Setup #### Additional Application Catalog articles # Page Title Applications with Zero Users ## Page URL https://support.toriihq.com/hc/en-us/articles/5129359470363-Applications-with-Zero-Users ## Page Description The different reasons why Torii is showing apps with zero users When you view all of your discovered applications on the Applications ## Details ### How can we help? ### Applications with Zero Users When you view all of your discovered applications on the Applications Page most will show many Users. There might be a subset that shows 0 users. This article will explain the reasons this could occur. #### Application Found in Your Expenses Torii automatically matches your expenses to applications. When an application is discovered via this source it will show within your application list with no users. If an application is being paid it is shown for a more complete view of your SaaS stack. #### Application Manually Added Any SaaS or custom application can be manually added to your application list. If these apps are also behind your IdP or SSO vendor that is integrated with Torii and named the same, the users will be populated. Otherwise, no users will show while viewing it. All other application functionality can be utilized (such as: contract management, renewal management, offboarding workflows). #### Application Had Users Previously There will be applications that had users at one point and no longer do. This commonly happens when users are using an unapproved application and are then asked to revoke any access. This is very common with Google Workspace (G Suite), Slack and other SSO and IdP solutions. When this occurs you will still see the application as one that has been used that currently has no users. This allows you to close the application and monitor for future usage and also the application can be hidden from view. Why is this information important? Many times these apps still hold your company’s information and you may want to review that. Can I hide this information? You can easily use the filters on the application table to hide applications that have zero users. # Page Title Applications ## Page URL https://support.toriihq.com/hc/en-us/articles/34575172844443-Applications ## Page Description The Applications section is where application data is centralized, allowing Torii admins to review and adjust, compare apps to reveal ## Details ### How can we help? The Applications section is where application data is centralized, allowing Torii admins to review and adjust, compare apps to reveal savings opportunities, and refine how apps are identified in external systems. #### Applications: Review Tab The core of the Applications section is the Review tab which lists every app in your organization's stack; presenting the details that matter. Views make this list a flexible tool in reviewing and maintaining app information from various perspectives. In the Default view, a Torii Member will see all applications listed on the Review tab, sorted by Number of users. Click any other column title to sort differently. Columns can be moved by clicking and dragging the column title horizontally until you see vertical arrows indicating the new position: Columns can be revealed or hidden by clicking the select columns button and adjusting the checkboxes: The Review tab can be searched by clicking in the search box, and filtered by clicking the filter table button: Once you have modified the way the Review tab looks you may want to save the new view for later use. Click the View Dropdown ("Default view") to show a list of built-in views. Scroll to the bottom and click "+ Create new view" to add your own. For more information, see Custom Filters & Saved Views. To the right of the search box lie the Export and Add Application buttons. Application details can be adjusted individually or in bulk by clicking one or more checkboxes to the left of the app's name and then the "Edit" button: For more information, see Bulk Updates to Application Details. #### Applications: Compare Tab The Applications Compare tab presents a list of similar applications with the number of shared users between them, grouped by category. An entry with a large number of users represents a savings opportunity, which can be further investigated by clicking the "Compare" buttons. For more information on this powerful tool, see App Comparison. #### Applications: Refine Tab Aside from direct integrations, Torii gathers app data from many sources. The Applications Refine tab allows you to adjust the mapping of the discovered apps from your SSO and MDM systems with those in the Torii applications list. To learn more, see Refining Application Discovery. # Page Title Asana Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5168597662875-Asana-Integration ## Page Description Setup your Asana Integration and get the insights in Torii's dashboard Overview Torii integrates with Asana and syncs: Users list ## Details ### How can we help? ### Asana Integration Setup your Asana Integration and get the insights in Torii's dashboard Torii integrates with Asana and syncs: With this integration, you will be able to: UsageTorii monitors Asana usage data daily.We monitor all audit log events exposed by the Asana API: Torii supports automation of Asana user management, as well as creation of Asana tasks. Please note: Torii uses the Audit Logs API to gather the latest activity data for users. However, Asana has clarified that this API is mainly intended for tracking critical events such as logins and changes in permissions, and it might not record everyday user actions like creating tasks or commenting. Therefore, there might be inconsistencies between the "last used" date reported by Torii and the data shown on the Asana admin console. Torii will expand its support to include full usage data once Asana releases an API that captures this information. #### Integration Process The Connect Asana box will pop up, enabling you to select the connection options - Read or Read and take action (setup/edit) You will be referred to Asana scopesTorii asks for the default scope as described in the Asana website documentation.This scope is the minimum required for the integration, and it provides access to all endpoints documented.Prior setup on your end is not required. #### Get a token for the Enterprise+ account Give a name to your account COPY NOW the token. You will not see it after saving This integration synchronizes all workspaces and organizations that the user who connected the integration is a member of. Q: Why are Torii and Asana's Admin Panel numbers different? A: If your organization is using a Division plan, only members of the Division will be shown in the Admin Console. The response Torii gets from the API includes the following: # Page Title Ashby Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/11380852062747-Ashby-Integration ## Page Description Setup the Ashby integration and get all the insights in Torii's dashboard Overview Torii integrates with your Ashby account and syncs the ## Details ### How can we help? ### Ashby Integration Torii integrates with your Ashby account and syncs the users' names, emails, statuses, and roles #### Connect Ashby Integration #### Getting Ashby API Key #### Integration Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table # Page Title Atlassian and Jira Cloud Integrations: A deeper look ## Page URL https://support.toriihq.com/hc/en-us/articles/5169138420763-Atlassian-and-Jira-Cloud-Integrations-A-deeper-look ## Page Description Learn about the data that can be synced from Atlassian and Jira Cloud Atlassian vs. Jira Cloud integrations Torii supports two ## Details ### How can we help? ### Atlassian and Jira Cloud Integrations: A deeper look Learn about the data that can be synced from Atlassian and Jira Cloud #### Atlassian vs. Jira Cloud integrations Torii supports two integrations: Atlassian and Jira Cloud. Both integrations allow you to sync data into Torii, and to take actions on Atlassian and Jira Cloud accounts from within Torii. #### What is the difference between the Atlassian and Jira Cloud integrations? The Atlassian integration syncs data from the Atlassian Organization level. It includes information on all managed users who have an email address with a verified domain. You may see information that spans multiple Jira sites, OpsGenie accounts and any other Atlassian software. You will not see users who are not managed. The Jira Cloud integration syncs data directly from a specific Jira site and allows you to see and manage users and their licenses. You will see all users of the site and there is no need to verify your domain with Atlassian. Users who have configured their email to be hidden, will not be synced into Torii. #### Which integration should I choose? If you use the Atlassian admin dashboard to manage your Jira sites, use the Atlassian integration. It can help you find Jira sites you were not aware of, and other products being used in your company by any managed user. If you use your specific Jira site admin dashboard to manage your site, use the Jira Cloud integration. #### Can the two integrations be used together? Yes. You are advised to connect both the Atlassian and Jira Cloud integrations. In this case, some users may be shown both under the Atlassian app and the Jira app on Torii. #### What to expect from the Atlassian integration? If you visit the Atlassian Admin dashboard, you should see your Atlassian organization and its sites. In the following example, the organization is "example-organization" and "Jira Core (example.atlassian.net)" is one of its sites (in this case, the only site): Tip: You will know if you are viewing the "Organization level admin page" or "Site level admin page", by inspecting the address bar. The Organization level will have the structure of https://admin.atlassian.com/o//overview (not the bolded o which stands for organization). Navigate to the "Directory" page on the top navigation and then choose "Managed accounts" on the left menu: This is the list of users and products that will be synced into Torii. You will see active and deactivated users, their product access and more details. This view shows the Managed Users on your Atlassian account. Managed Users are all the users that have an email address with a domain of your company. To add domains and claim users, see the Domains tab as seen on the screenshot above. ##### Where is the licenses list coming from? The licenses list is derived from the products assigned to each user on this list. You may have additional unassigned licenses, but the Atlassian integration currently only lists assigned licenses. ##### What are the benefits of integrating with an Atlassian organization? When creating an Atlassian organization, you can add and verify your domain. When doing so, you will be able to claim all the users with an email with this domain. This allows you to have a better view of all users across all Jira instances. It is typical for companies to discover users on sites that were used under the radar. #### What to expect from the Jira Cloud integration? When managing users of a specific Jira sites, Torii will only sync in users with access to products on this Jira site. Users may have access to multiple licenses such as Jira Core, Jira Software, Jira Service Management and Confluence. Users who have configured their email to be hidden on their Atlassian profile page, will not be synced by the integration. # Page Title Atlassian Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5169227569051-Atlassian-Integration ## Page Description Setup your Atlassian integration and get all the insights in Torii's dashboard Prerequisites Before integrating Atlassian, make sure ## Details ### How can we help? ### Atlassian Integration Setup your Atlassian integration and get all the insights in Torii's dashboard Before integrating Atlassian, make sure that: You have an organization set up at https://admin.atlassian.com/ You are an Organization Admin and not just a Site Admin.More information is available here. At least one domain has been verified for that organization. If no domain is verified, users will not be returned by the API and the integration will fail. You see users on your Atlassian admin dashboard Torii integrates with your Atlassian Cloud installation and syncs each Atlassian product's list of users, licenses, and last usage date. You will need to provide your Organization ID and API Key for the integration. #### Connect Atlassian integration to Torii Go to the Integrations page Connect to Atlassian Select the permission level Mandatory - enter the Organizational ID Mandatory - Create an API key The following fields (6&7) are optional; fill them in only if you want to use Torii to "Create and delete users."Please note the following:- Atlassian prerequisites for configuring user provisioning- Verify your domain using DNS or HTTPS method, and NOT Google Workspace Paste the Provisioning API Key / SCIM Token Paste the Directory ID, note to paste only the final part of the “Directory Base URL”, For example - https://api.atlassian.com/scim/directory/[DIRECTORY_ID]Click here for Atlassian's instructions. Repeat for every team you wish to connect #### Additional Notes Get additional information in Atlassian and Jira Cloud Integrations: A more profound look. ##### Retrieving licenses for specific sites Q: Which licenses are synced? A: Licenses for the products listed under the "Product access" dropdown are synced; valid to April 2022 are: Analytics, Bitbucket, Compass, Confluence, Jira Administration, Jira Ops, Jira Product Discovery, Jira Service Management, Jira Software, Jira Work Management, Opsgenie, Statuspage, Team Central, and Trello. A: According to this Atlassian document: deactivated users immediately lose access to Jira Cloud and all other Atlassian account services. # Page Title Automate Your SaaS Management ## Page URL https://support.toriihq.com/hc/en-us/articles/4590567564059-Automate-Your-SaaS-Management ## Page Description Overview Managing your SaaS can be time-consuming without the proper automation in place. Torii brings you several automation ## Details ### How can we help? ### Automate Your SaaS Management Managing your SaaS can be time-consuming without the proper automation in place. Torii brings you several automation capabilities to help you save time. Torii Workflows allows you to create your automation by specifying triggers and actions. Here are some examples of workflows you may want to create: Want to learn more? we highly recommend watching Torii's Workflows video series (about 30 min) ##### How to Create a Workflow #### Employee Offboarding With more than a dozen applications used by each user, keeping track of offboarding employees from SaaS applications when they leave the company is very challenging without a SaaS Management Platform. Torii automates employee offboarding tasks with its built-in offboarding workflow, giving you an offboarding audit trail for each employee. Whenever an employee leaves the org, Torii recommends that you initiate the offboarding workflow. You can decide what action to take when offboarding an employee. Note that enabling the “Ignore non-configured apps during offboarding” toggle will ensure that applications that were not manually configured with an offboarding method will not stop a user’s Offboarding process. Torii automatically tracks the removal of applications that are integrated. Therefore, integrating more applications into Torii gives you better visibility. ##### How to Start Employee Offboarding Navigate to the Offboarding page - https://app.toriihq.com/team/offboarding From the To-do tab, select the relevant employees, and click Start Offboarding You receive a prompt to configure application offboarding for the relevant applications You can monitor the progress of the offboarding from the In Progress tab You can view the offboarding audit log from the Done tab. #### Manage your renewals Moving SaaS subscriptions to annual payment is good practice, in most cases, as it allows you to get cheaper deals. However, keeping track of renewals is not easy. Torii ensures you stay on top of your renewals by giving you automatic reminders with the full context of the application. This helps you for the following reasons: Vendors can’t automatically renew contracts for you without you first reviewing them Save cost on your next renewal - knowledge is power, once you know how many licenses you actually use and how much you use the application, you can negotiate a better deal on your renewal. You’ll no longer renew applications you’re not using. Your renewal calendar can be viewed here - https://app.toriihq.com/team/renewals #### How to Set Renewals Dates Navigate to the Application Page The quickest way to get to the Application Page is by using the Quick Search on the top bar Open the Info tab Update the Next Renewal Date attribute You can update your renewal notifications from the Settings → My Notifications page # Page Title Automated Expense Deduplication ## Page URL https://support.toriihq.com/hc/en-us/articles/4550767587611-Automated-Expense-Deduplication ## Page Description This article describes the way Torii manages and prevents expense duplication. Overview Torii provides a comprehensive view of your SaaS ## Details ### How can we help? ### Automated Expense Deduplication This article describes the way Torii manages and prevents expense duplication. Torii provides a comprehensive view of your SaaS expenses and enables you to take control of your SaaS spend, identify cost-saving opportunities and plan ahead. Torii retrieves the expense information from: Integrations with financial tools such as NetSuite, Expensify, QuickBooks, and more CSV files uploaded manually #### Possible reasons for expenses duplication Getting the same expense from different sources like: Having more than one expense app integrated with Torii that will retrieve the same expense for example: NetSuite & Expensify 2 sources of manually uploaded files for example Monthly + quarterly reports A combination of expense integration app & manual report #### How does Torii handle and avoid expense duplication? Torii syncs the sources and cross-checks the Transactions If more than one source (for example Netsuite + Expensify) shows an identical Date (1), Amount (2), and Application (3) , the additional expense will be deduplicated and only one transaction will be displayed Transactions from expense files that share the same app, amount, and date, AND ARE NOT from the same file, will be considered duplicates and will be deduplicated # Page Title Automatic Actions with Integrated Apps ## Page URL https://support.toriihq.com/hc/en-us/articles/5164799902491-Automatic-Actions-with-Integrated-Apps ## Page Description This is a list that contains many of our supported automated actions Many of our integrations support deeper automatic actions that ## Details ### How can we help? ### Automatic Actions with Integrated Apps Many of our integrations support deeper automatic actions that support Offboarding and Onboarding. Here are most of these apps for your review. If you have any questions please reach out to your CSM or support@toriihq.com. # Page Title Automating employee mid-lifecycle ## Page URL https://support.toriihq.com/hc/en-us/articles/29351301252891-Automating-employee-mid-lifecycle ## Page Description Introduction Why Employee Mid-lifecycle Automation is Important Employee mid-lifecycle changes, such as promotions, departmental ## Details ### How can we help? ### Automating employee mid-lifecycle Why Employee Mid-lifecycle Automation is Important Employee mid-lifecycle changes, such as promotions, departmental transfers, or name changes, are common in any growing organization. Automating these transitions is essential to ensure smooth operations, maintain system security, and optimize productivity. Without automation, such changes require manual updates to multiple systems, increasing the risk of human error and security lapses. The main challenges addressed by employee mid-lifecycle automation include: Torii fully automates these processes, ensuring timely updates, reducing manual workload, and minimizing security risks. Now, let's explore best practices for optimizing these use cases and how to implement them effectively in Torii. #### Keeping Systems in Sync 1. Identify key changes to track. Focus on the changes that matter most to your organization. Common examples include: 2. Rely on your primary employee data source. Monitor changes in your primary employee source. Typically, this will be an HRMS, as it holds the most up-to-date employee information. 3. Determine which systems need to stay in sync. Prioritize platforms used by the majority of your employees where accurate data visibility is essential. Common examples include: ##### Configure workflow in Torii 1. Select "User attribute changed" trigger. Note that you will need to configure a separate workflow for each type of change you want to automate. For this example, we will focus on name changes. 2. Configure the trigger. When selecting a specific user attribute, such as first name, last name, start date and more, the "Changed from" and "Changed to" dropdowns will default to "Anything." This allows you to monitor any change rather than a specific change. 3. Add "Update" or "Edit user" actions. Note that two personalization tokens will be available: one for the value before the change and one for the value after the change. Use the "Trigger.User.Attribute-Changes.New-.." token to propagate updates to other systems with the new value. Use the "Trigger.User.Attribute-Changes.Previous-.." token if you need to send notifications or handle updates related to the old value (will be shown in the next example). Now you are all set! This is the suggested workflow for propagating name changes to critical organizational platforms. Now, whenever an employee’s last name is updated in Hibob, this change will be automatically propagated to Google, Slack, and Salesforce, ensuring that the employee’s name is updated consistently across all platforms. #### Adjusting Employee Access 1. Identify common promotions and career transitions Focus on the most frequent career paths within your organization that require changes in access. For instance, if junior employees often start as Marketing interns and are later promoted to the Sales team, prioritize automating this transition. 2. Adjust app access. For each career path, clearly identify which apps need to be deprovisioned and which new apps should be granted. Ensure that the transitions are smooth and align with the employee’s new role. 3. Update group and channel assignments. In addition to app access, make sure to manage group memberships, distribution lists, and channel assignments. Automate the process of adding and removing employees from relevant groups and channels to reflect their new responsibilities. 4. Notify stakeholders about organizational changes. Send notifications to relevant stakeholders about employee changes. This ensures that managers and team leads are informed and can take any necessary actions related to the changes. You will need to configure a separate workflow for each path you want to automate. For this example, we will focus on a scenario in which an employee moves from Marketing department to Sales. 2. Configure the trigger to monitor specific department changes. 3. Add actions to adjust app access. Deprovision employees from apps they no longer need, and provision access to apps required for their new role. Let's remove access to Hubspot and add access to Salesforce. 4. Update group and channel assignments. Add actions to assign employees to relevant groups and channels based on their new department and remove them from those they no longer need. For instance, if an employee is transitioning to the Sales department, remove them from Google Marketing groups and distribution lists, as well as from Slack channels associated with Marketing. Simultaneously, add them to the appropriate Sales groups and channels. 5. Notify stakeholders about department changes. Send updates that an employee moved from one department to another, using personalization tokens: [Trigger.User.Attribute-Changes.Previous-] [Trigger.User.Attribute-Changes.New-] Congratulations, you are done! This is the suggested workflow for adjusting access following employee transition from Marketing to Sales. 1. Can I automate several promotion paths in a single workflow? Not currently. Since Torii does not yet support branching (If/Else actions) in "User attribute changed" workflows, you will need to create separate workflows for each scenario. For example, one workflow would trigger for a department change from Marketing to Sales, and another would trigger for Business Development to Sales. 2. How quickly will the changes be captured? Changes are captured when an integration is synced. For Google org unit that we sync in real time, a change will be captured faster. For example, if a customer sets up a workflow with the trigger 'When a Google Workspace org unit is changed', the workflow will run within an hour of the change. 3. Which fields can I configure in the trigger? Can I capture changes for any field I want? You can monitor changes to user custom fields, that come from connected IDPs, HRMS and few other systems (e.g. Salesforce). On top of that, we also support monitoring changes for names, specifically: 4. Do I need to specify the exact change (e.g. changed from X to Y), or can I capture any change? To capture any change to the selected attribute, configure the trigger to Changed from Anything and Changed to Anything . Please note that “Anything” also includes “Nothing”, meaning it will apply if: # Page Title AWS Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5730639794459-AWS-Integration ## Page Description Overview Torii integrates with AWS and syncs the users' list. Please note: The AWS SCIM API has a limit for results of fetching user ## Details ### How can we help? ### AWS Integration Torii integrates with AWS and syncs the users' list. Please note: The AWS SCIM API has a limit for results of fetching user data of 50 users. User data presented for this app may be incomplete due to this restriction. Users are authenticated using SAML single sign-on Users are provisioned by an Identity Provider using SCIM To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, AWS help center, or their support. #### Integration Process To connect AWS to Torii, follow these steps: Once the integration is connected and synced, it will display a green checkbox # Page Title Axure Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/27471296922011-Axure-Integration ## Page Description Overview Torii integrates with your Axure account and syncs the following information: User Fields License Types User (Email) Pro ## Details ### How can we help? ### Axure Integration Torii integrates with your Axure account and syncs the following information: You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. ##### Accounts & permissions #### Connect the Axure Integration Go to the Integrations page and click on the Axure tile. Click on Connect. Enter your Axure username and password, then click Connect. Once the integration is connected and synced, a green checkbox will be displayed. # Page Title Azure DevOps Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/10264154987547-Azure-DevOps-Integration ## Page Description Setup the Azure DevOps integration and get all the insights in Torii's dashboard Overview Torii integrates with Azure DevOps and syncs ## Details ### How can we help? ### Azure DevOps Integration Torii integrates with Azure DevOps and syncs the Users, Status, and Licenses. Enable third-party application access via OAuth #### To connect Azure DevOps to Torii, follow the below steps: #### Integrations Capabilities and Actions You can always be updated with application information and actions from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title BambooHR Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166192272155-BambooHR-Integration ## Page Description Set up the BambooHR integration and get all the insights in Torii's dashboard Overview Follow the below process to integrate ## Details ### How can we help? ### BambooHR Integration Follow the below process to integrate BambooHR with your Torii environment. Make sure you have access to the following fields, which are synchronized to Torii: For syncing user offboarding-related attributes in real-time and using App event workflow trigger: 1. A user who connected the integration must have access to the fields: 2. A user who connected the integration must have only one access level level. Access levels in BambooHR are managed in Settings / Access Levels. A. Generate an API Key B. Integrate BambooHR in Torii using the API & the URL used to access yourBambooHR Account C. Update the User Lifecycle settings ##### B. Integrate BambooHR in Torii In the Torii Admin Console (or via a connect link provided by the Torii Admin), Click on Integrations (7) >> BambooHR (8) >> Connect (9) Enter your BambooHR URL (ie: https://subdomain.bamboohr.com ), your API Key and click Connect (10, 11) Now, to ensure you get the user lifecycle information in Torii, define the BambooHR as your Human resource management system. 12. Under Settings >> User Lifecycle, click the Edit button to review the options. 13. Select BambooHR 14. In case BambooHR is your only source for user management, make sure touncheck Azure and Google workspace 15. Click Preview changes 16. Apply changes On the next scheduled sync, the users' statuses will be reflected in Torii # Page Title Basecamp Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166967356955-Basecamp-Integration ## Page Description Set up the Basecamp integration and get all the insights in Torii's dashboard Overview Torii integrates with your Basecamp account and ## Details ### How can we help? ### Basecamp Integration Set up the Basecamp integration and get all the insights in Torii's dashboard Torii integrates with your Basecamp account and syncs: users list, license, and roles. Note that Torii can sync Multiple Basecamp accounts. ##### Connect Basecamp integration to Torii Go to the Integrations page and select the Basecamp tile In the Connect Basecamp click Connect You will be redirected to Basecamp, log in to Basecamp Allow Torii access to Basecamp account Once the integration is connected and synced, it will display a green checkbox. # Page Title SOC 2 Best Practices with Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/5202618946075-SOC-2-Best-Practices-with-Torii ## Page Description How to Use Torii to Help With Your SOC 2 Review There is a ton of preparation for SOC 2 and Torii can help reduce the workload across the ## Details ### How can we help? ### SOC 2 Best Practices with Torii There is a ton of preparation for SOC 2 and Torii can help reduce the workload across the team. Here are the best practices of using Torii to help prepare for your SOC 2. #### Gathering Control Data You will need to gather proof of your control data to pass a SOC 2 review. There are several notable ways Torii can be used to create these control and be the source of proof. #### Onboarding New Employees Torii can be used to create and manage the onboarding process of new employees. Not only can you automatically add users to your core tools before their first day, but you can also do the following: Alert appropriate teams that a new employee is starting automatically Send a checklist of steps that need to be taken for the employee Send a checklist of steps that need to be taken by the employee Send employee responsibilities and company policies to the employee Add employees to user groups on different systems automatically #### Annual Access Review Torii provides you with a real-time view of the systems that employees are using from the moment they join the company, until the time they leave. For your core tools, you can use Torii to not only see who is a current and active user but also what access rights they have. This allows you to do the following: Remove users who no longer need access to the application Remove admin rights to users who no longer need privileged access Add users and admins who should have access to the application Set up an automated workflow to send alerts whenever an employee accesses a retired application Using our SSO audit report you can review what method employees are using to sign up to the different systems. ##### Offboarding Terminated Employees Torii can be used to create and manage the offboarding process. In addition to automatically offboarding employees from core tools, you can do the following: Send automated alerts to remove the employee from all applications Send automated alerts to employees responsible for none SaaS application tasks Automatically transfer files from one employee to another as part your onboarding process Real-time report and audit of the offboarding process of each employee #### Vendor Management Torii helps with several aspects of vendor management. You can store all relevant information (e.g. contracts, contacts, use cases) and manage the renewal. You will receive notifications when renewals are upcoming so you can begin your security process. If you will be ending a relationship with a vendor you can close this application within Torii and keep all data for historical and audit purposes. #### Confidentiality Agreements with Vendors You will need to ensure that your vendors have the same level of confidentiality commitments as you do. This can include signing NDAs and DPAs. Store all of these documents, at the application level, for easy storage and access across all teams. #### Keeping an Audit Trail Having the controls in place is part of the battle. Being able to audit your work and prove the controls are working is just as essential. Any automated work completed by Torii and updates made within the platform is kept for this purpose. You will have access to the following: Who was onboarded and what actions were taken Who was offboarded and what actions were taken All applications discovered All documents stored All information added, including who changed them and when #### Storing Data for Easy Use and Discovery Torii can be your Source of Truth for all SaaS applications. Having a one-stop shop for all this information increases visibility across the organization and saves time for finding important documentation. This is incredibly valuable when preparing for your SOC 2. #### Planning for the Next Annual Review These reports will be needed every 6 to 12 months. Having the right tool to gather, maintain and share your data is key to completing SOC 2 as efficiently as possible. If you would like to discuss further how Torii can help with your SOC 2 preparation please reach out to your CSM or support@toriihq.com. # Page Title Bill.com Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166211083931-Bill-com-Integration ## Page Description Setup the Bill.com integration to get a complete overview of all SaaS expenses. Torii integrates with Bill.com and analyzes SaaS ## Details ### How can we help? ### Bill.com Integration Setup the Bill.com integration to get a complete overview of all SaaS expenses. Torii integrates with Bill.com and analyzes SaaS expenses. Torii will automatically match transactions to the correct application, summarize expenses and provide insights. Torii syncs transaction data up to one year prior to first connection date. For connecting Bill.com, go to the Integrations page and provide a Username and Token. The token can be generated with the following steps: Log in to your bill.com account Click Settings on the top bar Under Apps, select Tokens A name for the token will auto populate, you can edit it to TokenforTorii Click Save. The token will be generated Copy the token before navigating away from this page, as it is only shared one time. Go to Torii's Integrations page, click on the bill.com tile and provide your Username and Token. Torii syncs bills from your Bill.com account and matches SaaS related expenses to their respective app on Torii. The following fields of bills are used for mapping the expense to the correct application: vendor.name and description. Q: I am interested in expense data that is older than what Torii brings in from this integration. Is there a way to get more than one year of data synced into Torii? A: While we we only sync a year of expense data upon connection of this integration in Torii by default, we can bring in data from any time point. If you are interested in getting data from an expanded time frame, please contact Torii's support team and we will be happy to help you with this. Please note, syncing data for a lengthy time period can bring back a lot of data, which can take a significant amount of time to sync (up to a several days, depending on the period of time back you are interested in). # Page Title Bitwarden Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/38737855860635-Bitwarden-Integration ## Page Description OverviewTorii integrates with Bitwarden and syncs: User Fields License Types Email Bitwarden Role Status Torii supports ## Details ### How can we help? ### Bitwarden Integration Torii integrates with Bitwarden and syncs: Accounts & Permissions #### How to Generate the Required Values #### How to Connect the Integration Select the Bitwarden tile. Once the integration is connected and synced, a green checkbox will appear next to the integration. For any further questions, please contact Torii Support. # Page Title BlueJeans Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/14829649108635-BlueJeans-Integration ## Page Description Overview Torii integrates with your BlueJeans account and syncs the users' roles, statuses in the app, and licenses. Torii can support ## Details ### How can we help? ### BlueJeans Integration You will be required to obtain BlueJeans App Key and the App Secret #### Connect BlueJeans integration to Torii. #### Integration Capabilities and Actions You can constantly be updated with application information and actions from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title Bonusly integration ## Page URL https://support.toriihq.com/hc/en-us/articles/33227090129307-Bonusly-integration ## Page Description Overview Torii integrates with Bonusly and syncs the following: User Fields License Types Email Bonusly Status Role Last ## Details ### How can we help? ### Bonusly integration Torii integrates with Bonusly and syncs the following: ##### Accounts & Permissions To connect this integration, we require the following: #### How to Generate the Required Token ##### How to Connect the Integration Torii supports performing automated actions on Bonusly users. One of the supported actions is: Delete all Bonusly user bonuses. Important: This action deletes only the bonuses that the selected user has received. Bonuses that the user has given to others will not be deleted. Q: Can I connect multiple Bonusly accounts to Torii?A: Yes, Torii supports syncing multiple Bonusly accounts. Q: What happens if I lose my API Access Token?A: If the token is lost, you’ll need to generate a new one by following the steps in the How to Generate the Required Token section. For any additional assistance, please contact Torii Support. # Page Title Box Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5188048772251-Box-Integration ## Page Description Setup the Box integration and get all the insights in Torii's dashboard Overview Torii integrates with Box and syncs the list of Box ## Details ### How can we help? ### Box Integration Torii integrates with Box and syncs the list of Box users, wasted licenses, last usage date, and usage frequency. In addition, the integration enables you to perform actions straight from Torii like: #### To connect Box to Torii, follow the below steps: ##### Additional Notes #### Integration Capabilities and Actions You can always be updated with application information and actions from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title Browser Extension Communication ## Page URL https://support.toriihq.com/hc/en-us/articles/5146101734043-Browser-Extension-Communication ## Page Description How to communicate the importance of the browser extension to employees. Before deploying the Torii browser extension to your employees, ## Details ### How can we help? ### Browser Extension Communication How to communicate the importance of the browser extension to employees. Before deploying the Torii browser extension to your employees, we suggest sending them an email explaining the motivation of using Torii's browser extension. You can use this template as an example: Rolling out Torii browser extension to all employees ##### Who should read this? Everyone working at [Company] Torii is a platform that helps us keep track of the cloud apps we love and use for our work at [Company]. Torii maps the applications and users which help to evaluate the actual usage of each app. At the moment, Torii is helping us manage [367] different business applications being used! The main sources for information are: [Company]’s Google account [Company]’s Slack account [Company]’s Okta account [Company]’s Onelogin account Expense reports from accounting systems Browser extension ##### Why do we need it? To evaluate app utilization and efficiency and to comply with our security certifications. On top of that, latest GDPR regulations requires [Company] IT to have up-to-date list of all SaaS being used. ##### What does it mean for me? A browser extension will be installed, looking like this: The browser extension will keep track of the business apps that you access using your Company’s email. Under the browser extension you will have full visibility of your work related apps that Torii has discovered. You will be asked to activate the extension by signing in to Torii. The short sign-in process takes less than 2 minutes. ##### What kind of information is collected? Only the fact that you have logged on to an app, using your [Company]’s email. ##### Does the extension map applications with personal usage? No. Torii only maps business SaaS applications and does not analyze or store personal usage. Examples of apps that are mapped: Salesforce, HubSpot, New Relic, MailChimp, and any app that is used for business purposes. Examples of apps that are not mapped: Facebook, LinkedIn, Twitter, Audible and any other personal apps. Some applications may present versions for personal and versions for business use, such as Facebook vs Facebook ads, LinkedIn vs LinkedIn Recruiter, Twitter vs Twitter ads. Torii only maps the business usage. ##### What information is visible to our internal Torii admins? And who are these people? Exactly the same information that you can see yourself under Torii extension: list of apps and how frequently the app has been used. Torii project is lead by the [Department] and [Name] will be using the admin tool mostly. Admin access is also granted for roles who manage or monitor our tools already today: [Department] ##### Are there any security or privacy concerns? What about the apps I access with my personal credentials? If you are not using [Company]’s email, the app is not mapped - you can easily check this from app list under your browser extension. Our InfoSec has approved using Torii. And security certifications are actually one of the reasons we are using Torii. Additional information about the extension can be found at https://toriihq.com/extension/ # Page Title BrowserStack Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166627471387-BrowserStack-Integration ## Page Description Set up BrowserStack integration and get all the insights in Torii's dashboard Overview Torii integrates with your BrowserStack account ## Details ### How can we help? ### BrowserStack Integration Users: list, roles, status, last login dates To connect Torii to BrowserStack you will be required to have: Enterprise Plus accountNote: Customers with other plan types may contact BrowserStack support to inquire about API access. Owner/Admin permissions Get BrowserStack Username and Access Key From the BrowserStack site, Go to Summary (1) and copy the Username (2) and Access Key (3) (see BrowserStack Use Management API) #### Connect BrowserStack integration to Torii Go to the Integrations page and select the BrowserStack tile Click Connect to BrowserStack In the Connect BrowserStack enter the Username and Access Key Once the integration is connected and synced, it will display a green checkbox # Page Title Bulk Updates Contract Details ## Page URL https://support.toriihq.com/hc/en-us/articles/5617470723867-Bulk-Updates-Contract-Details ## Page Description To begin a bulk update of a contract field, navigate to your Contacts tab within the Renewals section and click the check-boxes to the ## Details ### How can we help? ### Bulk Updates Contract Details To begin a bulk update of a contract field, navigate to your Contacts tab within the Renewals section and click the check-boxes to the left of each Contract to be adjusted: Once selected, the Search and Export functions at the top-right of your list will transform temporarily into buttons affording the ability to Edit the selected contracts, or delete them entirely: Clicking Edit will display the field adjustment dialogue box where you can define the data to be changed and the field's new value: Once satisfied, click the Update button to apply your changes: # Page Title Bulk Updates to Application Details ## Page URL https://support.toriihq.com/hc/en-us/articles/4572934754203-Bulk-Updates-to-Application-Details ## Page Description How to update details across multiple Applications or Contracts Bulk updates allow you to apply changes to one field across all, or a ## Details ### How can we help? ### Bulk Updates to Application Details Bulk updates allow you to apply changes to one field across all, or a selection of Applications or Contracts. #### Updating Applications To begin a bulk update of an application field, navigate to your Applications list and click the check-boxes to the left of each Application that you would like to change: Once a selection has been made, the Search and Export functions at the top-right of your list will transform temporarily into a blue Edit button: Clicking Edit will display the field adjustment dialogue box where you can define the data to be changed and its new value: Once satisfied, click the Update button to apply your changes: #### Updating Contracts # Page Title Microsoft Dynamics 365 Business Central Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/39683387864219-Microsoft-Dynamics-365-Business-Central-Integration ## Page Description OverviewTorii integrates with Microsoft Dynamics 365 Business Central and analyzes SaaS expenses: Default synced transaction types ## Details ### How can we help? ### Microsoft Dynamics 365 Business Central Integration Torii integrates with Microsoft Dynamics 365 Business Central and analyzes SaaS expenses: ##### Accounts & Permissions #### How to Generate the Required Values ##### In Microsoft Entra Admin Center: Go to Authentication (Preview) > Click Add Redirect URI Do this step for both URIs:https://businesscentral.dynamics.com/OAuthLanding.htmhttps://api.toriihq.com/api/auth/microsoftDynamicsBusinessCentral/callback Dynamics 365 Business Central > Delegated permissions > Add Financials.ReadWrite.All ##### In Dynamics 365 Business Central: Under Environments, locate the Environment you wish to connect to Torii #### How to Connect the Integration Once the integration is connected and synced, a green checkbox will appear next to the integration. Q: What happens if the client secret expires?A: You will need to provide a new client secret and reconnect the integration. Q: How does Torii sync purchase invoice data?A: By default, Torii syncs each paid purchase invoice as a single transaction, which includes all line items from that invoice.If needed, this behavior can be adjusted so that each line item is synced as a separate transaction.For more information or to request this change, please contact Torii Support. For any further questions, please contact Torii Support. # Page Title Calculating Cost Per User ## Page URL https://support.toriihq.com/hc/en-us/articles/4701190233243-Calculating-Cost-Per-User ## Page Description Understanding how Torii calculates the cost per user When viewing an individual User Page, you can see that Torii displays the annual ## Details ### How can we help? ### Calculating Cost Per User When viewing an individual User Page, you can see that Torii displays the annual cost of the user. The Annual cost amount at the top is the total sum of the Annual cost column. Annual cost per application is shown for integrated apps where license cost has been set, and for non-integrated apps that their cost per user has been set. #### Configuring Cost Per User Cost per user can be configured in two ways: From the Licenses page for integrated applications From the Application Page → Chargeback tab → Configure → Bottom-up strategy (read the chargeback report help article for more details) # Page Title Calendly Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5167039511067-Calendly-Integration ## Page Description Set up Calendly integration and get all the insights in Torii's dashboard Overview Torii integrates with your Calendly account and syncs: ## Details ### How can we help? ### Calendly Integration Torii integrates with your Calendly account and syncs: users list, names, emails, roles, and license. With Torii, you can also perform the following actions: Invite users to Calendly Remove users from Calendly Note, that Torii can support multiple Calendly accounts. ##### Connect Calendly integration to Torii From the Torii Integrations page, click on the Calendly tile Click Connect to connect to Calendly In the Connect Calendly box, select the Read or Read and Take action option.Read: View basic information about members' accounts like users' names and emails.Read and Take action: Allow Torii to view users' lists, license data, and manage users. You will be redirected to Calendly to approve accessClick continue Once the integration is connected and synced, it will display a green checkbox. # Page Title Can Users be Manually added into Torii Environment? ## Page URL https://support.toriihq.com/hc/en-us/articles/8204427149851-Can-Users-be-Manually-added-into-Torii-Environment ## Page Description Yes, though we believe that the SaaS Management should be automated to prevent stale data and keep the data always up-to-date, In some ## Details ### How can we help? ### Can Users be Manually added into Torii Environment? Yes, though we believe that the SaaS Management should be automated to prevent stale data and keep the data always up-to-date, In some cases, you might want to add users manually, for example, Read more about it in Add Users Manually article. # Page Title Canva Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/12659467120411-Canva-Integration ## Page Description Setup your Canva integration and get all the insights in Torii's dashboard Overview Torii integrates with Canva and syncs users' names, ## Details ### How can we help? ### Canva Integration Setup your Canva integration and get all the insights in Torii's dashboard Torii integrates with Canva and syncs users' names, emails, and statuses. ##### Connect Canva integration to Torii # Page Title Chargeback Report ## Page URL https://support.toriihq.com/hc/en-us/articles/4701249821211-Chargeback-Report ## Page Description IT chargeback is a process where departments are held accountable for their technology usage and resource expenses. IT chargeback usually ## Details ### How can we help? ### Chargeback Report IT chargeback is a process where departments are held accountable for their technology usage and resource expenses. IT chargeback usually results in a report that brings visibility to the costs associated with the IT services the various departments consume. #### Chargeback Strategies Different tools may require different allocation strategies. Different chargeback strategies should be used with different tools. Torii support 3 different chargeback strategies: Bottom up - cost per license - The recommended strategy to apply where different costs apply to different license types. Use this strategy for integrated applications where you pay by seat. Bottom up - cost per user - The recommended strategy to apply where you pay per user regardless of their license type. Use this strategy for non integrated applications where you pay by seat. Top down - The recommended strategy for apps that are not charged per seat (e.g. Cloud Computing, Firewalls, Network Infrastructure) where you allocate cost to business units by percentage. Use this strategy for applications that are not charged by seat. #### Where to View Chargeback Reports Navigate to the Application Page → Chargeback tab to see detailed chargeback data for a specific app. Go to the Licenses Page → Chargeback tab to view a summary of all application chargebacks in one place. #### Configuring Chargeback Per Application Note that changing the annual cost per license here will also update the values on the Licenses Page, and vice versa. #### Top-down allocation For top-down allocation, Torii automatically suggests allocation percentages based on the current user count within each selected business unit. For integrated applications, Torii uses the total number of users with access. For non-integrated applications, it relies on the discovered users. You can manually adjust the suggested percentages if needed. This is particularly important for non-integrated apps, where user counts per business unit may be less accurate due to reliance on indirect discovery methods. To ensure the data reflects your latest organizational structure, you can recalculate chargebacks at any time by clicking the “Update user count and reallocate” link above the allocation table. Torii also displays a timestamp showing when the user count was last refreshed. Tip - Recalculate your cost allocations periodically (e.g., quarterly) to align with your budgeting cycle and reflect organizational changes. # Page Title Chorus Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/26450554301851-Chorus-Integration ## Page Description Overview Torii integrates with your Chorus account and syncs the following information: Users list - Emails, statuses, and roles ## Details ### How can we help? ### Chorus Integration Torii integrates with your Chorus account and syncs the following information: Multiple Chorus accounts can be connected. #### Connect Chorus Integration #### Integration Capabilities You can check Chorus integration capabilities from our Integrations Page under Integration Capabilities. # Page Title Cisco Meraki Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5190386853275-Cisco-Meraki-Integration ## Page Description Usage Setup your Cisco Meraki integration and get all the insights in Torii's dashboard Torii integrates with Cisco Meraki and syncs the ## Details ### How can we help? ### Cisco Meraki Integration Torii integrates with Cisco Meraki and syncs the list of users, roles, last logged-in time, and licenses. With this integration, you will be able to: Identify users who haven't used Meraki in a long time List your current Meraki Administrators and whose access should be revoked when employees leave your company To connect Meraki to Torii, you will need to provide Torii "Cisco Meraki Dashboard" API key.Click here to learn how to generate it.Note that it might take a few minutes for the API to be activated, so we recommend waiting before connecting Torii. #### Integrate Cisco Meraki with Torii # Page Title Cisco Umbrella Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/23562044879387-Cisco-Umbrella-Integration ## Page Description OverviewTorii integrates with Cisco Umbrella and syncs: User Fields License Types Users Cisco Umbrella Licenses Status in app ## Details ### How can we help? ### Cisco Umbrella Integration Torii integrates with Cisco Umbrella and syncs: #### Getting Cisco Umbrella API Key, API Secret and Dashboard URL Dashboard URL - you can locate your account number in the Umbrella URL #### Connect Cisco Umbrella Integration In the "Connect Cisco Umbrella" window, enter API key, API secret, dashboard URL and click Connect # Page Title ClickUp Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/11576174890011-ClickUp-Integration ## Page Description Overview Torii integrates with your ClickUp account and syncs the user's data: ID, email, and first & last name Torii can sync to ## Details ### How can we help? ### ClickUp Integration 1. The integration returns only users from the workspaces that are available to the user who connected the integration. This is due to limitations in the ClickUp API. 2. When assigning a role within a workspace in workflow actions, the person connecting the integration to Torii must be the workspace owner. Otherwise, only the admin and member roles will be available. Make sure you have permission to access all of the available teams #### Connect ClickUp Integration # Page Title ClientSuccess Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/15043088893723-ClientSuccess-Integration ## Page Description Overview Torii integrates with your ClientSuccess account and syncs the users' names, emails, statuses, licenses statuses, and roles. ## Details ### How can we help? ### ClientSuccess Integration Torii integrates with your ClientSuccess account and syncs the users' names, emails, statuses, licenses statuses, and roles. #### Connect ClientSuccess Integration # Page Title Cloudflare Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/16827476462875-Cloudflare-Integration ## Page Description Overview Torii integrates with your Cloudflare account and syncs the user's data: ID, email, first & last name, role and status. ## Details ### How can we help? ### Cloudflare Integration Torii integrates with your Cloudflare account and syncs the user's data: ID, email, first & last name, role and status. Make sure you have a Cloudflare account and access to your account ID and API Token. ##### Getting Cloudflare Account ID and API Token #### Connect Cloudflare Integration Go to the Integrations page and click on the Cloudflare tile. In the "Connect Cloudflare" window, enter Account ID and API Token and click Connect. The "Test Connection" window will display, generating the connection test. Click Continue to continue. Once the integration is connected and synced, it will display a green checkbox. #### Integration Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title Codacy Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5167098292251-Codacy-Integration ## Page Description Set up Codacy integration and get all the insights in Torii's dashboard Overview Torii integrates with your Codacy account and syncs: ## Details ### How can we help? ### Codacy Integration Torii integrates with your Codacy account and syncs: Users list - Names, emails, and last used date License - Shows if the user has an account license and supports the last visit date Note that Torii can sync multiple accounts To connect Torii to Codacy, you will need to get the following from Codacy: You are required to be a user admin How to get an API token - (or Codacy docs external article) ##### How to get Codacy API token From the Codacy website go to your user menu and select Your account Go to Access management Go to the Account API Tokens section and select Create API Token Copy the API token ##### Connect Codacy integration to Torii Go to the Integrations page and select the Codacy tile Click Connect to Codacy In the Connect Codacy box enter the API URL you created in the previous step Select the Provider from the dropdown list In Remote Organization Name, copy the name from your user. In this example "Company name." Once the integration is connected and synced, it will display a green checkbox. # Page Title CoderPad Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166939969691-CoderPad-Integration ## Page Description Set up the CoderPad integration and get all the insights in Torii's dashboard Overview Torii integrates with your CoderPad account and ## Details ### How can we help? ### CoderPad Integration Torii integrates with your CoderPad account and syncs: the users' list, emails, and licenses. To connect Torii to CoderPad you will need: CoderPad API key CoderPad Team or Business plan ##### How to get CoderPad API token From the CoderPad website go to your user >> My Settings Copy the API key (not visible in the image) ##### Connect CoderPad integration to Torii Go to the Integrations page and select the CoderPad tile In the Connect CoderPad box enter the API created in the previous step Once the integration is connected and synced, it will display a green checkbox # Page Title Combining email aliases using Merge Users ## Page URL https://support.toriihq.com/hc/en-us/articles/23665174442651-Combining-email-aliases-using-Merge-Users ## Page Description Overview Torii identifies users through their unique email addresses. Whenever a new email address is detected from an app or any other ## Details ### How can we help? ### Combining email aliases using Merge Users Torii identifies users through their unique email addresses. Whenever a new email address is detected from an app or any other source, Torii generates a new user. This process ensures comprehensive tracking of app activities, aiding in cost-saving measures by uncovering instances where an individual has multiple user accounts for the same app. People may have multiple emails associated with them across different systems due to various reasons (such as name change, domain change, emails used across different regions, among others). For this reason, Torii’s Merge Users feature will automatically detect multiple email aliases for a single employee, providing IT the option to merge aliases with a single click of a button. By merging aliases, Torii provides a complete picture of each user’s apps, licenses, costs and more, as well as supporting automating actions across all users a person has. The Merge Users feature currently supports merging users based on data coming in from an IDP source. You can choose to either: #### Notes on updating your IDP Fields #### Configuring the Merge Users feature To activate the merge users feature, navigate to the Settings → Users & Employees tab. Then, click on the “Configure Merge” button under the “Merge Users” section, and follow the instructions to set up the Merge Users feature. This should only take a few moments. We highly recommend you select the “Email full changes report” and review the data before turning this feature on. In case of data discrepancy, please verify that user aliases configured in your IDP of choice are set up correctly. but don’t worry, this feature is completely reversible with no loss of data, should you choose to do so. After configuring the Merge Users feature, you will be able to edit the merge configuration and/or revoke the merge from the Settings → Users & Employees tab. Selecting either option will reopen the wizard and inform you of the expected changes. ### Where will I feel the effects of this feature? #### Changes to the UI Once Merge Users has been configured (and after a short sync), you will notice changes in Torii due to all “users” for a person being consolidated: #### Changes to workflows and actions For the most part, workflows and actions will continue to operate with no changes. There are some exceptions: #### Changes to offboarding With Merge Users feature turned on, when you begin offboarding for a user, all emails and app accounts associated with that user will be deprovisioned as per the offboarding settings you’ve defined in Torii. The merged user’s status will be set based on the status of the user who was previously associated with the primary email of the merged user. Here’s an example - let’s say we merge these users together: user1@example.com (current), and user2@example.com (past). What about users in the process of being offboarded? #### Changes to Torii Login You will be able to continue logging into Torii using any email you used previously, retaining any permissions you had. This is true even if you are logging into Torii using a non-primary email.Please note the following: #### Changes to Discovery Torii’s browser extension supports discovery for email aliases - so any app discovered by the browser extension for any of a user's emails will count towards app discovery and usage for that user.This is true as long as those aliases are from one of the domains configured for your Torii account. This is to prevent the browser extension from collecting information on private browsing sessions (i.e. if you @gmail email as an alias for your work email, the browser extension will not collect usage data for that email). #### Important notes Q: Why are some of my email aliases not appearing under my user's additional emails? A: Under "additional emails", Torii shows all emails for which both of the following are true: # Page Title Concur Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166190024731-Concur-Integration ## Page Description Overview Torii leverages SAP Concur API, which allows Torii to automatically update your SaaS expenses without any user interaction. ## Details ### How can we help? ### Concur Integration Torii leverages SAP Concur API, which allows Torii to automatically update your SaaS expenses without any user interaction. Torii syncs expense reports from your Concur account and matches SaaS-related expenses to their respective app on Torii. The following fields of transactions are used for mapping the expense to the correct application: VendorDescription , BusinessPurpose and ExpenseTypeName and SpendCategory. Torii syncs transaction data up to one year prior to first connection date. ##### Account & Permissions To connect the integration, Concur Web Services subscription is required. Torii requires the following scopes: receipts.read, user.read, company.read, creditcardaccount.read, expense.report.read, purchaserequest.read, user_read, EXPRPT, CCARD, BANK, EXTRCT, FOP, GHOST, INVPMT, INVVEN, USER, COMPANY #### Create a Torii application in Concur To connect Concur to Torii, please follow these steps: Once you have registered an application, you will receive: Client ID - A unique UUID4 identifier for your application. Client Secret - Your application’s password. Base URI - The Base URI (also known as the Instance URL) is the domain where the SAP Concur entity resides. For example, https://us.api.concursolutions.com. There will be a different domain for each of the following locations - North America data center, EMEA data center, China data center, and PSCC data center. For more information click here. Username and password - A Concur username and password, of a user who has a Web Services Admin role or Proxy Logon role. Please reach out to Concur support/Partner Enablement Manager to get this feature enabled (based on your current subscription, this feature may be an additional Concur cost). Export transactions (CSV file) from Concur and import them into Torii. #### Connect Concur integration to Torii Go to the Integrations page and select the Concur tile Click Connect to Concur Enter the Client ID, Client Secret, Base URI Select a preferred Authentication Type (this affects what data you input in the next two fields) Once the integration is connected and synced, it will display a green checkbox. #### Finding your Company UUID and Company request token Go to your Concur portal. Click Administration > Company > Authentication Admin. The Authentication Administration page appears. Click Company Request Token. The admin Company Request Tokens page appears. In the App ID field, type the App ID or Client ID. NOTE: Clients can obtain a App ID or Client ID through one of the following methods: Click Submit. The Company Request Token Successfully Created dialog appears, displaying the Company UUID and the Company Request Token. Before clicking OK, record the Company UUID and the Company Request Token Q: I am interested in expense data that is older than what Torii brings in from this integration. Is there a way to get more than one year of data synced into Torii? A: While we we only sync a year of expense data upon connection of this integration in Torii by default, we can bring in data from any time point. If you are interested in getting data from an expanded time frame, please contact Torii's support team and we will be happy to help you with this. Please note, syncing data for a lengthy time period can bring back a lot of data, which can take a significant amount of time to sync (up to a several days, depending on the period of time back you are interested in). # Page Title Configuring the Custom Attributes Field in Torii Actions ## Page URL https://support.toriihq.com/hc/en-us/articles/39146001450523-Configuring-the-Custom-Attributes-Field-in-Torii-Actions ## Page Description Using the Custom Attributes Field in Torii Actions Some actions in Torii support a Custom Attributes field, which allows you to update ## Details ### How can we help? ### Configuring the Custom Attributes Field in Torii Actions #### Using the Custom Attributes Field in Torii Actions Some actions in Torii support a Custom Attributes field, which allows you to update advanced or non-standard user information in third-party applications - such as Google Workspace, Microsoft Entra ID, and others. This article explains when and how to use this field, what to look out for, and how to avoid common mistakes. #### What Is the Custom Attributes Field? The Custom Attributes field gives you additional flexibility by allowing you to define extra user properties using key-value pairs. These are included in the API request sent to the third-party application. You can use Custom Attributes to update data that isn’t available in the standard fields Torii provides. Examples include: #### What You Should Know Before Using Custom Attributes Anyone using this field should feel confident to do so - but there are a few important things to understand before configuring it: ##### Understand the Third-Party App’s API The field interacts directly with the third-party app’s API, so it's important to understand: ##### Use the Third-Party API Documentation The best way to ensure your configuration is correct is to consult the third-party app’s official API reference. A few examples: This will help you understand: #### How to Use the Custom Attributes Field ##### Key-Value Format Here are some examples of valid configurations using different data types: In the Torii UI: #### Things to Be Aware Of ##### 1. Custom Attributes Override Predefined Fields If you enter a key that already exists in the predefined fields of the action (e.g., department, address), your custom value will override the value from the predefined field. Only do this when you intentionally want to override default behavior. ##### 2. Arrays May Overwrite Existing Data When updating fields that expect multiple values - such as phones, addresses, or emails-you must include all values you want to preserve. If you only send part of the array, the third-party system may delete existing data. This may remove other phone numbers already on the profile. When reviewing third-party API docs, look for indications of how updates are handled - especially whether fields are fully replaced or updated individually. Below are two examples: From Google Workspace Directory API – Update User: From Microsoft Graph API – Update User (field-specific behavior): ##### 3. Personalization Tokens If you're using personalization tokens as values (like {"displayName": " [Trigger.User.First-name] "}), they could break the JSON format and will only be identified at runtime. If the token value is: fir"stName, your value becomes: This is invalid JSON and will cause an error at runtime, not during configuration. #### Example: Using Custom Attributes with Microsoft Entra ID When working with Microsoft Entra ID (formerly Azure Active Directory), you can use the Custom Attributes field to update extension fields such as onPremisesExtensionAttributes. For example, if you want to update extensionAttribute2 with a value from another system (e.g., a user's department in Okta), you can use the following configuration: This is a common use case for syncing metadata between systems, and Entra ID supports updating these extension attributes through the Microsoft Graph API. The Custom Attributes field gives you advanced control over what user data is sent to third-party systems. It’s especially helpful when your organization needs to update fields that are not available in the standard Torii action. You don’t need to be deeply technical to use it - but you do need to understand how the API expects data to be structured. When in doubt, refer to the third-party documentation or test carefully before scaling. # Page Title Configuring Torii Workflow with Okta Event Hooks ## Page URL https://support.toriihq.com/hc/en-us/articles/32201894627739-Configuring-Torii-Workflow-with-Okta-Event-Hooks ## Page Description Introduction You can trigger Torii automation from an Okta Event Hook, such as when an employee is activated or created in Okta. For more ## Details ### How can we help? ### Configuring Torii Workflow with Okta Event Hooks You can trigger Torii automation from an Okta Event Hook, such as when an employee is activated or created in Okta. For more information about Torii Webhook Triggers, see the Custom (Webhook) Trigger article. This guide will walk you through the process of setting up a workflow in Torii that reacts to Okta events using a Custom Webhook trigger. ### Step-by-Step Instructions #### Create a New Workflow in Torii #### Configure Event Hooks in Okta #### Send a Test Event from Okta to Torii Important Note: Torii requires at least one past event to build personalization tokens for future events. The event sent from the Okta preview fulfills this requirement. #### Configure Torii Trigger Payload for Personalization Tokens With these steps, your Torii workflow is now configured to trigger from Okta Event Hooks. This allows seamless automation based on Okta events. # Page Title Confluence Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/8246635945883-Confluence-Integration ## Page Description Set up Confluence integration and get all the insights in Torii's dashboard Overview Torii integrates with your Confluence account and ## Details ### How can we help? ### Confluence Integration Torii integrates with your Confluence account and syncs the users' data: ID, email, first name, last name, status, licenses status Note that Torii can sync multiple Confluence accounts. Account owners and global admins can generate an API key ##### Connect Confluence Cloud integration to Torii In the Email Address field, enter the email address with which you registered to Confluence Create and enter an API Key Once the integration is connected and synced, it will display a green checkbox. #### Application Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title New User Training #13: Congratulations on Completing Training! Now What? ## Page URL https://support.toriihq.com/hc/en-us/articles/8490744143131--New-User-Training-13-Congratulations-on-Completing-Training-Now-What ## Page Description This is video 13 out of 13 in the New User training series. Congratulations on completing your initial training series! Learn what to do ## Details ### How can we help? ### New User Training #13: Congratulations on Completing Training! Now What? This is video 13 out of 13 in the New User training series. #### Questions for Application #### Post-Training Survey! Please click this link and fill out our short New User Training survey - we strive for continuous improvement so any feedback, good or bad, is appreciated! # Page Title Consolidate Your SaaS Stack: Dealing with duplicate applications ## Page URL https://support.toriihq.com/hc/en-us/articles/34398645540251-Consolidate-Your-SaaS-Stack-Dealing-with-duplicate-applications ## Page Description Overview Torii has an extensive application database of SaaS apps, which we compare discovered app data to, so that we can fS stack. ## Details ### How can we help? ### Consolidate Your SaaS Stack: Dealing with duplicate applications Torii has an extensive application database of SaaS apps, which we compare discovered app data to, so that we can fS stack. #### Why consolidate app data? Torii stores a wealth of valuable data on your organization's applications, such as: As such, making sure each app appears only once in Torii is crucial to keeping your data and processes organized, maintaining a single source of truth for each app, and avoiding confusion. #### How do I identify cases where app duplication exists? Torii provides information on custom applications that we determine that may have a duplicate app native to Torii. This can be found in the Settings -> Custom Applications page, in the "Potential identical app" column. This column indicates whether Torii found a native Torii app that is suspected of being identical to the custom app (and what that app is). #### How do I deal with app duplications? In this same page, a "Copy app data" button appears when hovering over a custom app. you can click on this button to copy app data from the custom app to another app of your choosing. Torii will automatically pre-select a recommended application if a potential identical app is found. With a press of a button, all data is copied from the custom app to the native app, and the custom app hidden and removed form your tenant. Please note: Workflows are not affected by this feature. This means that if you have workflows which trigger based on a custom app, or take action on it - you will need to adjust that workflow to reference the native app instead. Below is a breakdown of which features are copied using the "Copy app data" button, and which need to be manually updated or transferred: General application info such as app name, URL, tags, or logo are never copied from the custom app to the native app. ##### Best practices to transfer data from a custom app to a native Torii app Use the "Copy app data" button to consolidate data from custom apps into equivalent native apps, and hide the custom apps (Keep the "Also hide app after copying the data" toggle enabled). Q: Can I copy data from my custom apps to any app, or only to the app Torii recommends? A: You can copy that data from your custom app to any native Torii app (you cannot copy data between custom apps). If Torii finds a potential identical app, we'll automatically recommend this app to transfer to, but you can certainly change the destination app. Q: I updated my custom app's URL, does Torii now check for potential matches again? A: Yes. You will see any new/different/removed potential identical app matches once you refresh the page.Q: Are the items under "Data that will be copied" copied or trasferred? Will this create duplicate contracts, expenses etc.?A: Some of the data is copied, while other is transferred from the source app to the destination app - to make sure we pick the common reasonable choice for each data type: Q: You are referring to two app types: custom apps, and native Torii apps. What are native Torii apps? A: Native Torii apps are apps that exist in the Torii application database, and are shown automatically in your tenant when data regarding them and their users is discovered. # Page Title Contracts and Procurement Management ## Page URL https://support.toriihq.com/hc/en-us/articles/5202424224411-Contracts-and-Procurement-Management ## Page Description Learn how procurement teams use Torii to make data-driven renewal decisions When procurement teams first join Torii, we hear a lot of ## Details ### How can we help? ### Contracts and Procurement Management When procurement teams first join Torii, we hear a lot of common challenges: instead of proactively engaging with vendors, they are in a reactive position- waiting for the vendor to initiate negotiation and provide pricing. Contracts are not centrally locatable or easy to find, and contract owners are even more so. So here below are the main ways that procurement teams automate and centralize their renewal process using Torii. ##### Contract Management Store current and historical contracts in one place. Upload contracts and contract owners into Torii, and make sure to include contract end dates. By including contract end dates, you will be able to automate renewal reminders. You can either upload contracts in bulk via CSV, or on an individual contract by contract basis. Below is a video showing how to add individual contracts and end dates. Pro tip: learn how to manage monthly renewals here Contract statuses are a way you can organize your activities, and close contracts. If you include these statuses, you can then incorporate the changing of statuses into your renewal workflows. For example, after a contract renews, its status can become active, instead of in review. ##### Renewal Automation 1. Renewal reminders: build automatic renewal reminders for contracts so that you can have a proactive renewal posture for negotiating with vendors 2. Build contract meets criteria workflows to update contract statuses so that you are not doing it manually every year. 3. Incorporate an approval process into a renewal workflow. For example, for high-value contracts, send an email to the CFO for her to approve or decline the renewal, and update the next steps accordingly. Below is a video showing how to do this. ##### Here are a few other ways customers have used Torii workflows to integrate and optimize their current process: Using Torii's custom actions, (web-hook/ HTTP request) you can extend functionality into another contract management system. For example, one customer sent Torii license activity data to their contract management system to begin renewal negotiations informed and ready with usage data. Using Torii's custom actions you could trigger a Jira/ help desk ticket for a renewal alert. ##### Data-Driven Decision Making When making renewal decisions, you can use the "Licenses" page inside Torii to save cost and find wasted licenses. Then, you'll be able to understand your true license activity to determine the correct number of additional licenses to purchase. Pro Tip: Make CFO's or contract owners "read only" viewers of the Torii licenses page so that you can include a link to the Torii licenses page inside your renewal workflows! This will encourage contract owners to look at their application's usage data before making renewal decisions. Learn how to use Torii's role based account access here. Please navigate to this help article to learn how to save on SaaS cost and optimize your tech stack by finding wasted licenses and underutilized applications. # Page Title Coupa Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/36971910266651-Coupa-Integration ## Page Description Overview Torii integrates with Coupa and analyzes SaaS expenses: Default synced transaction types Fields used for expense matching ## Details ### How can we help? ### Coupa Integration Torii integrates with Coupa and analyzes SaaS expenses: ##### Accounts & Permissions #### How to Generate the Required Values Find Your Coupa Hostname: Generate OAuth Credentials in Coupa: On the same page: In the Grant Type dropdown, select client_credentials. Fill in the remaining required details (e.g., name, description). Scroll down and add the following permissions: core.invoice.read, core.user.readIf you wish to use Coupa actions in Torii, make sure to also include the following additional permissions:core.comment.read, core.user.write4. Click Save. #### How to Connect the Integration Go to the Integrations page in Torii. Select the Coupa tile. Enter the required credentials: Click Connect to finalize the integration. Once the integration is connected and synced, a green checkbox will appear next to the integration. For any further questions, please contact Torii Support. # Page Title Create an Asana Task From Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/9544725229851-Create-an-Asana-Task-From-Torii ## Page Description Overview As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and ## Details ### How can we help? ### Create an Asana Task From Torii As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and relying on rich Torii data, you can create tickets or tasks in popular collaboration platforms whenever Torii identifies that a process needs to be initiated.Read more #### How to create a task # Page Title Create ClickUp Task Action ## Page URL https://support.toriihq.com/hc/en-us/articles/32251604582811-Create-ClickUp-Task-Action ## Page Description This guide highlights key points for using the "Create ClickUp Task" action in Torii, specifically about selecting the list and ## Details ### How can we help? ### Create ClickUp Task Action This guide highlights key points for using the "Create ClickUp Task" action in Torii, specifically about selecting the list and configuring the priority field. ### Selecting the List Tasks in ClickUp are always created within a specific list. When using Torii's "Create ClickUp Task" action, you must specify the list where the task will be created. #### Selecting Lists from the Dropdown #### Manually Entering List IDs If the desired list does not appear in the dropdown or if there are delays loading the available lists, you can manually enter the ClickUp list ID: To locate your ClickUp list ID: ### The Priority Field The Priority field is optional when configuring the "Create ClickUp Task" action. However, the following considerations apply: Enabling Priority in ClickUp Spaces: Ensure the Priority feature is enabled for the selected space in ClickUp. This is a prerequisite for the Priority field to function correctly. Behavior When Priority is Disabled: If Priority is disabled for the space, ClickUp will not generate an error when the priority parameter is sent via Torii. However, the Priority field may not appear or function as expected in the ClickUp UI. To avoid inconsistencies, verify that Priority is enabled in the relevant space before using this field in Torii. # Page Title Create Slack Channel ## Page URL https://support.toriihq.com/hc/en-us/articles/25786421696923-Create-Slack-Channel ## Page Description Introduction You can use Torii automation to create channels in Slack. This can be handy for the variety of use cases: 1. Employee ## Details ### How can we help? ### Create Slack Channel You can use Torii automation to create channels in Slack. This can be handy for the variety of use cases: 1. Employee onboarding. When a new employee joins, create a dedicated channel, inviting them, their managers, and other relevant people to provide a direct communication line for the newcomer. 2. Renewal preparation. When a contract renewal is coming up, create a renewal channel, invite the right people, and drop a message in the channel to discuss the renewal. #### How to create Slack Channel 1. Select Create Slack Channel action 2. Enter channel name without # prefix. You can use personalization tokens in the channel name. The maximum channel name length is 80 characters. Please note that the channel names will be automatically normalized by converting the text to lowercase, and replacing any special characters with hyphens or underscore. #### How to use the new channel in subsequent actions Once you've created a channel, you'll likely want to invite users to join and send a notification to the channel. Select the "Invite Slack user to channels" and "Send Slack notification" actions. You will see the newly created channel in the Channels list, formatted as "Action 1: New Slack channel". Please note that you'll need to add multiple "Invite Slack user to channels" actions in order to invite several users to the new channel. # Page Title Creating Application Views ## Page URL https://support.toriihq.com/hc/en-us/articles/4572720463643-Creating-Application-Views ## Page Description Create, edit and share applications table views Overview One of the best ways for viewing and managing a long list of SaaS applications ## Details ### How can we help? ### Creating Application Views One of the best ways for viewing and managing a long list of SaaS applications is to create a unique Application View for each task, you are trying to accomplish. An Application View is a combination of Application Filters and Application Columns. Application Filters (1) - filter the applications according to particular criteria. Filtered applications are hidden from the particular view you've chosen to look at your table. Application Columns (2,3) - You can choose which application attributes (columns) to show or hide in a view. This will help you minimize distractions in a specific view, ensuring that only the relevant data is shown. A view is just a different way of looking at the same underlying data. Some common use-cases for using Application Views: Applications without owners New applications Paid applications All except the Closed application #### How to Create Application Views Navigate to the Applications Page - https://app.toriihq.com/team/applications From the Views drop-down, click on Create new view Select the Sharing option- Private - Only visible to you- Shared (read-only) - "Read-only" permissions to Torii team members- Shared (full access) - Full edit and delete permissions to Torii team members Click the Create new view button Make sure to update the new filter you created with your preferred columns Note, Any update to a view is automatically saved Q: Can users change customer application Public view settings created by a different user to Private? A: Yes they can. However, note that the Private view will be functional for this specific user only. # Page Title Cursor Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/37705750122267-Cursor-Integration ## Page Description Overview Torii integrates with Cursor and syncs: User Fields License Types Email CursorAI Status Role Torii does not ## Details ### How can we help? ### Cursor Integration Torii integrates with Cursor and syncs: ##### Accounts & Permissions #### How to Generate the Required Values #### How to Connect the Integration For any further questions, please contact Torii Support. # Page Title Custodia Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5190296451483-Custodia-Integration ## Page Description Set up your Custodia integration and get all the insights in Torii's dashboard Torii integrates with your Custodia account and syncs the ## Details ### How can we help? ### Custodia Integration Torii integrates with your Custodia account and syncs the list of users, and allows you to perform actions in your account. # Page Title Custom Action: Freshdesk - Create agent ## Page URL https://support.toriihq.com/hc/en-us/articles/29591757122459-Custom-Action-Freshdesk-Create-agent ## Page Description It's possible to create an agent in Freshdesk using a custom action in a Torii workflow. Requirements Create a Freshdesk API key: ## Details ### How can we help? ### Custom Action: Freshdesk - Create agent It's possible to create an agent in Freshdesk using a custom action in a Torii workflow. #### Custom Action Configuration URL: https://{domain}.freshdesk.com/api/v2/agents Available ticket scopes: 1 -> Global Access, 2 -> Group Access, 3 -> Restricted Access The value for the Basic header must be encoded in Base 64 before being stored in the Secrets Vault. # Page Title Custom Action: Freshdesk - Delete an agent ## Page URL https://support.toriihq.com/hc/en-us/articles/29596793234075-Custom-Action-Freshdesk-Delete-an-agent ## Page Description It's possible to delete an agent, using their email address, in Freshdesk using custom actions in a Torii workflow. Requirements Create ## Details ### How can we help? ### Custom Action: Freshdesk - Delete an agent It's possible to delete an agent, using their email address, in Freshdesk using custom actions in a Torii workflow. #### Custom Action Configuration We'll first make a call to lookup the agent's Freshdesk ID and store that result using response mapping. We can then use that stored result as a personalization token to delete the agent. ##### List All Agents URL: https://{domain}.freshdesk.com/api/v2/agents Query Parameters: Response Mapping: URL: https://{domain}.freshdesk.com/api/v2/agents/@Action Custom action-Get Freshdesk agent id.response.freshdesk-agent-id The value for the Basic header must be encoded in Base 64 before being stored in the Secrets Vault. # Page Title Custom Action: Github - Block a user from an organization ## Page URL https://support.toriihq.com/hc/en-us/articles/25713703778203-Custom-Action-Github-Block-a-user-from-an-organization ## Page Description A user can be blocked from an organization in Github using a custom action in a Torii workflow. Requirements The token used to ## Details ### How can we help? ### Custom Action: Github - Block a user from an organization A user can be blocked from an organization in Github using a custom action in a Torii workflow. #### Custom Action Configuration URL: https://api.github.com/orgs/{GITHUBORG}/blocks/{GITHUBUSERNAME} #### Query Parameters Store your Github API token in Torii using our Secrets Vault. # Page Title Custom Action: PagerDuty - Add user to team ## Page URL https://support.toriihq.com/hc/en-us/articles/25560536038043-Custom-Action-PagerDuty-Add-user-to-team ## Page Description It's possible to add a user to a team in PagerDuty using a custom action in a Torii workflow. Requirements Generate a PagerDuty REST API ## Details ### How can we help? ### Custom Action: PagerDuty - Add user to team It's possible to add a user to a team in PagerDuty using a custom action in a Torii workflow. #### Custom Action Configuration URL: https://api.pagerduty.com/teams/[TEAM ID]/users/[USER ID] #### Query Parameters Store your PagerDuty API key in Torii using our Secrets Vault. # Page Title Custom Action: PagerDuty - Create a user ## Page URL https://support.toriihq.com/hc/en-us/articles/25560202029723-Custom-Action-PagerDuty-Create-a-user ## Page Description It's possible to create a user in PagerDuty using a custom action in a Torii workflow. Requirements Generate a PagerDuty REST API key - ## Details ### How can we help? ### Custom Action: PagerDuty - Create a user It's possible to create a user in PagerDuty using a custom action in a Torii workflow. #### Custom Action Configuration URL: https://api.pagerduty.com/users #### Query Parameters Store your PagerDuty API key in Torii using our Secrets Vault. # Page Title Custom Action: PagerDuty - Delete user ## Page URL https://support.toriihq.com/hc/en-us/articles/25561075628187-Custom-Action-PagerDuty-Delete-user ## Page Description It's possible to delete a user in PagerDuty using a custom action in a Torii workflow. Requirements Generate a PagerDuty REST API key - ## Details ### How can we help? ### Custom Action: PagerDuty - Delete user It's possible to delete a user in PagerDuty using a custom action in a Torii workflow. #### Custom Action Configuration URL: https://api.pagerduty.com/users/[USER ID] #### Query Parameters Store your PagerDuty API key in Torii using our Secrets Vault. # Page Title Custom Action: PagerDuty - Remove user from a team ## Page URL https://support.toriihq.com/hc/en-us/articles/25560715092123-Custom-Action-PagerDuty-Remove-user-from-a-team ## Page Description It's possible to remove a user from a team in PagerDuty using a custom action in a Torii workflow. Requirements Generate a PagerDuty ## Details ### How can we help? ### Custom Action: PagerDuty - Remove user from a team It's possible to remove a user from a team in PagerDuty using a custom action in a Torii workflow. #### Custom Action Configuration URL: https://api.pagerduty.com/teams/[TEAM ID]/users/[USER ID] #### Query Parameters Store your PagerDuty API key in Torii using our Secrets Vault. # Page Title Custom Action: PagerDuty - Update user's role ## Page URL https://support.toriihq.com/hc/en-us/articles/25560969947547-Custom-Action-PagerDuty-Update-user-s-role ## Page Description It's possible to update a user's role in PagerDuty using a custom action in a Torii workflow. Requirements Generate a PagerDuty REST API ## Details ### How can we help? ### Custom Action: PagerDuty - Update user's role It's possible to update a user's role in PagerDuty using a custom action in a Torii workflow. #### Custom Action Configuration URL: https://api.pagerduty.com/users/[USER ID] #### Query Parameters Store your PagerDuty API key in Torii using our Secrets Vault. A list of available user roles can be found at https://developer.pagerduty.com/api-reference/ce6799fc6191a-update-a-user # Page Title Custom Action: Slack - Create channel ## Page URL https://support.toriihq.com/hc/en-us/articles/25555748679451-Custom-Action-Slack-Create-channel ## Page Description A new channel can be created in Slack with a custom action from a Torii workflow. Requirements Create an app using Slack's Quickstart ## Details ### How can we help? ### Custom Action: Slack - Create channel A new channel can be created in Slack with a custom action from a Torii workflow. #### Custom Action Configuration URL: https://slack.com/api/conversations.create #### Query Parameters Store your Slack API token in Torii using our Secrets Vault. # Page Title Custom Action: Slack - Remove user from channel ## Page URL https://support.toriihq.com/hc/en-us/articles/25553252231323-Custom-Action-Slack-Remove-user-from-channel ## Page Description A Slack user can be removed from a channel using a custom action from a Torii workflow. Requirements Create an app using Slack's ## Details ### How can we help? ### Custom Action: Slack - Remove user from channel A Slack user can be removed from a channel using a custom action from a Torii workflow. #### Custom Action Configuration URL: https://slack.com/api/conversations.kick #### Query Parameters Store your Slack API token in Torii using our Secrets Vault. If you get a restricted_action error when using the action, the workspace permissions need to be changed in order to allow this API call. They can be found under Permissions > Channel Management Change the People who can remove members from public channels setting to Everyone, except guests. # Page Title Custom Actions ## Page URL https://support.toriihq.com/hc/en-us/articles/4824204903067-Custom-Actions ## Page Description Learn how to send custom HTTP requests and Webhooks to any 3rd party software. Introduction Custom actions are an advanced workflow ## Details ### How can we help? Learn how to send custom HTTP requests and Webhooks to any 3rd party software. Custom actions are an advanced workflow feature that allow you to interact with any third-party software that has an API. Here are some examples of what can be achieved: Start by creating a workflow in Torii from the Workflows page and add a trigger that will control when the workflow should run. ##### Step 1 — Add a custom action to a workflow Now, add the "Custom action (HTTP Request)" by picking it from the list: ##### Step 2 — Add description (optional) We recommend adding a short description that briefly describes what the custom action is supposed to do. ##### Step 3 — Choose HTTP method Pick the method of the HTTP request: ##### Step 4 — Choose URL Choose the URL to send the request to. In this example, we are using a Zapier webhook: ##### Step 5 — Add Query Parameters (optional) You can now add Query Parameters to the request by providing key and value pairs. You can use @ to customize the value field. ##### Step 6 — Add headers (optional) If your request requires additional headers, for authentication, for example, you can add them as key-value pairs: By default, the body is sent with Content-Type of "application/json". If you wish to use a different content type: 1. Adjust the Content-Type header with either application/x-www-form-urlencoded or multipart/form-data 2. Keep the "body" (step 7 below) as JSON and it will be sent based on the selected content type ##### Step 7 — Add body (optional) You can add a body with a valid JSON payload. In this example, we are sending a JSON payload and using the @ to add customization: For "application/x-www-form-urlencoded" or "multipart/form-data" requests, keep using JSON to define the form fields and they will be sent based on the selected content type. ##### Step 8 — Add response mapping (optional) Using the response mapping you can chain custom action's output and use it as another action's input — map the HTTP response and use it as a placeholder in subsequent actions. Mapping is only relevant when the response is a valid JSON, it is not allowed to use the characters {}, as the mapping key. The mapping key (left-side) is the name that will be used to refer to this mapping. The mapping value (right-side) is where to read the value from. For this Response Body: #### Testing the Custom Action You can test the custom action by clicking the Run now button of the workflow. # Page Title Custom Filters & Saved Views ## Page URL https://support.toriihq.com/hc/en-us/articles/9389835769755-Custom-Filters-Saved-Views ## Page Description Introduction In this article, we wish to provide you with best practices to work with our Custom filters across Torii's App.We want to ## Details ### How can we help? ### Custom Filters & Saved Views In this article, we wish to provide you with best practices to work with our Custom filters across Torii's App.We want to show you lists of commonly used filters and saved views so you can auto-create these for yourself. When referring to "filters" in Torii, we specifically talk about anywhere this filter icon/ability is available. #### Suggested Filters to Save as Custom Views #### Main Applications Page All Apps with 10 or Less Users and Over $0 in Expenses All Apps in Closed State with 1 or More Users All Apps Discovered within the Last 30 Days with Expenses Greater Than $0 All Apps in Discovered State with No App Owner All Apps Discovered within the Last 30 Days and Still in Discovered State All Apps with Expenses Greater than 0 and Active Contract Value Equal to 0 All Apps with Contract Value Equal to 0 and Active Contract Value Greater Than 0 #### Renewals > Contracts Tab: All Contracts with No Owner All Contracts with No End Date All Contracts Worth at Least $100,000 # Page Title Custom (Webhook) Trigger ## Page URL https://support.toriihq.com/hc/en-us/articles/31425402779675-Custom-Webhook-Trigger ## Page Description Introduction The Custom (Webhook) Trigger is a powerful addition to Torii's automation suite, designed to provide IT teams with ## Details ### How can we help? ### Custom (Webhook) Trigger The Custom (Webhook) Trigger is a powerful addition to Torii's automation suite, designed to provide IT teams with unparalleled flexibility. With this feature, you can initiate Torii workflows from any external system by sending a webhook containing the specific data required for your automated processes. This means your automation is no longer constrained by Torii's direct integrations, empowering you to centralize and streamline workflows across your entire ecosystem. Here are some examples of how you can use a custom trigger to enhance process automation: 1. Employee Onboarding Initiated from Ticketing SystemsEmployee onboarding often begins with a ticket in tools like Jira, Freshservice, or other ticketing systems. With Torii's Custom Trigger, you can send a webhook whenever a new ticket is opened. Torii will parse the incoming data—such as employee details—and use it in workflow actions to automate provisioning and other onboarding tasks. 2. Real-Time OffboardingStart offboarding workflows immediately when a user is terminated in HR or Identity Provider (IDP) systems by sending a webhook to Torii. While Torii supports real-time offboarding for some systems, this capability may not be available for all. The Custom Trigger fills this gap, ensuring no delay in revoking access or completing offboarding tasks. #### How Custom Trigger Works Let’s explore how to set up and use a Custom Trigger by walking through an example of triggering a user onboarding workflow from Jira. ##### 1. Select "Custom trigger (webhook)" Start by selecting the Custom Trigger (Webhook) as the trigger type when creating your workflow. ##### 2. Configure the trigger ##### 3. Configure your other system to send a webhook to Torii In this example, we'll demonstrate how to send a webhook from Jira. You should adapt these steps based on the specific system you are using. Next, set up the webhook in Jira (or another system initiating the API call): 3. Select the event to trigger the workflow. For this example, choose Issue Created. Save the webhook. Congratulations! You’ve successfully created a webhook that will trigger a Torii automation. ##### 4. Test the trigger Once a webhook is received, Torii will display a notification in the trigger details panel. ##### 5. Add actions to the workflow Add the necessary actions to your onboarding workflow, such as creating accounts or sending notifications. Leverage variables from the payload to dynamically personalize the actions. Variables in the payload containing email values will automatically appear as options in user dropdowns (e.g., user, manager and more). These will be listed at the top of the dropdown menu for easy selection. All variables received during the test call are accessible as personalization tokens, prefixed with Trigger.. For payloads with nested data, Torii supports up to six levels of hierarchy. Nested variables will include additional prefixes, such as Trigger.issue.fields.dueDate. 1. Can I send data about multiple users in a single call? No, arrays in the payload are not supported. Each call should contain data for a single user or entity. All arrays sent in the call will be omitted from the payload. Please note that you can still see the original payload on the Workflow audit page. 2. How many hierarchical levels can I send in the payload?The payload is limited to six hierarchical levels. Any properties beyond the third level will be excluded. Please note that you can still see the original payload on the Workflow audit page. 3. What HTTP methods does Torii support? Torii supports the following HTTP methods for the custom trigger API: POST, PUT, PATCH, and DELETE. The GET method is also supported, however the payload sent via GET won’t be parsed. 4. Is there a size limit for the payload?Yes, the payload size is limited to 256 KB. Payloads exceeding this size will not be processed. 5. What are the rate limits?The rate limit is 1000 requests per minute. 6. What happens if I test a workflow multiple times?Each test removes the personalization tokens from the previous test. As a result, any actions using variables from the prior payload will become invalid. 7. Can I configure and activate a workflow with a custom trigger without performing a test?Yes, you can configure and activate a workflow without running a test. However, without performing a test, you will not be able to use the incoming payload data in workflow actions. 8. Can I send data about an app and perform actions on it, such as updating its state or other details?Not currently. At this time, only user field selection is supported in user dropdowns. However, you can trigger existing workflows via API to perform actions on apps and contracts. 9. What security measures are set to ensure the custom webhook trigger is only triggered by a trusted entity?The custom webhook trigger uses Token Based Authentication. Each webhook gets an auto generated randomly secure and unique token that is required when sending a webhook trigger. The token is embedded in the URL of the webhook to ensure only allowed clients can trigger it. You can trigger one Torii workflow from another by using a Torii custom action to call a custom webhook trigger workflow. # Page Title Dashboard-based access: Sharing your Dashboards ## Page URL https://support.toriihq.com/hc/en-us/articles/37362987313307-Dashboard-based-access-Sharing-your-Dashboards ## Page Description OverviewTorii dashboards empower you to visualize data, uncover insights, showcase progress, and identify areas for improvement. These ## Details ### How can we help? ### Dashboard-based access: Sharing your Dashboards Torii dashboards empower you to visualize data, uncover insights, showcase progress, and identify areas for improvement. These dashboards aren’t just valuable for your core Torii users—they’re a powerful way to share insights with stakeholders, collaborators, and anyone involved in your app and user lifecycle. To support this, Torii enables dashboard-level access control, allowing you to finely tune who can view, explore, or manage individual dashboards. This article explains how to share your dashboards with Torii members, how these permissions work, and where to find them. #### Dashboard access levels Users can be granted one of three permission levels when invited to a dashboard: View, Explore, or Manage. #### Scope-based dashboard access #### Sharing dashboards You can share a dashboard in two ways: The Share dashboard popup contains a list of everyone who can access that particular dashboard. You can also invite people to access the dashboard here, manage their access level or remove their access altogether. You are also able to generate a guest access link, which will make the dashboard available to non-Torii members. This link will grant anyone who has access to it access to the relevant dashboard - no log in required. To invite people to this dashboard: You can invite users to a dashboard with either View or Explore permissions. To grant a user Manage permissions to a dashboard, use the scope-based method described in the previous section. This level cannot be granted via the Share popup. #### Managing dashboard access To adjust a user or role's access: Roles with Dashboard Management scopes will appear in the list but cannot be modified via the Share popup. #### Dashboard guest access Access to a dashboard using a guest access link is identical to access via a direct invite. People with this link will be able to view the dashboard, and see widget source data (if the Explore permissions is provided). For security measures, by default dashboards do not have a guest access link available. To create a guest access dashboard, change the guest access permissions from "No access" to either "View" or "Explore". This will also automatically generate a guest access link. You can generate a new link by clicking the "Generate new link" button above the guest access permission controls. This will invalidate the previous link (Torii only supports one guest access link per dashboard). To revoke guest access permissions, simply change the guest access permission level back to "No access". Q: I can’t find a user when trying to share a dashboard Why? A: This can be due to two reasons: Q: Does dashboard access override a user’s existing data permissions? A: Yes. Access to a dashboard grants visibility to all its content, regardless of the user’s other permissions within Torii. Q: A user has “View” permissions but can explore a widget’s source data—why? A: They likely have access from another source (e.g., a role with higher permissions or the “All Torii Members” option). If a user has different access levels from multiple sources, the highest permission level always applies. Q: Will users get an email every time I update their permissions? A: No. Only initial invitations trigger an email. Changes to existing access levels or role-based access updates do not send notifications.. # Page Title Data Accuracy Drift Protection ## Page URL https://support.toriihq.com/hc/en-us/articles/36899224063643-Data-Accuracy-Drift-Protection ## Page Description What is Data Accuracy Drift Protection? Data Accuracy Drift Protection is a feature designed to protect organizations from unintended ## Details ### How can we help? ### Data Accuracy Drift Protection ### What is Data Accuracy Drift Protection? Data Accuracy Drift Protection is a feature designed to protect organizations from unintended sync consequences due to a significant reduction in user count during daily integration syncs. When Torii detects an anomaly in user numbers for IdP/HRMS integrations, it automatically pauses the sync and notifies administrators, allowing them to independently review and decide on the next steps. During a daily sync, if Torii detects that an IdP or HRMS integration has experienced an anomaly in user numbers compared to the previous sync, it places the integration in a failed state. The following error message appears on the integration card (click on See more details): At this point, customers can click the Sync button to manually resume the sync. A confirmation dialog appears, providing additional context about the detected anomaly and next steps. Alternatively, users with Admin role in your account will receive an email titled "Integration paused due to user count drop". From that email, they can choose to approve the change directly or contact Torii support if assistance is needed. ### Managing Paused Integrations Once notified, administrators have two options: If this change in users is expected: You can proceed with the integration sync. Please note that once these changes go live, they cannot be reverted. If this change in users seems incorrect: Submit a support request to the Torii support team for assistance. The integration will remain paused until approved. All actions are tracked in the audit log to ensure transparency and accountability. Q: What integrations does this apply to? A: It applies to identity providers (IdP) and human resource management systems (HRMS) integrations only. Q: Who gets notified when a sync is paused? A: All users with Admin role in your account receive an email with the relevant information. Q: Will I lose data if I don't resume the sync? A: No data is lost. The sync is simply paused until the administrator decides to resume. However, while paused, no updates will be made from that integration. # Page Title Datadog Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5190408925211-Datadog-Integration ## Page Description Setup your Datadog integration and get all the insights in Torii's dashboard Overview Torii integrates with Datadog and syncs the user's ## Details ### How can we help? ### Datadog Integration Setup your Datadog integration and get all the insights in Torii's dashboard Torii integrates with Datadog and syncs the user's names, emails, statuses, roles, and licenses. Note that Torii can sync multiple Datadog accounts. The integration requires the following from your account: ##### Connect Datadog integration to Torii #### Troubleshooting In case you get "Insufficient permissions (HTTP error 403)," the following might be possible solutions. 1. Removing all the scopes from the application key2. Create a new scopeless application key #### Application Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title Deel Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/36720571871387-Deel-Integration ## Page Description Overview Torii integrates with Deel and syncs: User Fields License Types Email Deel Status Job Title Department ## Details ### How can we help? ### Deel Integration Torii integrates with Deel and syncs: ##### Accounts & Permissions #### How to Generate the Required Values #### How to Connect the Integration Go to the Integrations page in Torii. Select the Deel tile. Enter the Organization Token. Click Connect to finalize the integration. Once the integration is connected and synced, a green checkbox will appear next to the integration. #### Additional Info Torii syncs users from both the People table and the Admins table in Deel. ##### User lifecycle status An important distinction relevant for using Deel as your user's lifecycle source of truth: For any further questions, please contact Torii Support. # Page Title Defining Application Inactivity ## Page URL https://support.toriihq.com/hc/en-us/articles/5132333473307-Defining-Application-Inactivity ## Page Description Account Setting You can define when a license should be considered inactive, based on the last used date, for any application integrated ## Details ### How can we help? ### Defining Application Inactivity ##### Account Setting You can define when a license should be considered inactive, based on the last used date, for any application integrated within Torii - https://app.toriihq.com/team/services. To set this the account inactivity threshold you would go to the Settings Page and select the desired "Inactivity period". Once this is set you will be able to view your inactive licenses on the Licenses Page and enable License Management workflows to trigger. When you go to Workflows, you can create License Management automation with the "License not in use" trigger. Within any individual workflow you can define the "Inactivity period" to use as the trigger criteria. This will allow you to control the exact trigger date by application and license type. Pro Tip: You can use the "Inactivity period" to send reminders. For example, you can request an approval to remove a Zoom Licensed license after a user has not used it in 30 days and you would only remove this license if they said it is alright to do so. If a user does not give their approval or does not respond to the request you could trigger another workflow to begin 60 days after it was last used. In this workflow you can downgrade the license to Basic and alert the user that this has been done. # Page Title Delegate an Offboarding Task With Jira ## Page URL https://support.toriihq.com/hc/en-us/articles/11194028349979-Delegate-an-Offboarding-Task-With-Jira ## Page Description Overview When dealing with non-integrated apps during Offboarding, Torii allows easy delegation of offboarding tasks to other ## Details ### How can we help? ### Delegate an Offboarding Task With Jira When dealing with non-integrated apps during Offboarding, Torii allows easy delegation of offboarding tasks to other stakeholders (e.g. App owners). The delegation can be done by: Delegating tasks by opening Jira issues provides offboarding tasks visibility to anyone in the organization and makes it easy for IT to collaborate with other stakeholders who handle offboarding processes. Once an Issue is opened, Torii continuously monitors its status in Jira and automatically marks the user as offboarded based on the issue status updates.You don't need to do anything - Torii will close the loop. #### How to delegate offboarding via Jira issue Q: How long does it take for Jira issue updates to be reflected in Torii? A: The status change will be reflected in Torii 10 - 15 minutes after the Jira issue update. #### Additional articles Open a Jira Ticket From Torii # Page Title Delete Imported App Users ## Page URL https://support.toriihq.com/hc/en-us/articles/13799102817307-Delete-Imported-App-Users ## Page Description In some cases, you might want to delete the users you previously added manually to Torii.Torii offers two options for deleting imported ## Details ### How can we help? ### Delete Imported App Users In some cases, you might want to delete the users you previously added manually to Torii.Torii offers two options for deleting imported users: This article explains how to delete all manually imported users in bulk. Note that importing users creates a manually imported account, similar to connecting an integration. Therefore, deleting those users is equivalent to disconnecting the integration and removing all associated users. Additionally, suppose a user is detected in multiple sources, such as manually imported and identified via a browser extension. In that case, the deletion process will remove the user only from the manually imported account. # Page Title Deleting Expenses ## Page URL https://support.toriihq.com/hc/en-us/articles/5130422202907-Deleting-Expenses ## Page Description How to Remove Expenses Once They are Mapped There are several ways to add and remove expenses in Torii. We will review the different ## Details ### How can we help? ### Deleting Expenses There are several ways to add and remove expenses in Torii. We will review the different ways to do this. When deleting an expense file or disconnecting a finance integration, its data will be fully removed from every location within Torii. #### Removing All Expenses From an Uploaded File You can manually load expenses through a spreadsheet here - https://app.toriihq.com/team/expenses/uploads. You can easily remove all expenses from a given upload by deleting the upload. #### Removing Selected Expenses From an Uploaded File If you do not want to remove all expenses from an upload, you can also remove select ones. You would do this by going into the expense file upload and archiving the needed expenses. #### Removing Expenses From a Single Application You can go into any application and remove a given expense. First, go to any application and go to the expense tab. Then go to any expense that should be removed and go to the right of it. Click on "Archive" and it will be removed once you confirm your action. #### Use Custom Matching Rules You can create custom matching rules here - https://app.toriihq.com/team/expenses/matchingRules - to tell the platform how to map expenses. You can have rules that ignore particular items. Once set this will update existing expenses and work for future expenses. # Page Title Deploy the Chrome Extension on Mac ## Page URL https://support.toriihq.com/hc/en-us/articles/5147025126939-Deploy-the-Chrome-Extension-on-Mac ## Page Description Learn about rolling Torii's Chrome extension using Jamf Deploy the extension using Jamf Torii's Chrome extension can be deployed to Mac ## Details ### How can we help? ### Deploy the Chrome Extension on Mac ##### Deploy the extension using Jamf Torii's Chrome extension can be deployed to Mac devices using Jamf. Please follow the instructions in the section Uploading a Computer Configuration Profile. Provide Jamf with the following toriiextension.mobileconfig file when requested. After importing the toriiextension.mobileconfig file, click on the "Application & custom settings left menu item. Make sure the settings is set to Upload file (PLIST file). If it is not, set it manually to Upload file (PLIST file). This should look like this when configured correctly: # Page Title Deploy the Chrome Extension on Windows ## Page URL https://support.toriihq.com/hc/en-us/articles/5146941445147-Deploy-the-Chrome-Extension-on-Windows ## Page Description Learn about rolling Torii's Chrome extension using the Windows Registry Deploy To install the Torii Chrome extension on devices running ## Details ### How can we help? ### Deploy the Chrome Extension on Windows To install the Torii Chrome extension on devices running Windows: Add the following key to the Windows registry (it should be under HKEYLOCALMACHINE): Data: "khfhkedhhdbejcbapdicgagbljimakai;https://clients2.google.com/service/update2/crx” You can inspect and debug the policy on "chrome://policy": # Page Title Deploy the Chrome extension using Google Workspace (G Suite) Admin ## Page URL https://support.toriihq.com/hc/en-us/articles/5146878327963-Deploy-the-Chrome-extension-using-Google-Workspace-G-Suite-Admin ## Page Description Learn about rolling Torii's Chrome extension to the entire organization directly from your Google Workspace admin Follow these steps to ## Details ### How can we help? ### Deploy the Chrome extension using Google Workspace (G Suite) Admin Learn about rolling Torii's Chrome extension to the entire organization directly from your Google Workspace admin Follow these steps to roll out Torii's browser extension to the entire organization using your Google Workspace admin:Note: These instructions can also be found under "Google Chrome Enterprise Help" Sign in to your Google Workspace (G suite) admin here https://admin.google.com Go to: Devices (1) >> Chrome (2) >> Apps & Extensions (4) In Users & browsers tab hover the + icon (5) and click the chrome icon (6) Torii’s Extension is not searchable on the Chrome Store >> Extensions (7) >> View app by ID (8) paste the Extension ID: khfhkedhhdbejcbapdicgagbljimakai Torii App. will display, Click Select (9) Once Torii App. has displayed open the dropdown (10) >> select Force install (11) and click Save (12) The extension will be installed at the end-user browser (13) without a removal option (14) We are always available to help with any technical issues: Contact us by our support email at support@toriihq.com. # Page Title Deploy the Chrome Extension Using VMware Workspace One ## Page URL https://support.toriihq.com/hc/en-us/articles/5146509096219-Deploy-the-Chrome-Extension-Using-VMware-Workspace-One ## Page Description Warning: The instructions in this document will update the registry on your endpoints. Please check your work by deploying on a test ## Details ### How can we help? ### Deploy the Chrome Extension Using VMware Workspace One Warning: The instructions in this document will update the registry on your endpoints. Please check your work by deploying on a test endpoint before deploying broadly. Deploying in Google Chrome on MacOS using Workspace ONE If you are using Workspace ONE to manage your Mac OS devices, you can follow the guide posted here. Deploying in Google Chrome on Windows 10 using Workspace ONE This profile contains an encoded command that will add the Torii Browser Extension via a PowerShell command. We strongly recommend reading the section on building the profile manually to customize the PowerShell for your environment. 9. Under Remove Settings paste the following custom profile. This profile contains an encoded command that will remove the Torii Browser Extension via a PowerShell command. We strongly recommend reading the section on building the profile manually to customize the PowerShell for your environment. 10. Click Save and Publish Deploying in Microsoft Edge on Windows 10 This profile contains an encoded command that will add the Torii Browser Extension via a PowerShell command. We strongly recommend reading the section on building the profile manually to customize the PowerShell to your environment. This profile contains an encoded command that will remove the Torii Browser Extension via a PowerShell command. We strongly recommend reading the section on building the profile manually to customize the PowerShell to your environment. Building the Application Profile Manually In order to add the browser extension on Windows 10 the windows registry must be updated. Typically, registry entries can be updated directly via a CSP, however browser extensions are in a restricted portion of the registry, requiring the use of a PowerShell command. What follows are the PowerShell commands used in the above steps to “Add” and “Remove” the profiles. The “Add” examples will search the registry and find the correct key to use for the extension. The registry key (1,2,3…etc) is determined by counting the number of existing entries and using the next available number as the key for the new entry. The “Remove” command will find the number associated with the browser extension and will remove that value. The supplied PowerShell scripts will not check if the browser extension exists before adding it. However, the script can be easily modified to do so. For additional information on the registry entry see: Browser extension Please update the scripts to meet your business requirements. Google Chrome – Add Profile Google Chrome – Remove Profile Microsoft Edge – Add Profile Once you have finalized your PowerShell scripts, you will need to convert them to bytes and then Base64. This process is prone to error as outlined in the following blog post. In it, Camille Debay provides a script that will create the profile automatically. We strongly recommend using the script that the blog author has provided. You can run the script as below: This script will output a file that you can paste directly into the custom settings on the profile in Workspace ONE UEM. # Page Title Deploy the Edge Extension ## Page URL https://support.toriihq.com/hc/en-us/articles/5148307113755-Deploy-the-Edge-Extension ## Page Description Learn about rolling the Torii's Edge extension on Windows and Mac devices Deploy the extension using the following instructions provided ## Details ### How can we help? ### Deploy the Edge Extension Deploy the extension using the following instructions provided by Microsoft:https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-policies#extensioninstallforcelist Torii's Edge browser extension ID is gmjfpngpkkbeicflmckbhdbnanffkihi # Page Title Deploy the Firefox Extension ## Page URL https://support.toriihq.com/hc/en-us/articles/5148326594203-Deploy-the-Firefox-Extension ## Page Description Learn about rolling Torii's Firefox extension Mac On a Mac, you can use JSON to deploy the Torii browser extension for your team: ## Details ### How can we help? ### Deploy the Firefox Extension On a Mac, you can use JSON to deploy the Torii browser extension for your team: Open the Applications folder, right-click Firefox and choose Show Package Contents. In the Contents > Resources folder, create a new folder called distribution. Save the following in a file called policies.json: To verify that the Torii browser extension is installed, close and re-open Firefox, click the Firefox menu item in the toolbar, and choose Add-ons. On Windows, you can use JSON to deploy the Torii browser extension for your team: Open File Explorer and enter the following path: In the Mozilla Firefox folder, create a new folder called distribution. #### Deployment to all organization Use a dedicated tool to run these steps on your Windows/Mac/Linux devices such as Jamf/Intune. # Page Title Deploy the Torii Browser Extension in Chrome using Microsoft Intune (Windows) ## Page URL https://support.toriihq.com/hc/en-us/articles/31655948390811-Deploy-the-Torii-Browser-Extension-in-Chrome-using-Microsoft-Intune-Windows ## Page Description Learn about rolling Torii's Browser extension in Chrome using Microsoft Intune (Windows). Deploy You will need the Chrome ADM/ADMX ## Details ### How can we help? ### Deploy the Torii Browser Extension in Chrome using Microsoft Intune (Windows) Learn about rolling Torii's Browser extension in Chrome using Microsoft Intune (Windows). You will need the Chrome ADM/ADMX templates before you can configure the Torii Browser extension. Download both the Policy and Update Templates Note: It can take a few hours for Intune to deploy the configuration down to the device. Once deployed you will see: # Page Title Deploy the Torii Browser Extension in Edge using Microsoft Intune (Windows) ## Page URL https://support.toriihq.com/hc/en-us/articles/31655895464219-Deploy-the-Torii-Browser-Extension-in-Edge-using-Microsoft-Intune-Windows ## Page Description Learn about rolling Torii's Browser extension in Edge using Microsoft Intune (Windows). Deploy Log into the Microsoft Intune Admin ## Details ### How can we help? ### Deploy the Torii Browser Extension in Edge using Microsoft Intune (Windows) Note: It can take a few hours for Intune to deploy the configuration down to the device. Once deployed you will see: # Page Title Deploy the Torii Browser Extension in Firefox using Microsoft Intune (Windows) ## Page URL https://support.toriihq.com/hc/en-us/articles/31655983938459-Deploy-the-Torii-Browser-Extension-in-Firefox-using-Microsoft-Intune-Windows ## Page Description Learn about rolling Torii's Browser extension in Firefox using Microsoft Intune (Windows). Deploy You will need the Firefox ADM/ADMX ## Details ### How can we help? ### Deploy the Torii Browser Extension in Firefox using Microsoft Intune (Windows) Learn about rolling Torii's Browser extension in Firefox using Microsoft Intune (Windows). You will need the Firefox ADM/ADMX templates before you can configure the Torii Browser extension. Note: It can take a few hours for Intune to deploy the configuration down to the device. Once deployed you will see: # Page Title Dialpad Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/11364977108763-Dialpad-Integration ## Page Description Set up the Dialpad integration to get a complete overview of all SaaS expenses. Overview Torii integrates with Dialpad and syncs the ## Details ### How can we help? ### Dialpad Integration Set up the Dialpad integration to get a complete overview of all SaaS expenses. Torii integrates with Dialpad and syncs the users' names, emails, roles, statuses, and licenses. You must be a Dialpad admin to create an API key. #### Connect Dialpad integration to Torii To connect Dialpad to Torii, follow the below steps: Once the integration is connected and synced, it will display a green checkbox. #### Integration Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table # Page Title Digicert Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/35004541677851-Digicert-Integration ## Page Description Overview Torii integrates with Digicert and syncs: User Fields License Types Email Digicert Status Last visit time Role ## Details ### How can we help? ### Digicert Integration Torii integrates with Digicert and syncs: ##### Accounts & Permissions #### How to Generate the Required Values 1. Ensure you have access to your Digicert account.2. Finding the API Key: #### How to Connect the Integration Go to the Integrations page in Torii. Select the Digicert tile. Enter the API Key Click Connect to finalize the integration. Once the integration is connected and synced, a green checkbox will appear next to the integration. Q: How do I know if my API Key is valid? A: After entering your API Key in the Torii integration setup, a successful connection will be indicated by a green checkbox. Q: What should I do if the integration fails to connect? A: Double-check the API Key for accuracy, ensure your Digicert account has the necessary permissions, and consult the Torii support team if issues persist. For any further questions, please contact Torii Support. # Page Title Discover Your SaaS Stack ## Page URL https://support.toriihq.com/hc/en-us/articles/4551058926491-Discover-Your-SaaS-Stack ## Page Description Overview The first step to managing your SaaS stack is to know what you have, since you can't manage what you don't know. ## Details ### How can we help? ### Discover Your SaaS Stack The first step to managing your SaaS stack is to know what you have, since you can't manage what you don't know. Torii automatically discovers applications and users from multiple sources. By leveraging so many discovery sources, your data will be more accurate and complete with Torii. In this article, we will discuss how to, any why, you should: We highly recommend watching our Intro videos to get the first intro to what you can do with Torii. #### Connect your Identify Providers (IdP) Connecting your IDP is the very first step you should take when starting out with Torii. This will give you the best starting point for discovering your SaaS stack. Connecting your IdP to Torii will: How to connect your IDP Navigate to the Integrations Page - https://app.toriihq.com/team/services Hover on the relevant IDP and click Connect The first sync of your IDP might take a few hours, you'll receive a notification by email when the sync is completed. #### Connect your Single-Sign-On provider Using a Single Sign On (SSO) solution is one of the basic steps for managing your SaaS. Connecting your SSO provider to Torii creates a unified view in Torii of all your SSO-connected tools in addition to all the other tools discovered by Torii. How to connect your SSO provider Hover on the relevant SSO provider and click Connect #### Deploy the Torii browser extension The Torii browser extension acts as an agent on the browser. It is the best tool to surface Shadow-IT. Whenever an employee signs in to a business SaaS application (and no other apps or site visits), the Torii browser extension will pick it up and make it visible on your Torii console. Read more about the Browser Extension in the following article #### Connect desktop agent integrations There are a number of desktop agents - apps which are installed by IT on every employee’s work device, and allows them to monitor and govern the devices, push updates and make sure they are used securely and appropriately. Examples of such applications are: Jamf, Kandji, Microsoft Intune etc. Torii can integrate with these applications and pull information on which apps are installed on each employee’s device (and, for some sources, also usage data of said apps). This information supplements other discovery sources, and provides important value specifically in cases such as: #### Connect your expense software One of Torii's strengths is reconciling data from multiple data sources. Your SaaS financial data is one of these data sources. Importing your SaaS expenses into Torii will enrich your SaaS inventory with the cost of each tool - but it is also an important way to discover apps in use (and paid for) by your organization. In addition to assisting with visualizing your SaaS expense, connecting your expense software to Torii will: #### Connect your contract management software Similarly to expense software, Torii can connect to your contract management software. In addition to providing contract data to help holistically manage contracts and renewals within Torii, Torii can identify apps via their contracts and uncover more apps in use by your company - even ones you were not aware of. #### Connect your core SaaS tools Direct integrations use API to fetch user, license and (where possible) usage information from the services. This is the most accurate data as it is pulled directly from the application itself. We recommend that you connect directly to as many SaaS tools as you can - but at least make sure to connect the core apps in your organization so that you can manage them completely within Torii. Our direct integrations provide the following information Please note: Some data points may not be provided by all SaaS tool APIs and thus will not be retrieved by Torii. # Page Title Discovering Users and Usage ## Page URL https://support.toriihq.com/hc/en-us/articles/4701163704091-Discovering-Users-and-Usage ## Page Description How to see your active sources Overview Through various methods, Torii can discover employees using specific apps and their usage. This ## Details ### How can we help? ### Discovering Users and Usage This article summarizes these sources and how to determine which ones are being used at the application level. #### Determining the User and Usages Sources, Per App From the Applications page>> Review tab, you can see all your synced app and their data sources. #### Available Data Sources From the Sources column, you will see the data sources that can be received, represented by icons: This information is also available when you go into the "Overview" page of any application.You can see all the data sources being captured. It is on the bottom right of the page. There is a line item for data sources relating to users, usage, and expenses. This way, you can always be confident about the sources used to populate your account. #### Visualizing the Sources of Each User When going into the "Users" tab of any application, you will see the source(s) found for each user under the "Sources" column.Note that the "Sources" column (a) in the "Users" tab (b) of an application ONLY shows the sources of a user's account. It doesn't show the sources of usage or last used date, even though these columns also appear in the "Users" tab. For that data, you need to go to the "Overview" tab of an application. #### Usage data & last used date In the "Users" tab of any application, you will find two columns that describe a user's usage of said app: Q: What does the "-" mean in the last used date popup?A: Not all sources provide a last used date. For example, A user may be discovered for an app via Google Workspace - but Google only reports usage of 3rd party apps based on SAML events. So, if the user does not log in to the app via their Google account, no usage or last used date will be provided by this source. Torii is showing this data to convey that a particular source is providing information about a user, but not their usage of said app. Q: Why do I see a last used date for the Torii browser extension source if it does not appear in the "Sources" column?A: The Torii browser extension, when deployed, monitors the web-based activity of users to discover apps and usage by your employees (read more here). In some cases, the extension reports usage data of a user for an app without discovering them as app users - this is because the app detection and the usage detection are separate processes that are independent of each other: In case the extension detects usage of an app by any user, but not a login - the usage data for this user will only show once the user is linked to the app via another discovery source.Q: I see a last used date, but when I hover on it I get a "No usage data from any source discovered since Jan 1st, 2024" message. Why?A: The last used date popup provides additional information, by source, on the latest date usage was detected for said user on the app. This feature is only applicable for usage dates more recent than Dec. 31st, 2023. There may be usage events old than this time period, and the most recent one will show in the "Last Used Date" column. # Page Title New User Training #10: Do I REALLY Have to Do This? ## Page URL https://support.toriihq.com/hc/en-us/articles/8490623425435--New-User-Training-10-Do-I-REALLY-Have-to-Do-This ## Page Description This is video 10 out of 13 in the New User training series. Learn what workflows are, how to leverage them, and some of the commonly ## Details ### How can we help? ### New User Training #10: Do I REALLY Have to Do This? This is video 10 out of 13 in the New User training series. #### Questions for Implementation #### Continue Your Training Series I Thought YOU Offboarded Eli! #### Additional Resources Introduction to Workflows Workflow Triggers Personalization Tokens Manually Run Workflows # Page Title DocuSign Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5190414415259-DocuSign-Integration ## Page Description Set up your DocuSign integration and get all the insights in Torii's dashboard Overview Torii integrates with your DocuSign account and ## Details ### How can we help? Torii integrates with your DocuSign account and syncs the following attributes: List of users and their roles Licenses (assigned only) Usage - Available for enterprise plan #### Integration Steps Prerequisite from Docusign #### Prerequisites Required in DocuSign Step 1 - Create Permissions Profile Enterprise or corporate plan (Advanced solutions) Step 2 - Connect Permissions Profile to a User Profile Step 3 - Get the User Profile email for Torii integration ##### Step 1 - Prerequisites - Standard plan You are required to have an admin user From From DocuSign Settings page go to Permission Profile Create a permission profile, click on ADD PERMISSION PROFILE Name the Permission Profile Select the All Administration Capabilities checkbox Torii Permissions Profile is created Continue to Step 2 - Connect Permissions Profile to a User Profile ##### Step 1 - Prerequisites - Enterprise or corporate plan (Advanced solutions) From DocuSign, Settings page go to Permission Profile If you want to provide Torii full permissions, under ADMIN PERMISSIONS, select Allow All If you want to provide Torii minimum "read" permissions, select Allow SomeThis will open additional options: Check the Users and Groups boxNote, If you intend to use Docusign offboarding workflow, the Level of Access needs to be changed to Edit Users & Groups Check the Envelope Transfer box Under USER PERMISSIONS tab, select Allow View and manage envelope rights through API Torii Permission Profile is created Go to the Users tab Select the user you want to connect to Torii In User Profile, go to Permission Profile and select the Permission Profile you created in Step 1 ##### Step 3- Copy the user profile email - you will need it when connecting Torii to DocuSign Go to the Integrations page and select the DocuSign tile Connect to DocuSign In Connect DocuSign select the permission type (Read or Read and Take action) You will be redirected to connect to ToriiOn the Log In page, paste the User Profile email Once the integration is connected and synced, a green checkbox will display #### About Usage data Torii monitors DocuSign usage data on a daily basis. If DocuSign users completes at least one of the following actions on a given day, they will be considered an active user: Sent one or more envelopes. Created one or more templates Leverage usage data to right-size DocuSign licenses and save costs. Monitor inactive licenses and deprovision them on time. You can perform the following actions with DocuSign integration. Note: Starting November 25th, 2021, the period in which DocuSign retrieves usage for the first time is 360 days. If you connected DocuSign prior to this date and wish to see a longer usage and active users history, please contact us at support@toriihq.com # Page Title Doodle Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5730600453659-Doodle-Integration ## Page Description Overview Torii integrates with Doodle and syncs the users' list. Prerequisites An active Doodle Enterprise Premium subscription ## Details ### How can we help? ### Doodle Integration Torii integrates with Doodle and syncs the users' list. To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Doodle help center, or their support. #### Integration Process To connect Doodle to Torii, follow these steps: Once the integration is connected and synced, it will display a green checkbox # Page Title Drift Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166949444379-Drift-Integration ## Page Description Set up the Drift integration and get all the insights in Torii's dashboard Overview Torii integrates with your Drift account and syncs: ## Details ### How can we help? ### Drift Integration Set up the Drift integration and get all the insights in Torii's dashboard Torii integrates with your Drift account and syncs: users lists, roles, statuses, and licenses. Note that Torii can support the sync of multiple accounts. User type - “Organization Admin”; usually the user who created the Drift account, or user who got “Organization Admin” permissions Get Drift API Token #### How to get Drift API token Go to Drift Developer Platform and click on Create New App Under SETTINGS go to Display information Give the app a name Go to Oauth & Scops Scroll down to Drift Scops >> Add permissions by Scops and select the user_read permission to access information about users and users updates From ACTIVATE YOUR APP select Installing to Drift Click on Install App to Drift Copy the OAuth Acess token ##### Connect Drift integration to Torii Go to the Integrations page and select the Drift tile In the Connect Drift box enter the API token created in the previous step Once the integration is connected and synced, it will display a green checkbox # Page Title Dropbox Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166872976027-Dropbox-Integration ## Page Description Set up Dropbox integration and get all the insights in Torii's dashboard Overview Torii integrates with Dropbox and syncs: Users: ## Details ### How can we help? ### Dropbox Integration Torii integrates with Dropbox and syncs: Users: list, roles and statuses Usage: The number of days and average usage time of the application Note, Torii can support multiple accounts #### Connect Dropbox integration to Torii Go to the Integrations page and select the Dropbox tile Click Connect to Dropbox In the Connect Dropbox box, select the Read or Read and Take action option.For each option, you will need to allow access to different permissionsRead: View basic information about members' accounts like users' name and emailsRead and Take action: Allow Torii to view users lists, usage and license data, and manage users. Allow access to the selected permission Once the integration is connected and synced, it will display a green checkbox # Page Title Dropbox Sign Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/27128351199643-Dropbox-Sign-Integration ## Page Description Set up the Dropbox Sign integration and get all the insights in Torii's dashboard. Overview Torii integrates with your Dropbox Sign ## Details ### How can we help? Set up the Dropbox Sign integration and get all the insights in Torii's dashboard. Torii integrates with your Dropbox Sign account and syncs: Torii supports multiple Dropbox Sign accounts. You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table ##### Accounts & permissions Go to the Integrations page and click on the Dropbox Sign tile Enter the API key you've generated, and click Connect. Once the integration is connected and synced, it will display a green checkbox # Page Title Duo Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5190516986779-Duo-Integration ## Page Description Setup your Duo integration and get all the insights in Torii's dashboard Usage Torii integrates with Duo and syncs the list of users, ## Details ### How can we help? ### Duo Integration Setup your Duo integration and get all the insights in Torii's dashboard Torii integrates with Duo and syncs the list of users, their last logged-in time, and their Duo status (Active, Bypass, or Disabled). Note that only administrators with the Owner role can create or modify an Admin API application in the Duo Admin Panel. To connect Duo to Torii, follow these steps: Read-only Permissions The following permissions are required when connecting the Duo integration in Read-only mode: Note: If you wish for Torii to read the Duo account name, "Grant settings" permission is required.In case Torii doesn't have these permissions, we will generate a default name which can later be changed manually. # Page Title Eko – Your Intelligent SaaS Management Assistant ## Page URL https://support.toriihq.com/hc/en-us/articles/37927393073307-Eko-Your-Intelligent-SaaS-Management-Assistant ## Page Description Eko is Torii’s AI-powered agent, purpose-built to simplify and supercharge the way you manage SaaS. Seamlessly integrated within the ## Details ### How can we help? ### Eko – Your Intelligent SaaS Management Assistant Eko is Torii’s AI-powered agent, purpose-built to simplify and supercharge the way you manage SaaS. Seamlessly integrated within the Torii platform, Eko provides real-time, conversational access to your SaaS data, so you can get answers, insights, and guidance exactly when you need it. Eko is your smart assistant inside Torii. It understands your SaaS environment and empowers you with instant support, intuitive explanations, and actionable recommendations. Whether you’re trying to reduce costs, understand app usage trends, or configure automations, Eko is here to help—with zero training required. #### What Can Eko Do? Eko combines its deep understanding of the Torii platform with real-time analysis of your organization’s SaaS data to support a wide range of needs: ##### Insights & Analysis Ask Eko to analyze and summarize key metrics: “Where can I save money on SaaS tools?” “Which apps are underutilized across the company?” “What are the biggest cost drivers in our SaaS stack?” “What’s our Zoom usage trend over the past 6 months?” “What’s the total spend on design tools this quarter?” ##### License & Usage Monitoring Quickly understand your current SaaS inventory and license usage: “How many Salesforce licenses are unused?” “Which apps haven’t been used in the last 90 days?” “Who is the owner of Salesforce in our system?” ##### Contract Details Easily surface contract information: “What are the contract details of Asana?” ##### Feature Guidance Get help understanding and using Torii’s features: “How do I set up an onboarding automation for new hires?” “Help me understand what the ‘App Usage’ dashboard shows.” #### Getting Started with Eko Eko appears as a small, circular floating widget within the Torii interface. Simply click on it to start chatting. You can move the Eko widget to any corner of your screen for convenience. Click the “+” button to start a new chat at any time. Use the copy button to copy the entire conversation with a single click. If you'd like to control whether Eko is available or not, you can enable or disable it by navigating to Settings → AI Settings. Yes. Eko operates within Torii’s secure, role-based access environment. It only provides information that you have permission to see and does not expose sensitive data beyond your authorization level. Use specific phrasing to get more accurate results. You can ask follow-up questions to drill down into results. Try asking “what should I look at today?” to get proactive suggestions. # Page Title Email Settings and Logo ## Page URL https://support.toriihq.com/hc/en-us/articles/13334252056731-Email-Settings-and-Logo ## Page Description A user will receive an email notification on several circumstances, like when a new app owner or a member is added to Torii, a report is ## Details ### How can we help? ### Email Settings and Logo A user will receive an email notification on several circumstances, like when a new app owner or a member is added to Torii, a report is sent, and more. If you want the company logo to appear large, we recommend uploading it without margins # Page Title Embedding Torii in Other Websites ## Page URL https://support.toriihq.com/hc/en-us/articles/15741301112091-Embedding-Torii-in-Other-Websites ## Page Description Embedding Torii in other websites is not supported due to security reasons. ## Details ### How can we help? ### Embedding Torii in Other Websites # Page Title Employee offboarding workflow ## Page URL https://support.toriihq.com/hc/en-us/articles/25368610136731-Employee-offboarding-workflow ## Page Description This workflow streamlines the offboarding process for former employees, ensuring timely removal of their access from various tools. The ## Details ### How can we help? ### Employee offboarding workflow This workflow streamlines the offboarding process for former employees, ensuring timely removal of their access from various tools. The high level process is: 1. Initiate offboarding in real time, based on user status change in Okta. 2. Google Workspace Management: 3. Initiate offboarding for other SaaS applications used. 4. Wait for 30 days to ensure completion of offboarding tasks. 5. Archive the Google Workspace user. #### Workflow Overview #### How to Configure the Workflow 1. Click the "New workflow" button and choose "From scratch" from the dropdown menu. 2. Select the App event trigger and click "Next". The new workflow will be created. 3. Configure the trigger. The app event trigger enables real-time offboarding based on events in the selected system. We support events from Google Workspace and Okta. Select the "User was deactivated" event for Okta. If your HR management system is the source of truth for user status changes, you can sync it with Okta for continuous status updates, and Torii will take it from there. 4. Google Workspace typically stands out as one of the most crucial SaaS systems to address during an employee's offboarding process. Let's establish a sequence of automations specifically tailored for Google Workspace. Add the "Suspend Google Workspace user" action. 5. Add "Remove user from Google workspace groups" action. Select a group "All - remove user from all groups" in the "Groups" field. 6. Add "Sign Google user out of all sessions" action. 7. Add "Transfer Google docs and drive data" action. Specify the recipient for the file transfer. This could be the user's manager, determined by an attribute from the HR management system, such as the "Reports to" field in Hibob. 8. Add "Start employee offboarding" action. This action will trigger all associated Application Offboarding Actions as they are configured in the Offboarding settings. 9. Add "Wait" action. The action will create a delay between the preceding and subsequent actions. We suggest a one-month waiting period before proceeding to the final offboarding step of archiving the Google user. This delay is crucial to ensure the complete transfer of Google data and the successful offboarding from other SaaS applications. 10. Add "Archive Google Workspace user" action. By following this workflow, you can ensure a smooth and efficient offboarding process for former employees. #### Summary - What to Expect When you enable the workflow: 1. Whenever a user is deactivated in Okta, Torii will immediately execute a sequence of offboarding actions for Google Workspace. 2. Torii will offboard the user from all apps they were ever discovered in, and perform offboarding actions as configured in the Offboarding settings. 3. When the offboarding in N2 begins, Torii will pause the workflow for 30 days. 4. After this 30-day period, Torii will archive the Google Workspace user. Keep in mind that in Torii, a user will receive an "Offboarded" badge and be relocated to the Offboarding / Done tab once offboarding from all applications, as set in the Offboarding settings, is finished. This typically occurs before the Google Workspace user is archived. # Page Title Employee onboarding workflow ## Page URL https://support.toriihq.com/hc/en-us/articles/25303472733467-Employee-onboarding-workflow ## Page Description This workflow automates the onboarding process for new employees, ensuring they have access to essential tools from their first day of ## Details ### How can we help? ### Employee onboarding workflow This workflow automates the onboarding process for new employees, ensuring they have access to essential tools from their first day of work. The high level process is: 1. Initiate the onboarding based on the user's start date in the HR management system (HRMS). 2. Create a new user account in Google 3. Create a new user account in Slack 4. Add specific automations based on the employee's department: #### Workflow Overview #### How to Configure the Workflow 1. Click the "New workflow" button and choose "From scratch" from the dropdown menu. 2. Select the User meets criteria trigger and click "Next". The new workflow will be created. 3. Configure the trigger. Select the system from which you retrieve new employee data. We recommend relying on HR management systems. In our example, we will select Hibob, and set the workflow to trigger 7 days prior to the Start date recorded in Hibob. 4. Add the "Create Google Workspace user" action. Configure the action, defining new user attributes in Google. You can use variables (personalization tokens) to populate Google user with attributes coming from the trigger. To do that, type @ in a relevant field, and select one of the variables from the list that opens. The full list of these variables (tokens) can be found here. 4. Add the "Create a new Slack user" action. Configure the action, defining new user attributes in Slack. We recommend to use variables when populating user full name and user title. Title and other role-specific attributes should be taken from the system that is your source of truth for employees data. In this case we used Hibob. New employees onboarding process is often different depending on new employee department, title, role and more. Employees from different departments will need to be added to different distribution lists and channels, as well as get access to different tools. Let's see how we can create different automation paths for employees with different HR attributes within the same workflow. 5. Add "If/Else branch" action. 6. Create different automation branches for employees with different attributes. We will use the department attribute, relying on the information in Hibob. To do that, click the "Add branch" button in the action configuration panel. 7. Add the filter Hibob department is Sales. 8. Rename your branch. In our example, we will call the branch "Sales". 9. Add more branches, based on different departments. 7. Now let's add actions under each branch. Let's start from assigning access to apps that are needed for every role. Add "Create Salesforce user" action under the Sales branch and configure it. Add "Create Hubspot user" action under the Marketing branch and configure it. Add "Invite Calendly user" and "Create Asana user" actions under the Product branch, and configure them. Add "Create Datadog user" action under the Engineering branch and configure it. 8. Add "Add user to Google Workspace group" action under each branch and configure it. Select Google groups which are specific for each role. For example, the action under Engineering brach will add the user to Engineering Google group. 9. Add "Add Slack user to Slack groups" action under each branch and configure it. Select Slack groups which are specific for each role. 10. Add "Create Freshservice ticket" action under the "None met" brach. The ticket will be created each time a new employee is not assigned to any of the departments you defined in previous branches. Creating a ticket is needed to ensure no onboarding tasks are overlooked. #### Summary - What to Expect Once you activate this workflow, any employee whose start date is within 7 days, as per the information in Hibob: Additional steps and conditional branches can be added to the workflow, to achieve more detailed onboarding, such as assigning users to different tools based on their job titles or placing them in various groups according to their location. # Page Title Employees In Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/16492202512539-Employees-In-Torii ## Page Description Overview Not all users identified by Torii are actually company employees, some of them are contractors, some are service accounts, and ## Details ### How can we help? ### Employees In Torii Not all users identified by Torii are actually company employees, some of them are contractors, some are service accounts, and others are test/integration accounts. To provide you with better visibility and organizational management, Torii enables you to discover and classify your actual employees. Classifying users as employees can be done based on your HR management system configuration and/or based on your IDP, and you can filter these configurations to fine-tune your employee count. #### Employees in Torii In order to classify employees in Torii, you will have to set up the employee definition under Settings.Employees are represented in Torii in the following areas: Employees | Users | External Users This tab includes all the users discovered by Torii, including Employees and none employees like service accounts, test/integration accounts, etc. ##### 3. External Users #### 4. Current- Past filter Here you can filter the users by Current or Past status based on the life cycle (SOT) status you defined under Settings.Note that the All option will show both Current and Past users, also including users with no used apps. On a single user page, If this user is an employee, you will see a tag indicating that this user was recognized as an employee. #### Define Employees in Torii Torii pulls the Employees from the HR management system or the IDP you define in Settings. # Page Title Enhancing the Onboarding Experience ## Page URL https://support.toriihq.com/hc/en-us/articles/4833407261339-Enhancing-the-Onboarding-Experience ## Page Description This was submitted by Rock Content! Saving time with onboarding is just the beginning. This is also a perfect time to engage the new ## Details ### How can we help? ### Enhancing the Onboarding Experience Saving time with onboarding is just the beginning. This is also a perfect time to engage the new hire by welcoming them, letting them know what to expect and providing useful information. The example below shows a workflow that automates the creation of a Zoom account and has internal alerts to create a Slack account and to schedule security training. The screenshot below also shows a best in class way to welcome any new hire on their first day. # Page Title Enrich Application Details ## Page URL https://support.toriihq.com/hc/en-us/articles/4572899404955-Enrich-Application-Details ## Page Description Torii’s intended use is as a compete SaaS application inventory. While the majority of the information is populated automatically by ## Details ### How can we help? ### Enrich Application Details Torii’s intended use is as a compete SaaS application inventory. While the majority of the information is populated automatically by Torii, you may want to enrich your SaaS inventory with manual information relevant to your organization. The Application Details are fully customizable. You can create you own fields and remove existing ones from the Settings → Application Details page Examples of information you may want to add to your applications: Security and compliance info On top of this, Torii allows you to upload any relevant files to the application. This can be useful for storing contracts, NDAs, DPA, Invoices and other relevant documents, keeping everything you know about the SaaS application in one place. ##### How to Enrich Application Details Navigate to the Application Page The quickest way to get to the Application Page is by using the Quick Search on the top bar Open the Info tab Update the relevant field and upload file relevant files. # Page Title Enter Total Licenses ## Page URL https://support.toriihq.com/hc/en-us/articles/20330526085147-Enter-Total-Licenses ## Page Description Overview This article will show you how to gain a complete picture of your savings potential even when the integration does not provide ## Details ### How can we help? ### Enter Total Licenses This article will show you how to gain a complete picture of your savings potential even when the integration does not provide unassigned license count. ### View total licenses # Page Title Microsoft (365 & Entra ID) Actions : Selecting Groups ## Page URL https://support.toriihq.com/hc/en-us/articles/37797833301787-Microsoft-365-Entra-ID-Actions-Selecting-Groups ## Page Description This article provides guidance for actions that require selecting groups within Microsoft 365 & Microsoft Entra ID: Add user to ## Details ### How can we help? ### Microsoft (365 & Entra ID) Actions : Selecting Groups This article provides guidance for actions that require selecting groups within Microsoft 365 & Microsoft Entra ID: These actions allow selecting groups from a prepopulated list or manually entering the Microsoft Groups IDs. The instructions below will guide you through this process. #### Selecting Groups from the list To add or remove users from multiple groups, select groups sequentially from the teams list. #### Manually Entering Group IDs If the desired list does not appear in the dropdown or if there are delays loading the available lists, you can manually enter the Groups list IDs: #### How To Find Your Group ID in Microsoft 365 Admin Center To add or remove users from multiple groups, paste the Group IDs, separated by commas. You can add 10 groups maximum. # Page Title Evernote Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5729312618779-Evernote-Integration ## Page Description Overview Torii integrates with Evernote and syncs the users' list. Prerequisites SCIM is only available in Evernote Teams ## Details ### How can we help? ### Evernote Integration Torii integrates with Evernote and syncs the users' list. SCIM is only available in Evernote Teams accounts that have been updated Users are authenticated using SAML single sign-on Users are provisioned by an Identity Provider using SCIM To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Evernote help center, or their support. #### Integration Process To connect Evernote to Torii, follow these steps: Go to Torii's Integrations page and click the Evernote tile In the Connect Evernote window, note that Torii already identified and populated the Base URL and Authentication Method fields. In the Access token field, paste the access token Once the integration is connected and synced, it will display a green checkbox. # Page Title Expenses - All Expenses Tab ## Page URL https://support.toriihq.com/hc/en-us/articles/16069045387931-Expenses-All-Expenses-Tab ## Page Description Overview The All Expenses tab enables you to get full transparency into your expenses.Here you can: View the ongoing expenses - To ## Details ### How can we help? ### Expenses - All Expenses Tab The All Expenses tab enables you to get full transparency into your expenses.Here you can: #### View All Expenses Available columns: Hovering over an expense enables editing or archiving it.From here, you can move an expense under a different app and change the expense date or amount. Note that this update will be applied to this specific expense only; therefore, if you wish this change to apply to previous and future expenses, you should set it using the matching rules. The Expenses table has predefined views which are tailored to address specific use cases: ##### Matched Expenses This view contains all expenses that were matched to apps, either by Torii AI or by a user. It allows you to go over recently matched transactions and make sure they were matched correctly. ##### Unmatched Expenses This view contains expenses that were synced into Torii but were not matched to any app. It allows you to search through these and see if there are transactions that were missed and should be matched. Since this view may contain sensitive data it is restricted to users with an Expense Take Action scope. Important to note that most of the unmatched expenses are not software related and so should remain unmatched. However, you may find unmatched expenses that should have been matched. This can happen due to the following: Under the Matching status column, you will find two status types ##### Archived Expenses This view holds all expenses that were manually archived.Archived expenses can be Unarchived. This view shows all expenses with any matching status the user is entitled to view. See details in the table below. #### Matching Statuses The following matching statuses are available per each of the predefined views. View Only or Take Action Expenses that are either: ##### Who can access Unmatched expenses? # Page Title Expenses compared to contract value ## Page URL https://support.toriihq.com/hc/en-us/articles/28879474169627-Expenses-compared-to-contract-value ## Page Description Keep your budget in check by monitoring and managing your subscription costs with real-time notifications when expenses exceed contract ## Details ### How can we help? ### Expenses compared to contract value Keep your budget in check by monitoring and managing your subscription costs with real-time notifications when expenses exceed contract values. This proactive approach helps ensure budget control and contract compliance. It's crucial to keep an eye on subscription costs to avoid overspending and ensure contract compliance. Manual tracking can be cumbersome and error-prone. Torii helps you: ##### Monitor from the Applications Page View, Filter, and Create Views: Use columns like "Expenses (active contract duration)" and "Expenses compared to contract value (%)" to streamline your monitoring. ##### Drill Down to a Specific App View Expenses in Contract Duration: See detailed expenses that occurred during the active contract. Change the date range to view expenses for the last 12 months, the current year, or all-time.View Active Contracts: Access a pre-filtered contracts table to view active contracts. ##### Get Alerted and Notify Others Create Workflow-Based Notifications: Q: What if there are no expenses during the active contract for a specific app? A: If there are expenses for the app but none occurred during the active contract duration, the "Expenses (active contract duration)" column will show 0. If the app has no expenses at all, the column will be empty. By leveraging Torii’s "Expenses Compared to Contract Value" feature, you can efficiently monitor, track, and control your subscription costs, ensuring you stay within budget and maintain contract compliance. # Page Title Expenses, Yearly Costs, and Contract Value ## Page URL https://support.toriihq.com/hc/en-us/articles/5130484496667-Expenses-Yearly-Costs-and-Contract-Value ## Page Description What Each Value Means There are several ways to track costs within the platform. This gives the greatest flexibility to view and tracks ## Details ### How can we help? ### Expenses, Yearly Costs, and Contract Value ##### What Each Value Means There are several ways to track costs within the platform. This gives the greatest flexibility to view and tracks costs as needed. Here is the definition of each: These are the expenses you have paid from your invoices. This comes in from automation from your ERP and/or from your manual expense report uploads. This is a contract field that is available by default. This should denote the actual amount of money you plan to spend for the given year. This can be different than the contract amount because a contract can be more than a year and also because there can be add on costs throughout the contract. This is another contract field that is available by default. This should denote the amount of the contract it is attached to. # Page Title Expenses ## Page URL https://support.toriihq.com/hc/en-us/articles/35742332283931-Expenses ## Page Description In the Expenses section, Torii reconciles expense data from multiple sources and shows you how much is spent on each app, highlighting ## Details ### How can we help? In the Expenses section, Torii reconciles expense data from multiple sources and shows you how much is spent on each app, highlighting opportunities to save. For more information, see Introduction to SaaS Expenses in Torii. #### Expenses: Overview Tab The Overview tab presents a summary view of overall spend over time, category breakdown, and a list with application details, sorted by top spend in the last year. See Overview tab for more details. #### Expenses: Matching Rules Tab Torii matches apps to expenses based on text in each memo. As with any such algorithm, you may want to make your own refinements. The Matching Rules tab is where you add exceptions that will apply before the platform's own logic. For more information, see What are Matching Rules and How to Use Them. #### Expenses: Expense Files Tab Outside of expense integrations and the API, expenses can also be manually uploaded from the Expense files tab. For more information see How to Add Expenses Manually. #### Expenses: All Expenses The All Expenses tab presents a filterable and searchable view of all transactions, matched, unmatched, or archived for any time period with the ability to export the data once you have drilled in. See All Expenses Tab for more information. # Page Title Expensify Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166215397147-Expensify-Integration ## Page Description Set up the Expensify integration to get a complete overview of all SaaS expenses. Overview Torii integrates with Expensify and analyzes ## Details ### How can we help? ### Expensify Integration Torii integrates with Expensify and analyzes SaaS expenses. Torii can sync multiple Expensify accounts. Torii will automatically match transactions to the correct application, summarize expenses and provide insights. Torii syncs transaction data up to one year prior to first connection date. Torii syncs the transaction list found in reports from your Expensify account and matches SaaS-related expenses to their respective app on Torii. The following fields of transactions are used for mapping the expense to the correct application: merchant, modifiedMerchant and comment. Make sure you have an Expensify account and admin user To connect Torii to Expensify you will be required to get the following from the Expensify website: Partner user ID, Partner User Secret, and Domain.Note: to view instructions from the Expensify side click here Get the Partner user ID, Partner User Secret, and Domain Go to https://www.expensify.com/tools/integrations/ and click on click here A pair of credentials: partnerUserID and partnerUserSecret will be generated and shown on the pageMake sure to copy & store the partnerUserID and partnerUserSecret in a secure location, as it will not be shown again. #### Connect Expensify integration to Torii To connect Expensify to Torii, follow the below steps: Go to the Integrations page and select the Expensify tile Connect to Expensify In the Connect Expensify enter the partnerUserID and partnerUserSecret #### Provide Torii with Expensify custom view Note, if you don't want to expose Torii to all Expensify data, you will have to create an Expensify user with a custom view and connect this user to Torii while performing the integration Check out how to build Expensify user with a custom view from Expensify help center Q: I am interested in expense data that is older than what Torii brings in from this integration. Is there a way to get more than one year of data synced into Torii? A: While we we only sync a year of expense data upon connection of this integration in Torii by default, we can bring in data from any time point. If you are interested in getting data from an expanded time frame, please contact Torii's support team and we will be happy to help you with this. Please note, syncing data for a lengthy time period can bring back a lot of data, which can take a significant amount of time to sync (up to a several days, depending on the period of time back you are interested in). # Page Title New User Training #4: Explorer's Guide to Your SaaS Ecosystem Pt. 1 ## Page URL https://support.toriihq.com/hc/en-us/articles/8175989324955--New-User-Training-4-Explorer-s-Guide-to-Your-SaaS-Ecosystem-Pt-1 ## Page Description This is video 4 out of 13 in the New User training series. Learn how to navigate around the Applications section of your ## Details ### How can we help? ### New User Training #4: Explorer's Guide to Your SaaS Ecosystem Pt. 1 This is video 4 out of 13 in the New User training series. #### Questions for Implementation #### Continue Your Training Series Explorer's Guide to Your SaaS Ecosystem Pt. 2 #### Additional Resources Filtering Applications Bulk Updates to Applications Comparing Applications # Page Title New User Training #5: Explorer's Guide to Your SaaS Ecosystem Pt. 2 ## Page URL https://support.toriihq.com/hc/en-us/articles/8489163473563--New-User-Training-5-Explorer-s-Guide-to-Your-SaaS-Ecosystem-Pt-2 ## Page Description This is video 5 out of 13 in the New User training series. Learn what app-specific data Torii compiles for individual applications, how ## Details ### How can we help? ### New User Training #5: Explorer's Guide to Your SaaS Ecosystem Pt. 2 This is video 5 out of 13 in the New User training series. #### Questions for Implementation #### Continue Your Training Series That One App No One Uses #### Additional Resources Enriching Application Details Chargeback Report # Page Title EZOfficeInventory Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/15041159142811-EZOfficeInventory-Integration ## Page Description Overview Torii integrates with your EZOfficeInventory account and syncs the users' roles, statuses in the app, and licenses. Note that ## Details ### How can we help? ### EZOfficeInventory Integration #### Connect EZOfficeInventory integration to Torii. # Page Title Featurebase Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/33531055149467-Featurebase-Integration ## Page Description Overview Torii integrates with Featurebase and syncs the following: User Fields License Types Email Featurebase Role Status ## Details ### How can we help? ### Featurebase Integration Torii integrates with Featurebase and syncs the following: ##### Accounts & Permissions To connect this integration, you must provide: Note: This API access is only available to customers with a Business or Enterprise plan. #### How to Generate the Required Values ##### Finding the Hostname Log in to your Featurebase account. Extract the Hostname from the URL of your Featurebase instance.For example, if the URL is https://toriihq.featurebase.app, the Hostname would be toriihq.featurebase.app. ##### Generating the API Key Click Settings in the bottom-left corner. Copy the API Key displayed on the screen. ##### How to Connect the Integration Go to the Integrations page in Torii. Select the Featurebase tile. Enter the required values: Click Connect to finalize the integration. Once the integration is connected and synced, a green checkbox will appear next to the integration. For any further questions, please contact Torii Support. # Page Title Figma Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5564527090075-Figma-Integration ## Page Description Setup your Figma integration and get all the insights in Torii's dashboard Overview Torii integrates with Figma and syncs the users' ## Details ### How can we help? ### Figma Integration Torii integrates with Figma and syncs the users' list. To sync Figma with Torii, the following are prerequisites : To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Figma’s help center, or their support. #### Integration Process To connect Figma to Torii, follow these steps: Go to the Integrations page and click the Figma tile In the Connect Figma window, you will need to embed your Tenant ID in the Base URL. To find your Tenant ID: In the Login and provisioning section, click SAML SSO and copy the Tenant ID. Select the Authentication Method Enter the Access token Once the integration is connected and synced, it will display a green checkbox. # Page Title Filter Applications ## Page URL https://support.toriihq.com/hc/en-us/articles/5129423167259-Filter-Applications ## Page Description Is there any way to filter out apps that are not relevant to me? There are 2 ways to filter out irrelevant applications: Hide app ## Details ### How can we help? ### Filter Applications There are 2 ways to filter out irrelevant applications: Hide app - You can choose to hide an app from the Application state dropdown, that app will be completely hidden from Torii, and will not show in any report or workflow.The data will still be collected and you can go to the Settings page to un-hide it.This will affect all Torii team members in your account. Use the filters - You can use the filters on the application table for filtering applications that are not sanctioned, not paid, or have a low number of users. You can apply many types of filters. You can then minimize the filter.This view will only be shown to you. # Page Title Fivetran Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5167003074587-Fivetran-Integration ## Page Description Set up Fivetran integration and get all the insights in Torii's dashboard Overview Torii integrates with Fivetran and syncs users: list, ## Details ### How can we help? ### Fivetran Integration Torii integrates with Fivetran and syncs users: list, license, status, role, and last used date. To sync Torii with Fivetran data, you will need to get an API key and API secret from Fivetran. #### Obtaining Fivetran API key and API secret Login to your Fivetran account and navigate to API Key menu #### Connect Fivetran integration to Torii From the Torii Integrations page click on the Fivetran tile Paste the API Key and the API Secret from the previous step Once the integration is connected and synced, it will display a green checkbox # Page Title Fountain Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5165102469019-Fountain-Integration ## Page Description Set up Fountain integration and get all the insights in Torii's dashboard Overview Torii integrates with your Fountain account and ## Details ### How can we help? ### Fountain Integration Torii integrates with your Fountain account and syncs: Users list - Name, status, role License - Shows if the user has an account license To connect Torii to Fountain you will need to get the following from Fountain: You are required to have a Fountain Connect Package API Key - See how to get the API key from the Fountain help center Go to the Integrations page and select the Fountain tile Click Connect to Fountain In the Connect Fountain box enter the API you created in Fountain Once the integration is connected and synced, it will display a green checkbox # Page Title FreshService Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/7749189278619-FreshService-Integration ## Page Description Set up FreshService integration and get all the insights in Torii's dashboard Overview Torii integrates with your FreshService account ## Details ### How can we help? ### FreshService Integration Torii integrates with your FreshService account and syncs: Users list - Names, emails & statuses of FreshService agents License - Shows if the agent has an account license and the last visit date Note that Torii can support multiple FreshService accounts In addition, the integration enables you to perform actions straight from Torii like: #### Connect FreshService integration to Torii Go to the Integrations page and select the FreshService tile Click Connect to FreshService #### Integrations Capabilities and actions You can always be updated with application information and actions from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title Front Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5727993517467-Front-Integration ## Page Description Overview Torii integrates with Front and syncs the users' list. Prerequisites You will need administrative access to your ## Details ### How can we help? ### Front Integration Torii integrates with Front and syncs the users' list. You will need administrative access to your respective IdP You must be a Company Admin in Front You must have the Enterprise plan with Front Users are authenticated using SAML single sign-on Users are provisioned by an Identity Provider using SCIM To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Front's help center, or their support. #### Integration Process To connect Front to Torii, follow these steps: Go to Torii's Integrations page and click the Front tile In the Connect Front window, note that Torii already identified and populated the Base URL and Authentication Method fields. In the Access token field, paste the access token Once the integration is connected and synced, it will display a green checkbox # Page Title FullStory Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/15697906598171-FullStory-Integration ## Page Description Overview Torii integrates with FullStory and syncs the list of users and licenses. Integrate FullStory with Torii Go to the ## Details ### How can we help? ### FullStory Integration Torii integrates with FullStory and syncs the list of users and licenses. #### Integrate FullStory with Torii # Page Title Generate Password Action ## Page URL https://support.toriihq.com/hc/en-us/articles/23970280788379-Generate-Password-Action ## Page Description Introduction Torii allows to generate a unique and secure password every time a workflow is executed. This allows to generate a password ## Details ### How can we help? ### Generate Password Action Torii allows to generate a unique and secure password every time a workflow is executed. This allows to generate a password and then use it in subsequent actions such as in Reset Password actions or Custom Actions. The generated password is encrypted and stored securely in Torii's database vault. #### Generating a password To generate a password: 1. Create a new workflow or edit an existing one 2. Add the Generate Password action: 3. Select the Password logic. 3.1. You can select to dynamically generate a unique random password each time the workflow is executed by choosing Random password. You can customize the generated password with the Password length and Password options customization. The default Password options is set to generate a strong and secure password with lowercase and uppercase letters, digits and symbols. 3.2. Alternatively, choose Fixed password for a password you choose up-front and will be used in all workflow executions. #### Using the password in subsequent actions The generated password can be used via a personalization token with the name New-password. For example, use it with a Custom Action to send the generated password while creating a user in a 3rd party system. You can also use it in multiple actions, for example sending the password to the target user in an email and asking the to change it upon first login to the 3rd party system. # Page Title Genesys Cloud Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/10231010073115-Genesys-Cloud-Integration ## Page Description Overview Torii integrates with Genesys and syncs the user's roles, status & licenses. You can always be updated with ## Details ### How can we help? ### Genesys Cloud Integration #### To connect Genesys Cloud to Torii, follow the below steps: Q: Why is my license count inaccurate? A: Genesys offers two license procurement options: Named licenses, and Concurrent licenses Torii will accurately reflect license type and number if your organization uses Named licenses. There is a limitation in the Genesys Cloud API - In the case your organization is using concurrent licenses, the licenses API endpoint returns a list of all users who used the concurrent license type in the given billing period. As such, Torii is not able to get an accurate count of concurrent licenses purchased, and any user who used a concurrent license. will show as having that license in Torii. # Page Title GitHub Enterprise Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5190646711067-GitHub-Enterprise-Integration ## Page Description Set up your GitHub Enterprise integration and get all the insights in Torii's dashboard. Torii integrates with GitHub Enterprise and ## Details ### How can we help? ### GitHub Enterprise Integration Torii integrates with GitHub Enterprise and syncs the user list into Torii. We also support 2 actions, allowing to invite and remove organization members from Github. #### User & License Data Torii lists the users who were provisioned by GitHub and will not list any other users or licenses. A GitHub Enterprise Cloud account Users are authenticated using SAML single sign-on. Users are provisioned by an Identity Provider using SCIM. Authorize the personal access token for use with SAML single sign-on. Add the access token on the Torii Integrations page. #### Why is the admin: org scope required? Torii’s GitHub Enterprise integration is based on GitHub’s SCIM API, which requires the admin: org scope. Unfortunately, GitHub does not provide alternatives and more limited scopes to access the required data. #### As a technical user of GitHub, how can I verify the integration will work? This isn't mandatory, but you can verify the access token was created successfully before connecting it out to Torii. For technical users: verify by trying to access the SCIM API and seeing the list of users on your account: (replace the YOURORGNAME with your organization name and use Basic Authentication with the YOURORGNAME:ACCESS_TOKEN pair) # Page Title GitLab Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5729182114203-GitLab-Integration ## Page Description Overview Torii integrates with GitLab and syncs the users' list. Prerequisites Available in GitLab premium SaaS and higher ## Details ### How can we help? ### GitLab Integration Torii integrates with GitLab and syncs the users' list. Available in GitLab premium SaaS and higher tiers, not available in self-managed instance Users are authenticated using SAML single sign-on Users are provisioned by an Identity Provider using SCIM To make sure SCIM is set up correctly before integrating with Torii, please check with your IT team, GitLab help center, or their support. You can only sync one GitLab group. #### Integration Process To connect GitLab to Torii, follow these steps: Go to the Integrations page and click the GitLab tile In the Connect GitLab window, you will need to embed your GitLab domain and the full path to the group in the Base URL. In the Access token field, paste the API key as mentioned in the prerequisites section (you can read the "SCIM API (SYSTEM ONLY)" article) Once the integration is connected and synced, it will display a green checkbox # Page Title Giving Product Feedback at Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/19957057821339-Giving-Product-Feedback-at-Torii ## Page Description We value your input and are keen to understand how you use Torii and how we can enhance it. We encourage you to share your suggestions, ## Details ### How can we help? ### Giving Product Feedback at Torii We value your input and are keen to understand how you use Torii and how we can enhance it. We encourage you to share your suggestions, ideas, and feedback through our Feedback Board. ##### Before Submitting a Feature Request Search the community forum to ensure your feature request hasn’t been submitted already. If it has, upvote the existing request to show your interest. ##### Which Board to Post? ##### Why Submit a Feature Request? Your feedback is instrumental in helping us improve Torii. It provides insights into user needs and preferences. Post your feature request in our Feedback Board, under the relevant board, add the context and use-case. ##### What Happens Next? Our Product team reviews all feedback, and may reach out for further discussion. While every request is reviewed, submission doesn’t guarantee implementation. # Page Title Gong Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5168231755803-Gong-Integration ## Page Description Setup your Gong integration and get the insights in Torii's dashboard Overview Torii integrates with your Gong account and syncs the ## Details ### How can we help? ### Gong Integration Setup your Gong integration and get the insights in Torii's dashboard You can view how many users are connected to Gong and how many have a license. In order to connect the integration You are required to have technical admin permissions in order to generate Access key & Access Key Secret Get the - Access key & Access Key Secret ##### Gong- Get the Access key & Access Key Secret 1. From your Gong user 2. Go to your Company (company name) Settings Note: If you don't see the "Company Settings" option you are not a Technical Administrator, ask Gong administrator to grant you the required permissions. 3. From the Company Settings page go to API 4. Click Create 5. Copy the Access Key 6. Copy the Access Key Secret #### Torii - Connect the Integration 1. From the Integrations tab select the Gong tile 2. Click Connect 3. Paste the Access Key and the Access Key Secret 4. Click Connect Once finished syncing the tile will display a green checkbox. # Page Title Google Ads Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/39857613485851-Google-Ads-Integration ## Page Description OverviewTorii integrates with Google Ads and syncs: User Fields License Types Email Google Ads Role Torii supports syncing ## Details ### How can we help? ### Google Ads Integration Torii integrates with Google Ads and syncs: ##### Accounts & Permissions #### How to Generate the Required Values 1. Ensure you have access to your Google Ads account.2. Finding the Customer ID: #### How to Connect the Integration (OAuth) Select the Google Ads tile. Enter your Google Ads Customer ID (with the dashes). Once the integration is connected and synced, a green checkbox will appear next to the integration. For any further questions, please contact Torii Support. # Page Title Google Sheets Custom Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/39396363579803-Google-Sheets-Custom-Integration ## Page Description This article describes a new type of Custom Integration that enables you to push user data into Torii using Google Sheets — no ## Details ### How can we help? ### Google Sheets Custom Integration This article describes a new type of Custom Integration that enables you to push user data into Torii using Google Sheets — no development skills required. If you’re looking for the traditional JSON/API-based custom integration, click here. The Google Sheets Custom Integration lets you sync user data into Torii from a spreadsheet you maintain. You can integrate any application by simply populating a shared Google Sheet. Torii will automatically sync the data nightly. This integration is ideal for apps where there’s no native integration or API access is limited. #### Step 1 – Prepare your Google Sheet Create a new Google Sheet with only one sheet (tab). This sheet can contain the following column headers: #### Step 2 – Share the sheet with Torii In order for Torii to sync the data, you need to share your Google Sheet with our integration service account. We recommend giving the lowest possible permission (Viewer) to ensure data security. #### Step 3 – Set up the integration in Torii #### What happens next? Q: Can I use this for any application?A: Yes. This method supports any app, even custom or internal ones. Q: Can I include multiple tabs or sheets?A: No. The spreadsheet must contain only one sheet with the required columns. Q: How often is the data synced?A: Daily. You can always re-sync the integration. Q: What happens if I change the sheet structure?A: The sync will fail. Please keep the column headers and format as defined. If you have any questions, feel free to contact Torii Support. # Page Title Google Workspace (G Suite) Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5165001141019-Google-Workspace-G-Suite-Integration ## Page Description Set up Google Workspace integration and get all the insights in Torii's dashboard Overview Torii integrates with Google Workspace (G ## Details ### How can we help? ### Google Workspace (G Suite) Integration Set up Google Workspace integration and get all the insights in Torii's dashboard Torii integrates with Google Workspace (G Suite) and syncs: Connecting the integration consists of the following. #### Connect Google Workspace integration Your Google Workspace account can be integrated as: #### Google settings required for actions: To enable the Google Integration for Advanced Actions such as Google Signature, you will need to enable API Access from Google into Torii. You should now see the status as Enabled 9. To enable Remove user from all shared drives, select Google Drive API and click ENABLE 10. To enable Block company-owned mobile devices, Wipe Google account from company-owned mobile devices, and Delete company-owned mobile devices actions:Search for “Cloud identity”, select "cloud identity," and click ENABLE 11. Click on Credentials 12. Go to + CREATE CREDENTIALS and select Service account. 13. Provide the Service Account details and click Done. 14. After editing the Service Account details, click the “Keys” tab 15. Click Add Key → Create New Key → Create 16. In the "Create private key" window, leave the default JSON and click CREATE 17. The JSON will be downloaded automatically to your computer: 18. In the Google Admin Console >> Security >> Access and Data Control >> API Controls >> Manage Domain Wide Delegation (Scroll Down) 19. Click Add New 20. Add your Client ID (from your JSON), add the required scopes, and click Authorize. 21. Enter the Service Account Email Address 22. Add the Service Account Private Key; please add the Service Account Private Key; make sure to copy the entire key as shown in the image. 23. Enter the Service Account Email Address and Service Account Private Key to the "Connect Google Workspace" window", and click Connect. #### Delegate user's email action - more prerequisites #### Enable auto forwarding action - more prerequisites To enable auto-forwarding for users in your organization: For detailed instructions, visit Google Support. #### Remove User from all shared drives - additional information There may be cases where this action will fail, based on what permissions the user being removed has, and the status of the drives to be removed from: #### Mobile device actions Company-owned devices actions These actions require special permissions, as mentioned above; they are executed on all the company-owned devices assigned to the selected user. User-owned devices actions: These actions do not require any special permissions (except for "Read and take"). The actions are executed on all the user-owned devices assigned to the selected user. In case you choose to connect to Google Workspace for "Read-only", Torii will require the following permissions:NOTE: Google documents that a Google Super Administrator user is required to read licenses data in Google's access control policy:"License Management — This privilege works only in the Admin console and authorizes only super admins to use the License Manager API." However, we found that creating a dedicated admin role that is not a Super Administrator allows reading the License management.If you have created a dedicated Super Admin user for the integration, make sure you log in with that user and accept any Google Terms of Service.Without accepting the Terms of Service, Torii's access will be limited. #### Read and take action. In case you choose to connect Google Workspace for Read and take actions, you will grant Torii the following permissions:Return up #### List of requested scopes for Torii's Google Workspace integration Getting a user list from Google Workspace. Mandatory (integration will fail without this scope) Getting a list of licenses for Google Workspace users. Getting a list of unassigned licenses in Google Workspace. Discovering apps via Google Workspace (Log in with Google). Getting account name Getting usage data for Google Workspace users & usage data for apps discovered via Google Required if you want to use use Real-time offboarding for Google Workspace. Denying this will also affect accuracy of 3rd party app detection via Google Workspace. Getting Org Unit data from Google Workspace Required if you want to use use Real-time offboarding for Google Workspace.Required for the Create user action. Required for these actions: #### Integration Capabilities and Actions You can stay updated about application information and actions from our Integrations Page >> Integration Capabilities button (1) >> Integration Capabilities table. Torii pulls 2 types of usage events and calculates Google Workspace usage based on them: SAML Audit activity events - Usage for apps connected to G-Suite SSO Login Audit Activity Events - General usage for Google Workspace, for example, 2-step verification enrollment change, Account password change, etc. Torii will pull activity events from the last 30 days on the first usage sync. Torii continuously monitors Google events and updates data in Torii in real-time accordingly. The Google events that Torii monitors are: If you set Google as the user lifecycle source of truth, the Offboarding To-Do list in Torii will be continuously updated based on the events above. You can also leverage Torii's App Event workflow trigger to trigger automation based on the above events whenever an event happens in Google Workspace. #### Troubleshooting ##### Authorization Error You might encounter the following Authorization Error Check all Client ID boxes Click Configure Q: How can I update non-standard or advanced user fields via actions? A: Use the Custom Attributes field in the action to pass additional key–value pairs (strings, arrays, JSON objects, etc.) to the target app. See the detailed setup guide: Custom Attributes configuration . Q: What data is transferred using the "Transfer Google Workspace Data Studio" action? A: The data transferred is: Q: Why can't I use the @import command when updating a user's signature? A: We currently have a limitation on this action regarding the Signature field. If the signature is in HTML format, we cannot utilize the '@import' command due to the '@' sign being used for mentions in workflow actions fields, such as 'Trigger.User.FirstName'. Q: What happens if I run an action on a user's alias in Google Workspace? e.g. user1@gmail.com is an alias for user2@gmail.com. What happens when I run Google Workspace actions on user1@gmail.com? A: Google treats both the user's primary email address, as well as their aliases as the same user. This means that if you take action on a user's alias (via Torii workflows or otherwise), you will be taking action on the entire user. For example, if you remove a user from all groups, and that email address is an alias for another user, then the primary user will also be removed from all Google groups.We recommend taking any action that involves removing permissions/access for users (such as upon termination) before turning them into aliases for other users. # Page Title GoToMeeting Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5167335460635-GoToMeeting-Integration ## Page Description Set up GoToMeeting integration and get all the insights in Torii's dashboard Overview Torii integrates with GoToMeeting and syncs: ## Details ### How can we help? ### GoToMeeting Integration Torii integrates with GoToMeeting and syncs: Users list - All users subscribed to GoToMeeting with the company email. User status - Active, Inactive, Pending Last logged in time - When was the last time GoToMeeting was used for hosting/joining License types - Pro, free To connect the integration - you are required to be a GoToMeeting administrator. #### Connect GoToMeeting integration to Torii To connect GoToMeeting to Torii, follow these steps: Go to the Integrations page and click on the GoToMeeting tile Click on Connect Click Connect to connect to GoToMeeting and approve permissions Allow Torii to access the information Once the integration is connected and after the first sync you will receive a green checkmark indication # Page Title Grammarly Integrations ## Page URL https://support.toriihq.com/hc/en-us/articles/12675067082907-Grammarly-Integrations ## Page Description Setup your Grammarly integration and get all the insights in Torii's dashboard Overview Torii integrates with Grammarly and syncs users' ## Details ### How can we help? ### Grammarly Integrations Setup your Grammarly integration and get all the insights in Torii's dashboard Torii integrates with Grammarly and syncs users' names, emails, and statuses. ##### Connect Grammarly integration to Torii. # Page Title Greenhouse Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5190622908187-Greenhouse-Integration ## Page Description Setup your Greenhouse integration and get all the insights in Torii's dashboard Overview Torii integrates with your Greenhouse account ## Details ### How can we help? ### Greenhouse Integration Torii integrates with your Greenhouse account and syncs the list of users, roles, statuses in the app, licenses, and usage data. To connect the Greenhouse integration to Torii, you will need to create a Greenhouse API key. Additional Requirement:If you want to sync usage data, you must also provide your Greenhouse Admin User ID (the ID of the user who generated the API key and has Admin permissions).You can find your User ID by following this guide: Find your Greenhouse User ID. #### Connect Greenhouse to Torii Q: Why is usage data not appearing? A: If you do not see usage data synced in Torii, please check the following: If one of these steps was missed, please update the API permissions or reconnect the integration providing the correct Admin User ID. # Page Title Guru Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/35970025747483-Guru-Integration ## Page Description Overview Torii integrates with Guru and syncs: User Fields License Types Email Guru Role Status Torii supports syncing ## Details ### How can we help? ### Guru Integration Torii integrates with Guru and syncs: ##### Accounts & Permissions #### How to Generate the Required Values #### How to Connect the Integration # Page Title Harvest Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5190699750299-Harvest-Integration ## Page Description Setup your Harvest integration and get all the insights in Torii's dashboard. Torii integrates with Harvest and syncs the users, ## Details ### How can we help? ### Harvest Integration Torii integrates with Harvest and syncs the users, roles, last visit time, and other useful information. #### Connect Harvest integration to Torii Go to the Torii Integrations page and click on the Harvest tile in order to connect. Follow the on-screen instructions and grant Torii access to Harvest. #### Harvest Permissions: The authentication is done via the OAuth protocol Notice that Harvest only allows for full "Read and Write" access permissions. Choosing “Read” access in Torii will make Torii self limit itself to performing "Read" operations. #### Multiple Harvest Accounts In case your user has more than one Harvest account, you must choose the account you want to integrate in the authorization window. # Page Title Heap Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5727969412251-Heap-Integration ## Page Description Overview Torii integrates with Heap and syncs the users' list. Prerequisites Available to customers on Pro and Premier plans Users ## Details ### How can we help? ### Heap Integration Torii integrates with Heap and syncs the users' list. To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Heap's help center, or their support. #### Integration Process To connect Heap to Torii, follow these steps: Once the integration is connected and synced, it will display a green checkbox. # Page Title Heroku Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/14616244967195-Heroku-Integration ## Page Description Overview Torii integrates with your Heroku account and syncs the users' roles, statuses in the app, and licenses. Connect Heroku ## Details ### How can we help? ### Heroku Integration Torii integrates with your Heroku account and syncs the users' roles, statuses in the app, and licenses. #### Connect Heroku integration to Torii. # Page Title Hex Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/39763569050651-Hex-Integration ## Page Description OverviewTorii integrates with Hex and syncs: User Fields License Types Email Hex Status Role Torii supports syncing multiple ## Details ### How can we help? ### Hex Integration Torii integrates with Hex and syncs: Note: The Hex integration is only supported for Team and Enterprise Hex accounts. To connect this integration, we require the following: #### How to Generate the Required Values ##### 1. How to Get the Workspace Token ##### 2. How to Get the Workspace ID You can locate the Workspace ID in your Hex URL. For example:https://app.hex.tech//homeIn this case, the Workspace ID is . ##### 3. How to Get the Base URL You can locate the Base URL in your Hex URL. For example:https://app.hex.tech//homeIn this case, app.hex.tech is the Base URL. #### How to Connect the Integration Q: What happens if the token expires? A: If the token expires, you’ll need to generate a new one and reconnect the integration. For any further questions, please contact Torii Support. # Page Title HiBob Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166093497883-HiBob-Integration ## Page Description Set up HiBob integration and get all the insights in Torii's dashboard Overview Torii integrates with HiBob and syncs: Users list - All ## Details ### How can we help? ### HiBob Integration Torii integrates with HiBob and syncs: Users list - All employees with company email, Status & License. Torii supports multiple HiBob accounts. ##### STEP 1: Create a Service User Copy the ID and Token. ##### STEP 2: Create a Permission Group We will now set the Group's permissions. Make sure you select all of the 5 following permissions in order to sync data correctly into Torii: 1. People's data tab > People > Basic Info > View selected employees' Basic info sections 2. People's data tab > People > Lifecycle > View selected employee's Lifecycle sections 3. People's data tab > People > Lifecycle > View selected employee's Lifecycle section histories Please note: 1) If you cannot find a section described above in HiBob, this is likely due to that section being internally renamed or archived. Please look for the relevant permissions in other sections (including archived sections) and add them. If you still cannot find them, please contact HiBob support. 2) If you archive one of these sections after connecting the integration, the integration will fail as Torii will no longer have API access to the relevant fields. #### Connect HiBob integration to Torii To connect HiBob to Torii, follow the below steps: #### Update the User Lifecycle settings. To ensure you get the user lifecycle information in Torii, define HiBob as your Human resource management system. On the next scheduled sync, the user's status will be reflected in Torii # Page Title Hiding Applications ## Page URL https://support.toriihq.com/hc/en-us/articles/4573957040539-Hiding-Applications ## Page Description Some applications discovered by Torii may be of no interest to your business whatsoever. Torii may, for example, discover an application ## Details ### How can we help? ### Hiding Applications Some applications discovered by Torii may be of no interest to your business whatsoever. Torii may, for example, discover an application that has a monthly subscription but is not necessarily SaaS. These may be marketplace applications or some other service provider software. To remove noise, Torii gives you the option to Hide an application. A hidden application will no longer appear in Torii inventory or searches. #### How to Hide an Application Find the relevant application From the State dropdown, select Hide app You can find all the hidden applications from the Settings → Hidden Applications You can also unhide an application from that screen. #### Hidden Apps Best practices Thinking of hiding an app? Here's what you need to know: By keeping these key points in mind, you can manage your hidden apps more effectively! # Page Title How Does Torii Encrypt Your Data? ## Page URL https://support.toriihq.com/hc/en-us/articles/12925366438427-How-Does-Torii-Encrypt-Your-Data ## Page Description Credentials are encrypted both at transit and at rest. We will be happy to provide a copy of our latest SOC 2 Type II report for detailed ## Details ### How can we help? ### How Does Torii Encrypt Your Data? Credentials are encrypted both at transit and at rest. We will be happy to provide a copy of our latest SOC 2 Type II report for detailed technical information. Please reach out to your point of contact in Torii and they will be happy to advise with further information. If you have any security-related questions or concerns, feel free to reach our security team at security@toriihq.com” # Page Title How to Activate a Workflow ## Page URL https://support.toriihq.com/hc/en-us/articles/5731000384539-How-to-Activate-a-Workflow ## Page Description Overview Workflows will only be triggered when they are active. We recommend testing a new workflow before activating it. Once you ## Details ### How can we help? ### How to Activate a Workflow Workflows will only be triggered when they are active. We recommend testing a new workflow before activating it. Once you test the workflow and it runs as expected, it is time to activate it and put a repetitive task on autopilot. #### Activating Workflow You can activate the workflow from one of the options, as seen in the image below. After enabling the Active toggle, Torii will ask if to run the workflow on:A) Users, applications, or contracts that will match the criteria after the workflow is activated.B) Users, applications, or contracts that match the trigger criteria now. Select option A if you are looking only for future optimizations. For example, you might decide to send notifications about apps connected to Slack that have a high-security risk to your security lead. To prevent dozens of notifications for apps already connected to Slack and approved, select to enroll only applications that will meet the criteria after the workflow is activated. Select option B if you are looking for both retroactive and future optimizations. For example, if your company decides to work with a Zoom vendor, all full-time employees must be assigned to a basic Zoom license.You can create a workflow that automatically assigns licenses to users whose status in BambooHR is active and run it on all existing employees who are active now.Note that you can see the list of users (or other entities) that currently meet the criteria at the bottom of the popup. This list is identical to the Preview list. After selecting, click Activate. If you select to run the workflow on current entities, it will start running immediately. You will get a message that "The workflow was activated" and a popup that will enable you to navigate to the Logs page. On the Logs page, you will see the workflow progress.Note that for a workflow that ran in bulk retroactively, the process might take a while. Use the Refresh option to view the runs' progress. Q: Can I always run a new workflow retroactively? A: This option is currently available only for workflows with triggers that have Preview: Q: What happens if I edit workflow criteria? A: You will be suggested to run the workflow retroactively only when activating a workflow. Suppose you edit the workflow criteria of an active workflow. In that case, you won't be able to run it retroactively, even if you have a different list of entities that meet the criteria now. In this case, we recommend disabling the workflow, editing it, and then reactivating it. # Page Title How to Add a Custom Application Field? ## Page URL https://support.toriihq.com/hc/en-us/articles/5128897045403-How-to-Add-a-Custom-Application-Field ## Page Description Learn how to add custom application fields to all your application You can add any custom field to your applications. Custom fields ## Details ### How can we help? ### How to Add a Custom Application Field? You can add any custom field to your applications. Custom fields apply to all your applications.Custom fields can be used for: #### How to add fields #### Custom application history Torii tracks every change made to all application fields, custom or default. Q: Can I push app data into a custom field?A: Yes, First, create the custom field in Torii and then use the Update App API option found here: https://api.toriihq.com/v1.0/docs#/definitions/Update%20App # Page Title How to Add a Custom Contract Field? ## Page URL https://support.toriihq.com/hc/en-us/articles/10181878382235-How-to-Add-a-Custom-Contract-Field ## Page Description Learn how to add custom contract fields to all your application Custom fields apply to all your contracts.Custom fields can be used for: ## Details ### How can we help? ### How to Add a Custom Contract Field? Custom fields apply to all your contracts.Custom fields can be used for: #### How to add fields #### Contract history Torii tracks every change made to all contract fields, custom or default. # Page Title How to add Application Details Group? ## Page URL https://support.toriihq.com/hc/en-us/articles/5128907301531-How-to-add-Application-Details-Group ## Page Description Learn how to add application details groups You can create Application Details Groups to better organize your Applications Fields. You ## Details ### How can we help? ### How to add Application Details Group? You can create Application Details Groups to better organize your Applications Fields. You can add as many groups as you want by following these steps: Go to your Application Details tab on your settings page Scroll to the bottom of the list Press the + Add New Group button Choose your group name, press save and that's it # Page Title How to Add Expenses Manually ## Page URL https://support.toriihq.com/hc/en-us/articles/5130615288219-How-to-Add-Expenses-Manually ## Page Description Overview Importing expenses can be done in the following ways: Automatically import SaaS expenses into Torii by connecting your ## Details ### How can we help? ### How to Add Expenses Manually Importing expenses can be done in the following ways: Automatically import SaaS expenses into Torii by connecting your ERP/Expense system like Netsuite or Expensify into Torii (search for the desired app in our help center and follow the integration instructions) Manually (described in this article) - import the expenses by uploading the expense report This article will show the manual process of importing an expense report. ##### Add expenses manually process From the Expenses page click on Upload expenses report In the Upload, window upload an XLSX/CSV fileNote, The expense report should contain the following fields: Description / App Name, Transaction Date, Amount, Currency (optional) You can also download and use our expense template After uploading the file, use the Map Attributes window will open in which you should make sure to match your file's column to Torii's attributes.Do that by selecting from the dropdown list, your report (the XLS) column, and matching it to Torii's field name. Click Finish when done Once the file is uploaded, You can click it to view the full report View the report, see the number of total & matched transactions and the matched expenses From the Matched app column, you can match an unmatched app, or change a selected matchNote, that changing a matching at this point will be effective for this transaction only. you can also create a Matching rule (link here) to always apply this matching to a transaction Any unnecessary expense can be archived by hovering over it and clicking the archive icon Note, All uploaded expenses files can be viewed under Expenses >> Expense files. # Page Title How to Add User Photos to Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/5128908594203-How-to-Add-User-Photos-to-Torii ## Page Description Showing user photos in the Torii dashboard In order to add user photos to Torii, add the Slack integration from the Integrations page. ## Details ### How can we help? ### How to Add User Photos to Torii In order to add user photos to Torii, add the Slack integration from the Integrations page. Torii will sync the user photos from Slack and display them next to users in the Torii dashboard and in emails sent by Torii. # Page Title How To: Change the inactivity period for users in an application. ## Page URL https://support.toriihq.com/hc/en-us/articles/17775794221723-How-To-Change-the-inactivity-period-for-users-in-an-application ## Page Description Question/Issue/Task: How to change the inactivity period for users in an application. Steps: Navigate to the Settings menu from the left ## Details ### How can we help? ### How To: Change the inactivity period for users in an application. Question/Issue/Task: How to change the inactivity period for users in an application. # Page Title How to configure an offboarding method for a specific app account ## Page URL https://support.toriihq.com/hc/en-us/articles/27304739166491-How-to-configure-an-offboarding-method-for-a-specific-app-account ## Page Description This is a step by step guide on how to configure an offboarding method for any app account. From any application Overview tab, go to ## Details ### How can we help? ### How to configure an offboarding method for a specific app account This is a step by step guide on how to configure an offboarding method for any app account. # Page Title How to Connect Custom Integrations ## Page URL https://support.toriihq.com/hc/en-us/articles/5164699821979-How-to-Connect-Custom-Integrations ## Page Description Overview Before starting, we recommend reading the Introduction to Custom Integration article and visiting our Developer Portal for a ## Details ### How can we help? ### How to Connect Custom Integrations Before starting, we recommend reading the Introduction to Custom Integration article and visiting our Developer Portal for a detailed step-by-step guide on building your first custom integration. Kindly remember that custom integrations: To build your own integration and push user and license data into Torii you will need to follow the below process. Note, steps 3 & 4 require some technical knowledge. We recommend they are done by a developer. IT - Setup/ Preparation Technical - Use the API to upload and sync users ##### STEP 1 - Get a Torii API Key Prerequisite - Torii admin permission is required ##### STEP 2 - Create the basis for a new custom Integration in Torii ##### STEP 3 - Upload the data to Torii Prerequisites - Generate a JSON file named ‘usersfile.json’ in the working folder and verify it complies with the "File schema". Click here for Torii's full API documentation Make sure you replace the placeholders in the API calls with your variables, e.g. replace APIKEY with the API key you generated in step 1. ##### There are 2 techniques you can use to upload the data to Torii writing the code. before it expires. If you are pasting the URL in your terminal, make sure it doesn’t add any escape characters (e.g. \) ##### STEP 4 - Sync the uploaded file to Torii You should get a response indicating that the operation was successful, like in the below example: Error Message: in case of an error, a relevant message like "Illegal file structure, Wrong file id, Wrong account", etc. will be displayed. Once all these steps are completed, you will see your application data in the custom integration in Torii. ##### Additional Notes Q: Can I sync absolutely any app with Torii?A: Yes, as long as the data is structured according to the Torii file schema. Q: How often will data be pushed into Torii & Does Torii support date synchronization with custom integrations?A: You can decide how often you want to push the data into Torii. We recommend pushing the data regularly, so it stays up to date. When data has not been synced for more than 10 days, we show an alert in the UI. Q: Can I perform workflow actions for a custom app?A: Yes, through custom action configuration Q: What happens when disconnecting custom integration?A: The app account is revoked, and no more syncs are possible. You can always reconnect the same account. Read this article to learn what happens to your data when you disconnect an integration Q: How do I delete and update users?A: Each time a new file is pushed, the old data is overwritten. If users were removed from the file - they would be removed from the app in Torii. If user attributes were updated in the file - they will be updated in Torii. The file should include the following information. Note that fields must have the exact field name as shown in the following table: Users using the application (see user object below) Licenses used in your org (see license object below) Unique identifier of a user in the application The user's unique email The user's first name The user's last name The status of the user in Torii. Only active users are displayed as users of the application Enum (active/deleted) Default: active The status of the user as it appears on the application’s site Array of roles the user has in the application The last date the user used the application ISO 8601 (YYYY-MM-DD) unassignedAmount Number of licenses that are not assigned to users Users under this license (see licenseUser object below) How much does it cost per user NumberUnits: cents(e.g. $35.2 should be sent as 3520) License status. If not provided, will be defined by user status (active/inactive/deleted) Last date user used the license # Page Title How To Create Renewal Notifications ## Page URL https://support.toriihq.com/hc/en-us/articles/20690122022555-How-To-Create-Renewal-Notifications ## Page Description Overview Managing contract renewals effectively is an important aspect of SaaS management. As your organization expands, keeping tabs on ## Details ### How can we help? ### How To Create Renewal Notifications Managing contract renewals effectively is an important aspect of SaaS management. As your organization expands, keeping tabs on contract details and deadlines can become increasingly complex. The first step in managing an effective renewal is to make sure you have enough time to prepare. This is where renewal notifications come into play. For starters, Torii offers out-of-the-box renewal notifications. However, if you want to tailor your renewal notifications to your organization specific needs we recommend configuring workflow based renewal notifications. This article will walk you through how to create those quickly and easily. #### Recommended structure When configuring renewal notifications we recommend creating 2 different notifications - one for contracts which are not auto-renewing and another one for auto-renewing contracts. Additionally, if you want to send those notifications 60 days and 30 days prior to the renewal, you'd need to create 4 workflows: Follow the steps below to learn how. #### Create a notification for contracts not auto-renewing #### Create a notification for auto-renewing contracts #### Add a 30 day notification for each #### Utilizing branching for advanced scenarios Employ If/Else branches to enhance the granularity of your notifications, catering to more intricate scenarios, such as: However, for use cases such as the ones described above: You'll need to create separate workflows rather than relying on branching. This is due to the inherent behavior of Torii workflows, where each contract is enrolled only once in a given workflow, and branching is applied to subsequent actions once the workflow is triggered. Read more about workflow branching here # Page Title How to customize app categories in Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/34136469612699-How-to-customize-app-categories-in-Torii ## Page Description Overview Managing SaaS efficiently starts with organizing it your way. Torii provides you with out-of-the-box app categories to manage ## Details ### How can we help? ### How to customize app categories in Torii Managing SaaS efficiently starts with organizing it your way. Torii provides you with out-of-the-box app categories to manage your app inventory, but also the flexibility to adjust and structure application categories based on internal workflows and business needs.Adjusting app categories can lead to better organization and app governance, streamlining access request workflows, and providing more effective oversight of your SaaS spend. #### How to customize your app categories ##### Updating the category field ##### Updating an application's category #### Category and App Comparisons Customizing app categories can impact the apps compared in the Applications → Compare tab. When you change the category of an app, it can introduce new comparisons based on the updated categories. Additionally, existing comparisons may be removed if the categories no longer align. #### Important notes # Page Title How-To: Deploying the Browser Extension via JAMF ## Page URL https://support.toriihq.com/hc/en-us/articles/18254077809819-How-To-Deploying-the-Browser-Extension-via-JAMF ## Page Description Question/Issue/Task: Deploying the Browser Extension via JAMF Steps: Log into your JAMF Pro Administration Console Click on Computers ## Details ### How can we help? ### How-To: Deploying the Browser Extension via JAMF Question/Issue/Task: Deploying the Browser Extension via JAMF # Page Title How To: Enable the Workflow Edit History feature. ## Page URL https://support.toriihq.com/hc/en-us/articles/17771672072987-How-To-Enable-the-Workflow-Edit-History-feature ## Page Description Question/Issue/Task: Directions on how to enable the Workflow Edit History feature in your Torii tenant. Steps: Visit Settings from the ## Details ### How can we help? ### How To: Enable the Workflow Edit History feature. Question/Issue/Task: Directions on how to enable the Workflow Edit History feature in your Torii tenant. # Page Title How to Ensure Timely Offboarding Task Completion ## Page URL https://support.toriihq.com/hc/en-us/articles/21584519089051-How-to-Ensure-Timely-Offboarding-Task-Completion ## Page Description Introduction A crucial responsibility within IT departments is ensuring a swift offboarding process when employees depart. Timely ## Details ### How can we help? ### How to Ensure Timely Offboarding Task Completion A crucial responsibility within IT departments is ensuring a swift offboarding process when employees depart. Timely revocation of access to various tools is vital to maintain the security integrity of the organization. Torii's offboarding feature serves as a pivotal tool in mastering the offboarding process. It seamlessly triggers offboarding protocols across all applications an employee has ever utilized the moment they depart. Employees can be offboarded from applications using three distinct methods: automatic, delegate, or ignore. While using the delegate method, IT administrators rely on complete collaboration and the timely execution of delegated offboarding tasks. However, sometimes tasks might be overlooked for various reasons. Let's explore strategies to mitigate this risk and speed up offboarding, even when tasks are delegated. #### Strategies for Ensuring Timely Completion of Delegated Tasks 1. Leverage Offboarding Reminders Take advantage of configurable reminders accessible on the Offboarding settings page. By default, reminders are sent every three days. However, you can fine-tune this configuration to suit your specific needs, whether that means increasing the frequency to daily or reducing it to as infrequent as every two weeks. Please note that reminders will be sent through the same channel as the original task: Slack for Slack tasks, and email for email tasks. 2. Utilize Jira for Task Delegation Enhance stakeholder collaboration by delegating offboarding tasks through Jira, the organizational task management tool. Torii seamlessly supports offboarding task delegation via Jira tickets, fostering a more organized and collaborative approach to task management. 3. Leverage the "Pending Tasks" View Access the 'Pending Tasks' view, available as an additional tab within the 'In Progress' offboarding section. This view provides a comprehensive list of all pending offboarding tasks, organized by respective apps. It simplifies the identification of task blockers and the tracking of responsible task owners. Additionally, you have the option to mark tasks as completed, to indicate that the offboarding from the app was finalized. Please note that you might encounter tasks that remain open for offboarded users even after their offboarding is finished. This can occur when the offboarding was manually completed before all offboarding tasks were marked as done. In these cases, we recommend verifying the user's deactivation in the app account and marking the task as done following validation. # Page Title How To: find Hibob Custom Field ID ## Page URL https://support.toriihq.com/hc/en-us/articles/24733623752731-How-To-find-Hibob-Custom-Field-ID ## Page Description Overview: To add a Custom Field from Hibob, Torii Support team should get the Custom Field ID. This article explains how to get it from ## Details ### How can we help? ### How To: find Hibob Custom Field ID To add a Custom Field from Hibob, Torii Support team should get the Custom Field ID. This article explains how to get it from Hibob App. Via the Hibob Application, Run an 'Employee Field report' and it will show the field IDs, use the below instructions: Go to Analytics > press the + Add new > Report > Use a Template > Field > Employee fields > press Generate. # Page Title How To: How do I adjust the number of users in an application? ## Page URL https://support.toriihq.com/hc/en-us/articles/17251762031515-How-To-How-do-I-adjust-the-number-of-users-in-an-application ## Page Description Issue/Task: An app was detected but some users are missing from the list. Steps: Go to Applications >> the designated app ## Details ### How can we help? ### How To: How do I adjust the number of users in an application? An app was detected but some users are missing from the list. Go to Applications >> the designated app >> Users tab Click on Import In the "Import users" popup, select to browse for the file or drag & drop it. Torii processes the file and indicates how many new users will be added to the app. Click on Import Users to complete the process. For more information: Add (Import) Users Manually. # Page Title How-To: Logout from the browser extension? ## Page URL https://support.toriihq.com/hc/en-us/articles/17289035077403-How-To-Logout-from-the-browser-extension ## Page Description Question/Issue/Task: How to Logout from the browser extension? Steps: The Browser Extension (BE) is not intended to be something you can ## Details ### How can we help? ### How-To: Logout from the browser extension? Question/Issue/Task: How to Logout from the browser extension? The Browser Extension (BE) is not intended to be something you can log out of, only log in as a different user. Most organizations will either un-deploy the extension for the user's leave time or request that they remove it and reinstall it after, if unmanaged. Using a profile that does not have the extension enabled for the opt-out period is another possible approach. # Page Title How to Manage Multi-year Contracts ## Page URL https://support.toriihq.com/hc/en-us/articles/5202045021339-How-to-Manage-Multi-year-Contracts ## Page Description In this article, you will learn how to create and manage a multi-year contract Overview IT and procurement teams use Torii to manage ## Details ### How can we help? ### How to Manage Multi-year Contracts IT and procurement teams use Torii to manage renewals. If you have all your contracts in Torii and a renewal notification already set up, you can rest assured you'll never be caught unprepared for a renewal. But how do you manage renewals for multi-year contracts? There are two methods to add contracts to Torii: #### Adding a single contract for the entire period #### Adding & linking separate contracts Here, you need to add each contract separately (contract per year) and link the contracts to each other. ##### How to link contracts Update the Start and End dates and any additional details #### Renewal notifications for multi-year contracts There are two notification types for contracts. ##### Torii out-of-the-box notification #### Workflow notification You can create a workflow that notifies you and the app owner when a contract is about to end. In Criteria setup >> TRIGGER SETUP, set your triggers toStatus > Active End date > days from Click the + button to select an action. In this example Send email Select the Send email action Set the workflow to Active # Page Title How To Migrate Your Auto-Renewal Custom Fields to Torii Fields ## Page URL https://support.toriihq.com/hc/en-us/articles/20813473588251-How-To-Migrate-Your-Auto-Renewal-Custom-Fields-to-Torii-Fields ## Page Description Overview Identifying auto-renewal clauses within your contracts is crucial for receiving timely notifications, allowing you to either ## Details ### How can we help? ### How To Migrate Your Auto-Renewal Custom Fields to Torii Fields Identifying auto-renewal clauses within your contracts is crucial for receiving timely notifications, allowing you to either cancel or negotiate improved terms proactively. If you've previously implemented custom auto-renewal fields, we highly recommend migrating your contracts to leverage Torii's built-in auto-renewal fields, offering three key benefits: Learn more about how to manage auto-renewals in this article Here is a step by step guide on how to migrate your contracts to use the new fields. ##### Step 1 - Filter contracts using custom auto-renewal fields ##### Step 2 - Bulk edit Torii fields for auto-renewing contracts ##### Step 3 - Bulk edit Torii fields for contracts not auto-renewing ##### Step 4 - Update your workflows to use Torii fields Review your workflows, and make sure to replace all auto-renewal custom fields with the new Torii fields. Check both the trigger criteria and actions including personalization tokens used in the message or ticket content. For best practices on how to create renewal notifications that take into account auto-renewals, see this step by step guide ##### Step 5 - Turn off or delete your custom fields Now you can go to the Renewal Calendar and see your auto-renewing contracts showing to ensure you never miss an auto-renewal. # Page Title How to Send Forms Using Torii? ## Page URL https://support.toriihq.com/hc/en-us/articles/4680332614299-How-to-Send-Forms-Using-Torii ## Page Description This article will help to better understand sending forms using Torii Torii Workflows enable you to send forms to your team. Using forms ## Details ### How can we help? ### How to Send Forms Using Torii? Torii Workflows enable you to send forms to your team. Using forms you can create advanced workflows to let your organization update different application details. ##### How to send a form? When the end-user click on your form link on their email. Their form will look like this: Related articles: # Page Title How to Start Employee Offboarding Automatically? ## Page URL https://support.toriihq.com/hc/en-us/articles/4823998401819-How-to-Start-Employee-Offboarding-Automatically ## Page Description You can use a Torii workflow to automatically initiate an employee offboarding by selecting the "Start employee offboarding" ## Details ### How can we help? ### How to Start Employee Offboarding Automatically? You can use a Torii workflow to automatically initiate an employee offboarding by selecting the "Start employee offboarding" action. This trigger relies on real-time updates from Google Workspace, Okta and BambooHR. Use this trigger to automate urgent offboardings in case of layoffs or unexpected employee terminations. Note that we support a limited set of platforms and events. If your organization uses a different platform or event as an offboarding source of truth, consider using User meets criteria trigger or trigger offboarding manually. Once the trigger is set up, add the action "Start employee offboarding." When the workflow is triggered, the employee will be offboarded from every single app they ever used, according to app configurations defined in the Offboarding settings. # Page Title How to Subscribe to Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/25791560438043-How-to-Subscribe-to-Torii ## Page Description Subscribing to Torii is straightforward. Follow these steps to get started: Navigate to Subscription SettingsGo to Settings, select ## Details ### How can we help? ### How to Subscribe to Torii Subscribing to Torii is straightforward. Follow these steps to get started: Notice: If you have not configured the "Employee definition" in Torii, you will be charged per the number of users, which is usually higher than the number of employees. Therefore, we advise you to ensure the number of employees listed by Torii accurately reflects the number of employees in your company. For detailed guidance on configuring the employee definition in Torii, check this help article: Employees In Torii. # Page Title How to Upload a File Using the Torii Public API ## Page URL https://support.toriihq.com/hc/en-us/articles/5201884910235-How-to-Upload-a-File-Using-the-Torii-Public-API ## Page Description This article describes how to upload a file using the Public API. Introduction Torii supports various features which involve uploading ## Details ### How can we help? ### How to Upload a File Using the Torii Public API Torii supports various features which involve uploading files, such as: importing contracts, uploading expense files, and syncing custom integrations' data. While it is possible to upload files via the user interface, we also allow uploading files using the Public API. Files are uploaded and stored securely on AWS's S3, encrypted both in transit and at rest. ##### Small files (up to 3MB) To upload a small file using the public API, you can make the following request: Read the full Upload File API reference to learn more. ##### Large files (3MB or larger) To upload a file using the public API, you need to follow these 3 steps: Ask for an upload URL. This is a secure, temporary S3 URL: It returns a URL (used in step #2) and the file's path (used in step #3)Read the full Get parameters for uploading files API reference to learn more. Use the URL returned in step #1 to upload the file directly to S3: Inform Torii that the file has been uploaded successfully: It returns a unique file identifier that can be used to get additional information about this upload. # Page Title How to Upload Expense Files Using Postman ## Page URL https://support.toriihq.com/hc/en-us/articles/6192000869275-How-to-Upload-Expense-Files-Using-Postman ## Page Description Overview This article describes how to upload expenses using Postman In Torii Create an API Key Log in to Torii as an admin. ## Details ### How can we help? ### How to Upload Expense Files Using Postman This article describes how to upload expenses using Postman #### Create an API Key Log in to Torii as an admin. Go to Settings > API Access, then click Generate API Key. Select Full Access (default), then click Generate key. Save the key in a password manager/secrets vault since Torii will not display it again. ### Steps in Postman #### Get File Upload Parameters from Torii’s API Select GET from the HTTP method dropdown and enter https://api.toriihq.com/v1.0/files/url as the URL. Specify a name (filename) and type (MIME type) under “Params.” This example uses an XLS file called “upload_text.xls” (see the Note below for the most common MIME types). In the “Authorization” tab, select Bearer Token and then paste your Torii API Key in the “Token” field. The response body will return key-value pairs for “url” and “filePath.” Both will be used in subsequent steps. #### Create a Compatible Expense File Go to Expenses > Expense Files, then click Upload expenses report. Click template in the popup that appears to download a template in XLSX format. From here, you can either copy and paste your expense data into the template or reformat an existing expense file to match the template's column headers and column order. This example will use an XLS file formatted according to the template. #### Upload Your Expense File Open a new Postman tab, select PUT from the HTTP method dropdown, and enter the URL returned from the previous GET command. Click the “Body” tab, select binary, then click Select File to open a file browser, then find the file you created and double-click it to attach it. Click Send to upload your file. #### Get Your File ID Open a new Postman tab, select POST from the HTTP method dropdown, and enter the URL https://api.toriihq.com/v1.0/files. Add your API Key to the “Authorization” tab as you did previously. In the “Body” tab, enter two key-value pairs in raw JSON format: path (the value returned as “filePath” above) and type (”expenseReport”). It should look like this: The response will return an “id” value that you’ll need in the next step. #### Parse Your Expense File #### Verify Successful File Parsing Here is an example of a raw JSON “Body” payload for manual parsing: # Page Title How to upload expense files using the API? ## Page URL https://support.toriihq.com/hc/en-us/articles/5132029715611-How-to-upload-expense-files-using-the-API ## Page Description Upload expense files using Torii's APIs Who is this article for? You are a developer, with knowledge of REST API usage, tasked with ## Details ### How can we help? ### How to upload expense files using the API? #### Who is this article for? You are a developer, with knowledge of REST API usage, tasked with uploading an expense report file to Torii. Uploading an expense file to Torii using the API consists of 2 steps: Uploading the file (requires 3 API requests) Parsing the file to extract expenses (requires a single API request) To use Torii's APIs, you must have a valid API key. Learn how to use the API here. Torii's API key The full name of your file The content-type of your file For example: text/csv Torii's file type For expenses, type is: expenseReport Internally used This parameter is returned from https://api.toriihq.com/v1.0/files/url The pre-signed URL Unique file identifier This parameter is returned from https://api.toriihq.com/v1.0/files Unique parsing identifier This parameter is returned from https://api.toriihq.com/v1.0/parsings/(automatic|manual) ##### STEP 1: Uploading an expense file In order to upload an expense file to Torii using our APIs: Small files (up to 3MB)To upload a small file using the public API, you can make the following request: Large files (3MB or larger) To upload a file using the public API, you need to follow these 3 steps: A) Ask for an upload URL. This is a secure, temporary S3 URL: Example response: B) Use the S3URL provided in the previous step to upload your file: C) Inform Torii that the file has been successfully uploaded: ##### STEP 2: Parsing an expense file Use the following code snippet to parse an expense file with automatic column matching: Parsing a file may take some time, so after sending a parse request, make sure to poll https://api.toriihq.com/v1.0/parsings/{PARSINGID} to verify that the request was successful If automatic parsing did not succeed, use "manual column matching" via this endpoint: https://api.toriihq.com/v1.0/parsings/manual. (Check the Parse manually API in our docs for more information) # Page Title How to Use Postman for Custom Integrations ## Page URL https://support.toriihq.com/hc/en-us/articles/6436588669339-How-to-Use-Postman-for-Custom-Integrations ## Page Description Steps in Torii Create an API Key Log in to Torii as an admin. Go to Settings > API Access, then click Generate API Key. Select ## Details ### How can we help? ### How to Use Postman for Custom Integrations #### Create an API Key Log in to Torii as an admin. Go to Settings > API Access, then click Generate API Key. Select Full Access (default), then click Generate key. Save the key in a password manager/secrets vault since Torii will not display it again. #### Create an Application Account ID In Torii, go to Integrations. Find Add Custom Integration (search or scroll to the bottom of the list), then click the tile. You can connect your custom integration to an app already in Torii’s catalog or create a new one. Note that you can select an app that you haven’t integrated OR one that’s already connected via native integration. Click Add Integration. Torii will show you the unique Application Account ID for your new custom integration. Unlike an API key, you can retrieve (and copy) this Application Account ID at any time from the Integrations page by hovering over your custom integration’s tile. ### Steps in Postman #### Get File Upload Parameters from Torii’s API Select GET from the HTTP method dropdown and enter https://api.toriihq.com/v1.0/files/url?name=myfile.json&type=customIntegrationData as the URL.Note: you can change the filename in the path from myfile.json to whatever you’d prefer. Alternatively, you can use https://api.toriihq.com/v1.0/files/url as the URL and specify a name and type under “Params”: In the “Authorization” tab, select Bearer Token and then paste your Torii API Key in the “Token” field. The response body will return key-value pairs for “url” and “filePath.” Both will be used in subsequent steps. #### Upload a JSON File #### Get Your File ID #### Sync Your Integration # Page Title How to Use the Application Catalog - User Guide ## Page URL https://support.toriihq.com/hc/en-us/articles/8075339665051-How-to-Use-the-Application-Catalog-User-Guide ## Page Description Application Catalog user view The Application Catalog is a searchable portfolio of all the software used in your organization from here ## Details ### How can we help? ### How to Use the Application Catalog - User Guide #### Application Catalog user view The Application Catalog is a searchable portfolio of all the software used in your organization from here you can view all the organization SaaS apps available in the organization.Get into the Application Catalog from here. Once in, you will see the full list of the application catalog. #### Request access to apps Request access to an application by clicking the Request Access button. Based on the IT admin setup, clicking the button will send your request to the admin. When searching for an app, If an app is not found in the catalog, Torii will identify similar available apps and recommend them to users. If you still haven't found a suitable application click the "Request a New Application" link # Page Title HubSpot Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5190653947291-HubSpot-Integration ## Page Description Set up your HubSpot integration and get all the insights in Torii's dashboard Overview Torii integrates with your HubSpot account and ## Details ### How can we help? ### HubSpot Integration Set up your HubSpot integration and get all the insights in Torii's dashboard Torii integrates with your HubSpot account and syncs the list of users and their status. Torii supports the following actions: To use these actions, you will need to add the following scope - private app - 'settings.users.write.' Additionally, for the 'Modify User Role' action, you will need to add the following scope: 'billing-write' To connect HubSpot to Torii, you will need the following: Super Admin permissions to access your account's API key In the Basic Info tab, give the API Token a name Check the crm.objects.owners checkbox Click on Continue creating Copy the API key #### Connect HubSpot integration to Torii Once the integration is connected and synced, it will display a green checkbox. Q: My integrations has failed with the error "HubsSpot API shared rate limit reached". What does this mean?A: The HubSpot API has a rate limit that is shared among all private apps for each organization. Altough Torii's HubSpot integration doesn't call the HubSpot API a large number of times, the integration can still fail if you have other private apps set up in HubSpot which are heavily utilizing their API. When Torii's Hubspot integration fails this way, we continue to attempt to sync the integration for several days. If a rate limit error persists for more than several days, the integration will be disabled. In this case, we recommend looking into and adjusting your private apps in HubSpot, as they are preventing the integration form syncing successfully. Once you've do so, please reconnect the integration. # Page Title New User Training #11: I Thought YOU Offboarded Eli! ## Page URL https://support.toriihq.com/hc/en-us/articles/8490630886043--New-User-Training-11-I-Thought-YOU-Offboarded-Eli ## Page Description This is video 11 out of 13 in the New User training series. Learn more about Torii's automation around offboarding employees and how ## Details ### How can we help? ### New User Training #11: I Thought YOU Offboarded Eli! This is video 11 out of 13 in the New User training series. #### Questions for Implementation #### Continue Your Training Series #### Additional Resources Offboarding Page Leave of Absence Alerts Offboarding Sensitive Apps # Page Title Importing Contracts into Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/5150804779291-Importing-Contracts-into-Torii ## Page Description Import contracts from an Excel or CSV file Torii provides a contract import tool to import all your contracts from a CSV/Excel (XLS or ## Details ### How can we help? ### Importing Contracts into Torii Torii provides a contract import tool to import all your contracts from a CSV/Excel (XLS or XLSX) file. You can use this feature to perform a first-time bulk upload of contracts into Torii and to bulk-update existing contracts. To successfully import a file containing multiple contracts into Torii, please note the following prerequisites: The first row is a header row that must include three mandatory columns:Contract name, Application name, and Status. The Application name column's values must match the application names that appear in Torii. Each contract must be in a different row (one row per contract). Custom applications must be created in Torii first because Torii will not create new custom applications during the import process. The Status column's values must match the application statuses defined in Contract Details. All column headers must exactly match the contract fields as defined in Contract Details. For any single-select field, the value must match one of the defined single-select field values. Multi-select fields can be updated using comma-separated values within the same Excel/CSV field, e.g. value1, value2, value3. Those values must exactly match the defined values of their respective fields. Employee fields must contain a valid email address in one of two formats: tony@starkindustries.com or Tony Stark For credit card numbers, Torii only stores the last four digits of the card number. If you'd like to import card numbers, only include the last four digits. All dates must follow the same date format. You will be asked to specify the date format during the import. #### Importing Contracts #### Handling Errors Torii will do its best to import the data even if the file contains invalid fields. As a result, Torii will skip any contracts it can't parse. For example, if a row in the import file doesn't match any existing application name in Torii, this row will be skipped. #### Missing Dates When Importing If dates appear blank after importing contracts, this usually indicates that the date format you chose doesn't match the date format in the CSV file. When you open a CSV file in Microsoft Excel, the displayed date format may not be the same as the format in the underlying CSV file. Consequently, when you import this file into Torii, you may not choose the correct date format. We suggest that you either use the Excel CSV import wizard or follow the steps below to pick the right date format in Excel. Open your file in Microsoft Excel. Right-click the columns containing dates. Select Format cells. Click Date under Number > Category. Choose the correct data format, e.g. MM/DD/YYYY. Make sure you choose a date format without an asterisk (*). Date formats without an asterisk aren't affected by operating system settings. Save the file in XLSX or XLS format. Does the import file need to contain all contract fields as columns?No. The only 3 mandatory columns are Contract name, Application name, and Status. What happens if one of the mandatory fields is missing?The row containing the missing value in the import file will be ignored. Will the import overwrite my existing contracts?Yes, if a row has the same Contract name and Application name values, it will overwrite the existing data in Torii. Empty cells in the import file will clear the corresponding contract field values in Torii. Will the import delete any contracts?No, the import can only create new contracts and update existing ones. The import can, however, delete contract field values as discussed in the previous answer. What if my file contains custom applications?Custom applications will only be matched if they have already been added to Torii. Can I upload documents during the import?No, Torii doesn't currently support bulk-uploading documents. Why weren't all rows (contracts) in the file imported?Rows that Torii can't parse will be skipped. The import dialog box will tell you how many contracts were updated and added out of the total number of rows in the file. # Page Title Integration for Slack ## Page URL https://support.toriihq.com/hc/en-us/articles/5195249657371-Integration-for-Slack ## Page Description Overview The integration for Slack syncs the list of users, their last usage date, usage frequency, licenses, and any 3rd party ## Details ### How can we help? ### Integration for Slack The integration for Slack syncs the list of users, their last usage date, usage frequency, licenses, and any 3rd party applications installed on your Slack account. This integration requires a paid Slack account. Managing users from within Torii requires a Business+ or Enterprise Grid account. #### Additional Notes ##### Send Slack notifications Q: Can I enable Torii's workflow error notifications on a Free Slack account?A: No, you must have a paid account (Pro, Business+, or Enterprise) in order to integrate Torii or enable workflow error notifications in Slack # Page Title Integration Sync Status ## Page URL https://support.toriihq.com/hc/en-us/articles/13489409235739-Integration-Sync-Status ## Page Description Overview On your Integrations page, you can see all integrations you synced and their statuses. Normally, our integrations sync data on ## Details ### How can we help? ### Integration Sync Status On your Integrations page, you can see all integrations you synced and their statuses. Normally, our integrations sync data on a daily basis. If the last sync attempt was successful, the integration will display a Green checkbox. Once an integration is successfully synced, it displays a green checkbox. A Yellow icon represents a partial success.This means that in the last sync, not all the data was synced successfully. You will be able to see which data was updated when opening the popup. A Red icon indicates that the last sync attempt failed and no data was updated. # Page Title Rapid7 Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/8246472269083-Rapid7-Integration ## Page Description Set up Rapid7 integration and get all the insights in Torii's dashboard Overview Torii integrates with your Rapid7 account and syncs: ## Details ### How can we help? ### Rapid7 Integration Torii integrates with your Rapid7 account and syncs: Only Platform Administrators are allowed to perform User Management functions in the Insight Platform ##### Connect Rapid7 integration to Torii Go to the Integrations page and select the Rapid7 tile Click Connect to Rapid7 In the Connect Rapid7 box enter the API key Once the integration is connected and synced, it will display a green checkbox. # Page Title Intercom Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5167391129499-Intercom-Integration ## Page Description Overview Torii integrates with your Intercom account with the following capabilities: User Fields License Types Usage User ## Details ### How can we help? ### Intercom Integration Torii integrates with your Intercom account with the following capabilities: Please note: Due to Intercom API limitations, License data is accurate only for customers on their legacy billing plan Torii can support multiple Intercom accounts ##### Accounts & permissions Make sure you have an Intercom account and admin user Torii requires the following scopes: #### Connect Intercom integration to Torii To connect Intercom to Torii, follow these steps: Go to the Integrations page and select the Intercom tile Click Connect to Intercom Connect Intercom is based on OAuth connection so no additional information from Intercom is required You will need to approve Read admins and Read one admin permissions Click Authorize access Once you approve and the sync is complete, it will display a green checkbox # Page Title Introduction to Application Catalog ## Page URL https://support.toriihq.com/hc/en-us/articles/7969708375451-Introduction-to-Application-Catalog ## Page Description Overview Torii Application Catalog is another tool in Torii's toolbox that enables you and the company employees an organized SaaS ## Details ### How can we help? ### Introduction to Application Catalog Torii Application Catalog is another tool in Torii's toolbox that enables you and the company employees an organized SaaS management. Making an accessible app catalog to your org employees will help you: Remove application duplications. When employees have access to the entire applications list, they can choose the best tools without introducing duplicate applications or duplicate accounts in the same application. Identify owners. Who's in charge of which application? Application owners are listed next to each application, making them more reachable and better able to share their knowledge and take action. Increase utilization and adoption. Instead of rapidly introducing more and more applications, make better use of the ones you have.With transparency into all applications, employees can easily find and access existing and approved solutions. The Application catalog is divided into two: #### Application Catalog from creation to utilizing process #### Application Catalog - Applications displayed in the catalog First, let's see what the App Catalog should look like to your organization's users.The catalog lists all apps that are marked as Sanctioned (unless you change the default configuration) The catalog is fully customizable. you can add, remove and configure request rules for each app. The users can get to the application catalog from here https://app.toriihq.com/team/appCatalogThe apps are divided into categories, which in most cases match employee roles.For example, there is a category for Customer Success tools, a category for Design tools, and so on.Learn how the users see and use the Application Catalog from the How to Use the Application Catalog article #### Admin Console - manage apps and settings From the side-menu select "Application Catalog," and the following will be available to you as an Admin. #### Publish the application catalog Once the Application catalog is configured and ready, turn on the Enable for all employees toggle. Copy the link and communicate it to all employees. Here you will find our recommendation on communicating the Application Catalog to the employees. #### Signing in with or without SSO With SSO Having your SSO SAML connected to Torii will ease the login process of employees to the catalog, as they will not need to create a new username/password since they can use your organization's SSO platform. If SSO authentication is configured for your account, the user can click on the Torii button on your identity provider dashboard (Okta, OneLogin, Google, Microsoft, etc) and be sent directly into the application catalog. A Torii user will be automatically provisioned for them and there is no need for signing up. You can allow your entire organization access to Torii from your identity provider or limit it to specific groups or people. Users will be created as members without access to the Torii dashboard but with access to the Application Catalog. If SSO is not configured for your account, users can sign up using an email and password.This is the flow for your users: The user visits https://catalog.toriihq.com. The user clicks on the "Sign up" button. The user enters their email address and clicks "Confirm". The user will receive an email with a confirmation link. A click on that link will send the user directly to the application catalog where they will be asked to choose a password. #### Additional Application Catalog articles # Page Title Introduction to Contract and Renewal Management ## Page URL https://support.toriihq.com/hc/en-us/articles/18658625125659-Introduction-to-Contract-and-Renewal-Management ## Page Description Overview Managing contract renewals effectively is an important aspect of SaaS management. As your organization expands, keeping tabs on ## Details ### How can we help? ### Introduction to Contract and Renewal Management Managing contract renewals effectively is an important aspect of SaaS management. As your organization expands, keeping tabs on contract details and deadlines can become increasingly complex. Torii's Contract Management feature is purpose-built to simplify this process, offering a seamless and effective way to oversee your contracts so you can gain: Automated renewal notifications - Never miss a contract renewal deadline again. Torii provides automated renewal notifications, ensuring you stay ahead of the curve. Data informed renewal process - Easily access all relevant data when renewing contracts. Make informed decisions based on historical information and insights. Answer any question quickly - With all your contracts in one place, you can respond to inquiries or audit requests promptly, enhancing your efficiency. Monitor actual spend against budget - Track your contract expenses against your budget effortlessly, helping you maintain financial control. ### Ways to add contracts Torii offers multiple methods for adding contracts, catering to your specific needs: With these versatile options, Torii ensures that you can seamlessly add contracts to your system, regardless of your preferred method or existing tools. # Page Title Introduction to Custom Integrations ## Page URL https://support.toriihq.com/hc/en-us/articles/5164749028507-Introduction-to-Custom-Integrations ## Page Description Build your own integration and push user and license data into Torii using our robust API Introduction Torii supports more than 100 ## Details ### How can we help? ### Introduction to Custom Integrations Torii supports more than 100 out-of-the-box integrations with SAAS apps. However, what about apps Torii does not integrate with yet? Well, we have a solution for that too - we support building your own custom integrations: You can build your own integrations and push user and license data into Torii using our robust API. We recommend using custom integration functionality to connect your on-prem and home-grown apps and manage all your apps in Torii. Note that custom integrations: Manage user off-boarding from any software in Torii: Once the apps used in your organization are connected to Torii, you will be able to configure off-boarding methods for all apps users are assigned to. If an app has an open API, you will also be able to automate off-boarding through custom actions. Run robust workflows for any app: For example, you can configure a workflow that sends notifications when a number of unassigned licenses for your custom application pass a certain threshold and then make sure you purchase more licenses in advance. #### Important prerequisites & instructions! To follow the full step-by-step process and Q&A go to the - How to Connect Custom Integration article # Page Title Introduction to Integrations in Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/6755817160347-Introduction-to-Integrations-in-Torii ## Page Description This overview article describes how to work with Torii's integrations. Torii is a SaaS management system enabling you to store and ## Details ### How can we help? ### Introduction to Integrations in Torii This overview article describes how to work with Torii's integrations. Torii is a SaaS management system enabling you to store and analyze applications' data like users, licenses, usage, and more. With Torii, you can save time and money by managing and automating organizational activities like onboarding, offboarding, and various additional workflows. Torii pulls the information directly from the SaaS application provider to best manage these activities and get the most accurate and rich data visibility.To optimize the data received by Torii, we recommend connecting (connect integration) as many SaaS tools as possible to Torii. You can find a dedicated article for each integration in our help center; however, In this article, we would like to give you a high-level overview of the Integration functionality. #### Integration Page The Integrations page consists of 3 tabs - All Integrations, Recommended to connect, and Need attention. Also, you will find an Integration Capabilities button that will take you to the Integrations overview table. #### All Integrations Under the "All Integrations" tab, you can find all integration Torii can integrate with divided into the following categories. #### Connect Integration #### Connecting Multiple Accounts Some applications allow you to connect multiple accounts. #### Edit account integration name (rename) To rename an integrated account (for example, when multiple accounts are integrated): #### Reconnect integrated account In some cases, you might want to Reconnect an account, for example: You will be required to provide the connection details again in this case. The behavior should be the same for both standard and custom integrations. #### Disconnect integrated account In some cases, you might want to disconnect an integrated application account. Note that this action will disconnect the application in the case of a single integrated account. ##### Disconnecting an account will: ##### Other areas that might be impacted: ##### When disconnecting an integration that provides data on other apps and their users, this will have additional effects: #### How to Disconnect an Integrated Account # Page Title Introduction to Licenses & Cost Saving in Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/4577306621595-Introduction-to-Licenses-Cost-Saving-in-Torii ## Page Description See how Torii can help you find wasted licenses, monitor the licenses' status, find unused licenses, and save on SaaS costs Overview ## Details ### How can we help? ### Introduction to Licenses & Cost Saving in Torii Once you start managing your SaaS, Torii can help you uncover cost-saving opportunities. #### Find Wasted Licenses For seat-based licenses, one of the easiest ways to save costs is to find wasted licenses. For each integrated application, Torii provides a detailed license breakdown. Torii can display inactive or unassigned licenses that, in most cases, can be reclaimed to reduce cost. The most common reasons for wasted licenses are: Even if you are on a fixed annual contract, understanding your license utilization can help you decide on the right size for your contract upon renewal. You can view the organization licenses from the following locations : #### Recommendations tab Note that the Inactive users' report will not always match the inactive licenses list. A user with multiple licenses for the same app might be active in one license and inactive in another.In the Inactive users' report, the inactivity will always be calculated at the app level. #### Q: How is license inactivity calculated? #### Q: Where does the data about the license's last used date come from? A: Torii looks at a user's last activity date in various sources. Direct source - if an app is connected via direct integration, Torii might get the last activity day of a licensed user directly from the app. SSO (indirect source) - if an app is behind SSO (Okta, Jumpcloud, OneLogin, Azure AD, or Google Workspace), Torii will get the last login day of a licensed user from the SSO provider. This information might be less accurate since SSOs only report about app logins. The extension (indirect source) #### Q: How does Torii know if a license is being used or not? A: Torii will mark licenses as inactive in the following cases: The user has left the org. User access to an app was blocked. The user has not used the app in the last X days, according to the N of days defined as an inactivity period.The inactivity reason is displayed in the Reason column in the Inactive licenses popup. #### Q: What is the list of reasons for an inactive license? A: See the table below. #### Q: Will Torii consider licenses without the last used date inactive? A: Torii will consider licenses without the last used date inactive in the following cases: # Page Title Introduction to Roles - Based Access Control (RBAC) ## Page URL https://support.toriihq.com/hc/en-us/articles/6174005637787-Introduction-to-Roles-Based-Access-Control-RBAC ## Page Description Overview Torii users with the Admin role can customize the permissions for new and existing users in the Torii account. A Role consists ## Details ### How can we help? ### Introduction to Roles - Based Access Control (RBAC) Torii users with the Admin role can customize the permissions for new and existing users in the Torii account. A Role consists of: The role defines the information the user is exposed to and limits users' actions in Torii's console. There are two types of roles: #### Pre-defined Roles The pre-defined roles within Torii that cannot be edited or deleted are: #### Custom Roles & Scopes Torii users with the Admin role can create custom roles, meaning they can create new roles with custom access levels and scopes. #### Create Torii custom role (RBAC) RBAC mechanism enables the granular admin control of access and actions. Torii admin can create custom roles corresponding with the org saas management methodology.These roles will have access only to the information relevant to them. Using custom roles, you can, for example, invite a member from the legal team to Torii's admin console with permission to view all contracts but with no permission to update information or view users' data. Only users with the Admin role can create, edit and remove custom roles #### Creating Custom Access Roles #### Edit/ Delete Custom Access Roles Only roles created by an admin (not pre-defined by Torii) can be edited or deleted by hovering over the role and selecting the edit/ delete icons. #### How to Assign a Role? ##### Additional Articles # Page Title Introduction to SaaS Expenses in Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/5130306761243-Introduction-to-SaaS-Expenses-in-Torii ## Page Description View all your company SaaS expenses in Torii, see how much is spent on the different apps, and where you can save money Overview One of ## Details ### How can we help? ### Introduction to SaaS Expenses in Torii View all your company SaaS expenses in Torii, see how much is spent on the different apps, and where you can save money One of Torii's capabilities is reconciling data from multiple data sources. Your SaaS financial data is one of these data sources. Importing your SaaS expenses into Torii will enrich your SaaS inventory with the cost of each tool. Importing your SaaS costs into Torii has several benefits: #### How to view Expenses? You have a few ways to view your expenses in Torii, and each one provides you with different insights. The Expense page provides you with an overview of all SaaS expenses. See how much you spend each month on the different apps, upload expenses report, and save money by having the complete financial picture at your fingertips. On the "Expenses" main page, you will find 3 tabs: Under PAID APPLICATION, you can view all organization's expenses per app. Note that PAID APPLICAITONS presents only applications with expenses, not all applications. ##### Applications page Here at the first view, you can see all the organization apps and sort from highest to lowest expenses. Click on an expense to see the complete application expense information. ##### View a specific application expenses Getting to specific application expenses From Applications >> select the app. From Expenses >> select the app. From the Expenses tab, view the expenses. In the application page>> Expenses tab, you can see: You can recognize the expenses types in the EXPENSE ACTIVITY list, depending on the data import method: #### How can you recognize the expense source? On the Expenses page, you can see: Manually or via API uploaded expenses that are marked by an icon and the file type name The expenses from the integrated app, in this case, Bill.com At any point, you can update or archive any transaction #### Learn more about expenses at Torii How to add expenses manually - learn how to upload your expenses to Torii using XLSX/CSV files How Torii handles expenses duplication (Deduplicate)Torii's robust algorithm can bring expenses from more than one source. However, be rest assured that we also know how to handle duplicated expenses (Same expense from different sources). What are Matching Rules and How to Use Them Torii has a sophisticated matching algorithm that automatically matches transactions to apps. As with any algorithm, you might want to tweak the matching to better suit your needs; this is where matching rules come into play. Match rule - To make sure no expense is missed. Ignore rule - Ensure no unnecessary expense appears in your expense report. # Page Title Introduction to the Plugin Marketplace ## Page URL https://support.toriihq.com/hc/en-us/articles/19276527135131-Introduction-to-the-Plugin-Marketplace ## Page Description Plugin Marketplace Torii is an open platform that can be extended through plugins. Plugins provide additional functionality beyond what ## Details ### How can we help? ### Introduction to the Plugin Marketplace #### Plugin Marketplace Torii is an open platform that can be extended through plugins. Plugins provide additional functionality beyond what Torii provides out of the box. Plugins have access to read and analyze your data, augment it from external sources, and display it in new ways using widgets. You can find the Plugin Marketplace on your Torii dashboard: The marketplace shows all available plugins that can be installed. Filter the plugins by: To learn more on each plugin, click on its tile to get to the plugin page: Plugins that support widgets will have a Widgets tab to preview the added functionality after installation: Once the plugin is installed and data is available, the widget will appear on the Overview tab when viewing an application: ##### Application details The plugin will add the listed Application Details shown on the Widgets tab to your account. You can view the new Application Details on the Settings -> Application Details page. They will be listed in a new group with the plugin name. These application details cannot be edited or deleted, but can be hidden using the Show toggle. These application details have the full functionality of built-in application details in Torii: The plugin will provide the data for these application details, and the values cannot be edited or removed. #### Installing and uninstalling plugins When ready to install, click the Install button and provide any requested information. All account admins will receive an email to inform them about the installation of the plugin. The plugin is now enabled and has access to read and update the data in your account. Read the plugin description to learn more about the expected plugin functionality. To uninstall, go to the plugin page and click the uninstall button. All account admins will receive an email to inform them about the uninstallation of the plugin. In addition, all widgets and application details will be removed from your account. #### Troubleshooting and support Plugins are created by third parties, which provides the support for the plugin. For plugin-specific support, reach out to the plugin author. For general support on the Plugin Marketplace, please reach out to our support team at support@toriihq.com. # Page Title Introduction to Torii Browser Extension ## Page URL https://support.toriihq.com/hc/en-us/articles/5145912885403-Introduction-to-Torii-Browser-Extension ## Page Description How does the Torii browser extension work? Overview Torii utilizes multiple discovery sources to map your organization's SaaS stack. ## Details ### How can we help? ### Introduction to Torii Browser Extension Torii utilizes multiple discovery sources to map your organization's SaaS stack. Torii browser extension is a discovery source that can be deployed on the employee's browser as an additional discovery source. Torii extension analyzes user behavior to detect logins to business applications. The entire analysis is performed locally on the client-side, meaning that no cookies, login information nor browsing history information is sent to Torii servers Once a SaaS application is detected the only information recorded - is the Torii user ID and the visit time in the app. Browser Extension Overview #### Why do you need it? #### Collecting Data #### Browser extension modes Torii browser extension operates in 3 alternative modes. These modes affect how and which data is being sent from the extension to Torii. #### Where can you see the extension at work? Usage sensed by the extension is reflected in a few areas of the Torii platform: Application >> Review tab >> Sources column see which apps have been discovered through the extension In any Application,>> app's overview page you can see overall App usage, and which users have logged in to the app. In this example, you can see that this app was discovered solely by the Torii extension uncovering what might be a shadow application. #### Filter extension discovery By using filters, you can create an "Application view" that will help you see the new apps discovered by the Torii extension. Go to Application >> Review tab and select filters that will help you spot the new applications that were discovered. For example, where the source is “extension” ##### What data is being collected? Torii measures days used per month for each business application in order to provide usage and utilization information. The extension does not collect data on other browser extensions installed on browser. ##### Does the extension map applications with personal usage? No. Torii identifies and maps only business SaaS applications and will never analyze or store personal usage. Examples of apps that are mapped: SalesForce, HubSpot, New Relic, MailChimp, and any app that is used for business purposes.Examples of apps that are not mapped: are Facebook, LinkedIn, Twitter, Audible, and any other personal apps. Some applications may offer different versions of their service for personal business use, such as Facebook vs Facebook ads, LinkedIn vs LinkedIn Recruiter, and Twitter vs Twitter ads. Torii only maps the business usage. ##### Does the extension support multiple emails for the same user? Yes. In conjunction with the Combining email aliases using Merge Users feature, the extension will detect logins and usage for any email alias of the detected user excluding personal email address and any address not allow-listed for the organization. ##### Why when testing the extension I have a login window before activating the extension? That’s the expected behavior. When the browser extension is installed and it doesn’t know who the user is, it asks the user to log in.Meanwhile, it will also try to identify the user. Once identified (based on the user signing in to Chrome by inspecting cookies and other data points), it will then start detecting the used apps. ##### Does the Torii extension have any effect on the browser performance? No, the browser ext. doesn't slow down browser speeds or affect performance in any way ##### How do we see user activity when deploying Torii's browser extension on more than one browser (Chrome, Firefox, and Edge)? The report shows the latest browser that reported for a user, but we capture data from all ##### Why doesn't Torii's extension icon automatically appear in my browser after installation? Chrome, Edge, and Firefox browsers store your installed extensions under the puzzle piece icon in your browser. After clicking on the puzzle piece icon, you can pin Torii's browser extension to your browser. ##### If my org uses a managed version of Chrome, how can I automatically pin Torii's browser extension in my users' browsers when deploying it across my org? If you want the extension icon to automatically appear in your users' browsers after deploying the extension, you can follow these instructions - https://support.google.com/chrome/a/answer/6306504?hl=en ##### Why are there always non-reporting users in the Extension Status report? Torii assumes that all users should have the extension installed if it's enabled in your tenant. The non-reporting users listed are calculated as total active users minus active users with the extension active. ##### If I switch from Authenticated Mode to Unauthenticated Mode, does the extension retain the "logged in" status of Users who previously logged into the extension? Yes, and users can also log into the extension when it's being used in Unauthenticated Mode if they want to. ##### How do I deploy the browser extension for chromium-based browsers (such as Opera, Arc or Brave)? Please contact the support team of these browsers for support in deploying the extension to these browsers. #### See the following "how-to" articles to deploy and communicate the Torii extension. # Page Title Introduction to Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/5459824292891-Introduction-to-Torii ## Page Description The following articles will provide you with the first steps to getting to know Torii's abilities and features. New User Training Series ## Details ### How can we help? ### Introduction to Torii The following articles will provide you with the first steps to getting to know Torii's abilities and features. # Page Title Introduction to Workflows ## Page URL https://support.toriihq.com/hc/en-us/articles/4701970529435-Introduction-to-Workflows ## Page Description Learn when and how Torii workflows are triggered Torii workflow is a powerful feature that brings powerful automation capabilities ## Details ### How can we help? ### Introduction to Workflows Torii workflow is a powerful feature that brings powerful automation capabilities without the need to write any code. #### How Workflow Criteria are Evaluated It is essential to understand that workflow criteria are evaluated against Torii data which can also be viewed in Torii's UI console. As Torii syncs data from external sources every 24 hours, Torii's data and the source data might not always be in sync. For example, assume you have a workflow with the following criteria: This workflow would trigger when the status of a user in Google Workspace (G-Suite) is suspended. You should expect this workflow to be triggered only when Google Workspace data has been synced to Torii and Torii workflow criteria have been evaluated. When are Workflow Criteria Evaluated? Torii syncs data from the integrations every 24 hours at 2:00 am GMT. Workflow trigger criteria are evaluated every hour on the half-hour (e.g. 9:30, 10:30, 11:30, ) 7:00 pm GMT - Google Workspace user tony@example.com has been set to "Suspended" on Google Workspace 2:00 am GMT - Torii syncs data from Google Workspace 2:30 am GMT - Torii evaluates the criteria and finds that tony@example.com matches the criteria and triggers the workflow #### Using "User" groups as workflow trigger criteria One of Torii's workflow triggers capabilities is to use a user's attribution to certain user groups (such as Okta groups or Google Workspace groups) to trigger workflows.Use Torii's filter to focus your workflow with multivalue groups.This can be very useful in cases such as onboarding and offboarding workflows, where you can provision or deprovision applications to a user based on which user group they belong to. Currently, we support this capability for Okta and Google Workspace groups, and more will be added in the future. To use a user group in a workflow trigger: #### Workflow Criteria Preview By clicking the Preview button in the workflow criteria filter, you can view the entities that currently meet the criteria. This preview helps you fine-tune your criteria to match only the needed entities. Pay attention that the preview only shows entities that match the criteria as of that moment and will not necessarily cause the workflow to be triggered once activated. Read about how to run workflow retroactively in this article. # Page Title InVision Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5728073897627-InVision-Integration ## Page Description Overview Torii integrates with InVision and syncs the users' list. Prerequisites InVision V7 Enterprise plan An account owner or ## Details ### How can we help? ### InVision Integration Torii integrates with InVision and syncs the users' list. To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, InVision's help center, or their support. #### Integration Process To connect InVision to Torii, follow these steps: Once the integration is connected and synced, it will display a green checkbox. # Page Title Inviting and Removing Torii Users From a Role ## Page URL https://support.toriihq.com/hc/en-us/articles/4680724778651-Inviting-and-Removing-Torii-Users-From-a-Role ## Page Description How to invite and remove additional Torii users Users with the Admin role can create new users, customize user permissions, and remove ## Details ### How can we help? ### Inviting and Removing Torii Users From a Role Users with the Admin role can create new users, customize user permissions, and remove users from your account. Only users with the Admin role can manage users Click the Team section Click the Invite members button The invite members dialog box opens: Type the email address of the member you'd like to invite. Select the roleYou can click the See permissions link to view the permissions associated with this role You can only invite members from your list of approved domains Hover on the line with the user you would like to remove The trash icon will appear. Clicking this icon will remove the user # Page Title Ironclad integration ## Page URL https://support.toriihq.com/hc/en-us/articles/29924205034779-Ironclad-integration ## Page Description Easily synchronize all your signed contracts with Torii by configuring the Ironclad integration. Access renewal dates and contract ## Details ### How can we help? ### Ironclad integration Easily synchronize all your signed contracts with Torii by configuring the Ironclad integration. Access renewal dates and contract specifics alongside user, usage, and expense information seamlessly. Utilize this comprehensive dataset for effective renewal management and cost optimization. The Ironclad integration fetches contract records and syncs them into Torii. Contract integrations are available for customers on the Torii Enterprise plan. Torii syncs contract records with an agreement date from the last 36 months. To ensure only software contracts are fetched, a record type filter is applied upon connection. #### How to connect Ironclad integration to Torii To connect Ironclad to Torii, follow the below steps: #### How to update the Record type filter If, after the integration is connected, you wish to update the Record type filter and re-sync contracts, you can use the "Reconnect" action from the integration card action menu. Please note that contracts previously fetched will not be deleted as part of the reconnection. It is recommended to manually delete all contracts with a "Ironclad" contract source before reconnecting. #### How to disconnect In order to disconnect, simply select "Disconnect" from the integration card action menu. Please note that contracts already fetched will not be automatically deleted as part of the disconnect action. If you want to remove them, please manually delete them from the Contracts table. #### Custom configuration Want to fetch extra fields from Ironclad or tweak the default field mapping? No worries! We can handle this with a custom backend configuration. Just reach out to our support team with all the details, and we'll get it set up for you. #### Integration Capabilities You can always be updated with application information from our Integrations Page >> Integration Capabilities button >>Integration Capabilities table. Q: Does the integration allow mapping Ironclad fields to custom contract fields in Torii? A: Yes, but this requires custom configuration that can only be done by our support team. Please reach out to support with the details of your request and they will configure it for you. Q: Does the integration fetch users and usage? A: Currently not. The Ironclad integration only fetches contracts. # Page Title Is There a Size Limit to the Files I Upload to Torii? ## Page URL https://support.toriihq.com/hc/en-us/articles/5150914708123-Is-There-a-Size-Limit-to-the-Files-I-Upload-to-Torii ## Page Description What is the limit for uploading PDF, CSV, and other files to Torii and how to overcome it Yes, currently there is a 5MB file upload ## Details ### How can we help? ### Is There a Size Limit to the Files I Upload to Torii? What is the limit for uploading PDF, CSV, and other files to Torii and how to overcome it Yes, currently there is a 5MB file upload limit size. Meaning that you can't upload a single file larger than 5MB. In case you still need to upload such a file — contact our support at hello@toriihq.com and they will provide help. # Page Title IT Admin Role - Permissions & Scopes ## Page URL https://support.toriihq.com/hc/en-us/articles/8243691341851-IT-Admin-Role-Permissions-Scopes ## Page Description Objectives This article is intended for Torii Admin who wishes to create a controlled permission view to an IT Admin persona. You will ## Details ### How can we help? ### IT Admin Role - Permissions & Scopes This article is intended for Torii Admin who wishes to create a controlled permission view to an IT Admin persona. You will learn how Torii defines the IT Admin role and how to assign it to a specific user.At the end of this article, you will find a short video presenting the information available for the IT Admin once assigned. * Prerequisite - Read the Introduction to Role-Based Access Control (RBAC) article The Torii IT admin role is made for IT personnel who are part of the Torii IT management team; however, are not the primary Torii admin. These Torii users are responsible for the daily operation of Torii management like onboarding and off-boarding users, license utilization, review & approval process, and configuring Integrations and workflows. The IT Admin has a full picture of the applications usage and users' details but is not exposed to financial data #### View IT Admin Role Scopes #### What are the IT Admin role scopes & access levels? How to Assign a Role? #### IT Admin Role Information Visibility - Short Video # Page Title Jamf Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5191416091931-Jamf-Integration ## Page Description Set up your Jamf integration and get all the insights in Torii's dashboard Torii integrates with your Jamf Pro account and syncs the ## Details ### How can we help? ### Jamf Integration Torii integrates with your Jamf Pro account and syncs the list of users, computers, and mobile devices. Additionally, Jamf discovers all installed apps on your company's devices as well as which users have these apps installed and usage of these installed apps.Please note: Jamf usage data for desktop apps is updated with a 3 day delay due to limitations of the Jamf API. This integration connects to Jamf Pro. Torii does not currently have an integration for Jamf Connect only. #### Users, Computers, and Mobile Devices The integration lists all users and their assigned devices as licenses. There is one license for Computers and one for Mobile devices. Each computer and mobile device will be shown as one license, and a user can be assigned to one or more licenses. Torii will show inactive licenses when users have left the organization or are not using Jamf for a period of time. Torii syncs last used date from computers only and not from mobile devices For the integration, we will create an API role that defines a privilege set. Step 7: In the Jamf Pro API role privileges field, apply the following permissions: Roles required to get Jamf user data: Roles required to get Jamf desktop app, user and usage data: Roles required to run Jamf actions: If you plan to use Torii for automated actions, add the CREATE, UPDATE and DELETE permissions to all objects present previously For example, to run the "Delete Jamf user" action, please add the Users (CREATE, UPDATE and DELETE) permission. To run the "Lock Jamf computers of user" action, please apply the "Send Computer Remote Lock Command" privilege. Step 8: Click Save Step 9: Create an API Client and generate a client secret using the following instructions Note: The client secret will only be displayed once. Make sure you save it to a secure location before dismissing the dialog. Step 10: Go to the Torii Integrations page and click on the Jamf tile in order to connect Step 11: Provide the Jamf Organization URL, Client ID and Client Secert You can always contact our support team for help at support@toriihq.com. Q: Why do I see disabled Jamf Admins as active in Torii? A: Jamf API does not expose admins' access status. Thus all Jamf Admins returning from the API will be shown in Torii as active. Q: Why do I get the error "Request timed out" when connecting Jamf integration? A: Make sure you entered the correct Port. Try to change the port (for example from 8443 to 443) and reconnect the integration. Q: I don't use an application, but I am listed as an app user for it in Torii - with Jamf being the app user source. Why do I appear there? A: This means that Jamf discovered this app installed on your device. Q: Why do I get the error "Invalid Token" when connecting Jamf integration? A: Increasing the Access Token lifetime value to 300 seconds can often clear this issue. Q: What does "Last used date" mean in the context of Jamf for a user?A: The "Last used date" user field represents the latests date any of the user's computers' reported data to Jamf. # Page Title JetBrains Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5190761939227-JetBrains-Integration ## Page Description Setup your JetBrains integration and get all the insights in Torii's dashboard Overview Torii integrates with JetBrains and syncs: ## Details ### How can we help? ### JetBrains Integration Torii integrates with JetBrains and syncs: License typesNote, we do not sync licenses assigned to servers (Assignee type = “SERVER”) and outdated licenses With this integration, you will be able to: Identify users who haven't used JetBrains in a long time Know who should be removed from JetBrains when employees are leaving your company Be better prepared for renewals with our Renewals option #### Actions available from JetBrains You can assign and revoke licenses to/from all of JetBrains’ products. Please make sure you have the following requirements before you connect JetBrains to Torii: 1. Account type: Account with organization administrator privileges 2. User type - Organization administrator 3. You will need to copy the Customer code 4. Enable the API 5. Generate and get the token number (API key) See the full instructions from the JetBrains website #### JetBrains Integration Process To connect JetBrains to Torii, follow these steps: 1. Go to the Integrations page and click on JetBrains. 2. Click on Connect 3. Enter the X-Customer-Code & X-API -Key 4. Click Connect # Page Title Jira Cloud Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5190745800731-Jira-Cloud-Integration ## Page Description Overview Torii integrates with your Jira account and syncs the following attributes: List of users and their roles Usage License type ## Details ### How can we help? ### Jira Cloud Integration Torii integrates with your Jira account and syncs the following attributes: You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. #### Work Management. Note: Integration with "Jira Server" (the self-hosted solution) is not supported. Torii monitors Jira usage data daily. If a Jira user completed at least one of the following actions on a given day: The user will be considered an "Active user." Once connected, Torii will show usage from the last 30 days Note: Users who have set their email address to be hidden can not be synced from Jira. A Jira site usually contains multiple products: #### Connect your Jira Cloud integration Step 1: Log in to your Atlassian account. Make sure you have the following global permission: Browse users and groups. Administer Jira. Step 2: Create an API token from your Atlassian account: Step 3: Get the Jira site URL. It should look like: https://your-domain.atlassian.net Step 4: Go to the Torii Integrations page and click on the Jira Cloud tile in order to connect. Step 5: Provide your Atlassian account email address, API Token and Jira site URL. Q: Will the 'Delete JIRA Cloud User' action in a workflow always delete a JIRA user?A: No. If the user has opened a JIRA ticket in the past (and thus is a 'Reporter' in JIRA), Torii cannot delete them per JIRA's API limitations. Get additional information in: Q: I am trying to connect the Jira integration, but getting an 'Invalid credentials' error. What should I do? A: Please try the following steps: # Page Title New User Training #7: Jordyn Still Has Access to That App?! ## Page URL https://support.toriihq.com/hc/en-us/articles/8489228900763--New-User-Training-7-Jordyn-Still-Has-Access-to-That-App ## Page Description This is video 7 out of 13 in the New User training series. Learn the different types of Users in Torii, where they come from, and how to ## Details ### How can we help? ### New User Training #7: Jordyn Still Has Access to That App?! This is video 7 out of 13 in the New User training series. **Video Update: If you leverage 2 platforms for your User Lifecycle in Torii, a User's status must be updated in BOTH platforms in order for Torii to mark them as a 'Past User'. The video will be updated soon with this correction. #### Questions for Implementation #### Continue Your Training Series The Secret Life of Apps #### Additional Resources Discovering Users Current Users, Past Users, and External Users Defining Current and Past Users Filtering Your Users # Page Title JumpCloud Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5165016099227-JumpCloud-Integration ## Page Description Setup the JumpCloud integration and get all the insights in Torii's dashboard Overview Torii integrates with JumpCloud and syncs the ## Details ### How can we help? ### JumpCloud Integration Torii pulls 2 types of usage events: For Torii to pull usage from JumpCloud, it requires you to have Directory Insights, JumpCloud’s event logging feature. Without this feature, Torii cannot retrieve the required information regarding directory events and events from SaaS applications connected to your JumpCloud account. In addition, you will need to connect the integration with an API key associated with the currently logged-in administrator. #### How do I enable Directory Insights? Directory Insights is included in some JumpCloud package plans. To enable Directory Insights for your account, contact directoryinsights@jumpcloud.com. ##### Will I be able to connect the integration if I don't enable Directory Insights? Yes. If your account doesn't have access to the Directory Insights feature, Torii will sync the user list and 3rd party SaaS application list without usage data. #### Connect JumpCloud integration to Torii To connect JumpCloud to Torii, follow these steps: Once the integration is connected and synced, it will display a green checkbox #### Application Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. Actions: When adding a user If the username includes spaces, those will be replaced with a dot (.) to fulfill the API's requirements # Page Title JumpCloud MDM Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/28668801142043-JumpCloud-MDM-Integration ## Page Description Overview Torii integrates with JumpCloud and has two integrations available: The Jumpcloud integration - which syncs data on Jumpcloud ## Details ### How can we help? ### JumpCloud MDM Integration Torii integrates with JumpCloud and has two integrations available: ##### Accounts & Permissions ##### How do I enable Directory Insights? Directory Insights logs activity in JumpCloud Portals, including admin/user authentications to the Admin and User Portals.It is included in some JumpCloud package plans. To enable Directory Insights for your account, contact directoryinsights@jumpcloud.com. ##### Will I be able to connect the integration if I don't enable Directory Insights? Yes. In this case, you will only get Managed apps in Jumpcloud and not all apps installed on your organization's devices. #### Connect JumpCloud MDM integration to Torii To connect JumpCloud MDM to Torii, follow these steps: Once the integration is connected and synced, it will display a green checkbox Q: Why is Torii is showing an app which is not installed on this user's device? A: The Jumpcloud API provides a list of all devices that are linked to an application, either directly (the application is installed on the device) or indirectly (For example, using that application through API calls). There is no way to differentiate between the two via the API - but in both cases, it means that this app is in use by that user. Q: How is Torii discovering apps on my organization's devices? A: Torii finds installed apps via two main methods: Managed apps and Unmanaged apps. # Page Title Kandji Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/25343034022683-Kandji-Integration ## Page Description Set up the Kandji integration and get all the insights in Torii's dashboard Overview Torii integrates with Kandji and syncs: User ## Details ### How can we help? ### Kandji Integration Set up the Kandji integration and get all the insights in Torii's dashboard Torii integrates with Kandji and syncs: Torii supports multiple Kandji accounts. Additionally, Kandji discovers all installed apps on your company's devices as well as which users have these apps installed. You will also be able to take and automate the following actions: Please note: we only display information on devices that are attributed to users. You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table ##### Accounts & permissions #### Connect the Kandji Integration Q: Are there any desktop apps that Torii does not discover that can be found in Kandji? A: Torii will discover all desktop apps as reported by Kandji with the exception of: Q: Why is Torii presenting more apps discovered via Kandji than I am seeing in Kandji UI A: The Kandji web interface shows only apps in the /applications and /system/applications folders - which is where apps are usually installed in MacOS. However, an application can be run from anywhere: if you download a .app you may save it anywhere and it will usually run. It is even possible that there are apps running that will not appear in the users' Launchpad (usually if they are not in the directories listed above). Via the Kandji integration, Torii can provide information on apps such as described above, which do not normally appear in the Kandji interface. We believe that knowing about these apps can be helpful to discover Shadow IT or unwanted apps installed and running in your organization's computers. Torii provides you this additional insight and provides you this enhanced discovery to make sure you are in full control. Q: I've run the "Lock Kandji user's devices" action. Where can I find the PIN to unlock the user's devices?A: After locking or erasing, the PIN number will be available in the workflow action details. Q: What happens if I run the Kandji actions but the device is offline at the time they ran?A: If a device doesn't have an internet connection, the erase and lock actions will be executed once the connection is re-established. The delete action does not require an internet connection to run, but the Kandji application will only be removed from the device once it has an internet connection. # Page Title Keycloak Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/10701993286171-Keycloak-Integration ## Page Description Overview Torii integrates with Keycloak and syncs: Users, licenses, and apps discovered by signing in through Keycloak. Prerequisites ## Details ### How can we help? ### Keycloak Integration Torii integrates with Keycloak and syncs: Users, licenses, and apps discovered by signing in through Keycloak. To integrate with Torii, you will be required to provide the following: Host name, Port, Realm, Username, Password, and Client ID. Find the instructions below. #### To connect Keycloak to Torii, follow the below steps: #### Update the User Lifecycle settings To ensure you get the user lifecycle information in Torii, define Keycloak as your Identity Provider management system. # Page Title Knowledgeowl Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/6259306573595-Knowledgeowl-Integration ## Page Description Overview Torii integrates with Knowledgeowl and syncs the users: Role, Status, and last used date. Prerequisites Full admin ## Details ### How can we help? ### Knowledgeowl Integration Torii integrates with Knowledgeowl and syncs the users: Role, Status, and last used date. #### Connect Knowledgeowl integration to Torii To connect Knowledgeowl to Torii, follow these steps: # Page Title LastPass Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5191613190043-LastPass-Integration ## Page Description Setup your LastPass integration and get all the insights in Torii's dashboard Overview Torii integrates with LastPass and syncs the ## Details ### How can we help? ### LastPass Integration Torii integrates with LastPass and syncs the user information: role, status, and last used date. For the integration you will need: #### Integration Process #### Application Capabilities and Actions You can always be updated with application information and actions from our Integrations Page >> Integration Capabilitiesbutton >> Integration Capabilities table # Page Title LaunchDarkly Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5191546071451-LaunchDarkly-Integration ## Page Description Setup your LaunchDarkly integration and get all the insights in Torii's dashboard Torii integrates with your LaunchDarkly account and ## Details ### How can we help? ### LaunchDarkly Integration Torii integrates with your LaunchDarkly account and syncs the list of users, their roles, and status Note that Torii can synce multiple LaunchDarkly accounts The LaunchDarkly REST API is available to customers on a Pro or Enterprise plan integration Process #### Connect LaunchDarkly to Torii To connect LaunchDarkly to Torii, follow these steps: # Page Title LawVu Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5727982028955-LawVu-Integration ## Page Description Overview Torii integrates with LawVu and syncs the users' list. Prerequisites Users are authenticated using SAML single sign-on ## Details ### How can we help? ### LawVu Integration Torii integrates with LawVu and syncs the users' list. Users are authenticated using SAML single sign-on Users are provisioned by an Identity Provider using SCIM Contact LawVu to get your Base URL, authentication method, and API token To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, LawVu help center, or their support. #### Integration Process To connect LawVu to Torii, follow these steps: Go to Torii's Integrations page and click the LawVu tile In the Connect LawVu window, enter the Base URL Select the Authentication Method In the Access token field, paste the API token Once the integration is connected and synced, it will display a green checkbox # Page Title LeadIQ Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/27132079859739-LeadIQ-Integration ## Page Description Overview Torii integrates with your LeadIQ account and syncs the following information: User Fields License Types User (Email) ## Details ### How can we help? ### LeadIQ Integration Torii integrates with your LeadIQ account and syncs the following information: Torii supports multiple LeadIQ accounts. You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table ##### Accounts & permissions #### Connect the LeadIQ Integration # Page Title Learn About the IT Admin Role in Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/8425849178523-Learn-About-the-IT-Admin-Role-in-Torii ## Page Description Overview As an IT Admin, you will find Torii a very powerful tool for overseeing and managing the organization's SaaS applications. ## Details ### How can we help? ### Learn About the IT Admin Role in Torii As an IT Admin, you will find Torii a very powerful tool for overseeing and managing the organization's SaaS applications. Torii allows you to manage your organization's SaaS applications. But what does it mean to manage? To learn how to become a robust Torii IT admin with minimum effort, we recommend viewing the below videos and reading the help center articles. # Page Title Learn About the Procurement Role in Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/8408563699099-Learn-About-the-Procurement-Role-in-Torii ## Page Description Overview If you are in charge of your Organization's procurement and contracts, you will find Torii a very powerful tool for overseeing ## Details ### How can we help? ### Learn About the Procurement Role in Torii If you are in charge of your Organization's procurement and contracts, you will find Torii a very powerful tool for overseeing and managing the organization's expenses and contracts. With Torii, you can get a comprehensive view of: To do so, we recommend taking a few minutes to read and watch the following articles & videos to learn how to use Torii to save a lot of time and money Welcome to Torii! (5m) Where Does Torii Get Its Data? (9m) Explorer's Guide to Your SaaS Ecosystem Pt. 1 (10m) Explorer's Guide to Your SaaS Ecosystem Pt. 2 (10m) That One App No One Uses - Recognise and act on Inactive license (5:30m) The Secret Life of Apps - Discover SaaS use through expenses, how to manually import expenses, and what trends Torii tracks! (7m) To Renew or Not to Renew - Learn how Torii can be a supplement to your contract management (6m) # Page Title Leave of Absence Offboarding Alerts ## Page URL https://support.toriihq.com/hc/en-us/articles/4833344141467-Leave-of-Absence-Offboarding-Alerts ## Page Description This was submitted by Brandon at Wpromote! Leave of Absences occurs and need to be managed efficiently. This ensures business continuity ## Details ### How can we help? ### Leave of Absence Offboarding Alerts Leave of Absences occurs and need to be managed efficiently. This ensures business continuity and prevents any loss of data. This example below automatically triggers when an employee is added to a leavers Google Org Unit. Once this occurs an email is sent to their manager to confirm the action. A separate Slack notification also goes out to IT to remind them of this action and also to create a task to remove them from Slack. # Page Title Lever Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/11547732694299-Lever-Integration ## Page Description Overview Torii integrates with your Lever account and syncs the user's data: ID, email, first & last name, role, status, license ## Details ### How can we help? ### Lever Integration Torii integrates with your Lever account and syncs the user's data: ID, email, first & last name, role, status, license status, creation time in-app, and photo. Make sure you have a Lever account and a super admin user or custom role that includes these two permissions: #### Connect Lever Integration #### Integration Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table Q: I got this error "The user trying to authorize the integration has not logged into Lever recently." what can I do? A: We recommend completing the following steps: If you are still experiencing issues, we recommend opening a ticket with the Lever Support team. Q: Does the Lever token expire? A: Yes, Lever has updated the token expiration time to 1 year. After one year, you will need to reauthorize the integration by reconnecting it through Torii. # Page Title License Cost Benchmarks ## Page URL https://support.toriihq.com/hc/en-us/articles/11556671557147-License-Cost-Benchmarks ## Page Description Overview As SaaS expenses increasingly take a larger portion of company budgets, cost savings is a key concern for IT, procurement, and ## Details ### How can we help? ### License Cost Benchmarks As SaaS expenses increasingly take a larger portion of company budgets, cost savings is a key concern for IT, procurement, and finance departments. Torii offers several tools to help with this, including license cost benchmarks. Our license cost benchmarks allow you to compare the price you are paying per license to the prices similar companies pay using anonymized market data. This can be particularly useful at renewal time, as you can use this information to negotiate better terms with vendors and achieve significant savings. ### How to view benchmarks #### How are benchmarks calculated? Torii uses anonymized market data from three sources to provide benchmarks to our customers: For licenses to which we have sufficient data, Torii defines the benchmark range by looking at four quartiles. Each customer license cost is then classified into either: Currently, Torii benchmarks are calculated for Enterprise plans billed annually. # Page Title License opimization workflow ## Page URL https://support.toriihq.com/hc/en-us/articles/24406268924955-License-opimization-workflow ## Page Description This workflow automates license deprovisioning for licenses that are not being used, allowing you to optimize license management and save ## Details ### How can we help? ### License opimization workflow This workflow automates license deprovisioning for licenses that are not being used, allowing you to optimize license management and save costs. The high level process is: #### Workflow Overview #### How to Configure the Workflow 1. Click the "New workflow" button and choose "From scratch" from the dropdown menu. 2. Select the License not in use trigger and click "Next". The new workflow will be created. 3. Configure the trigger. Set the inactivity period to trigger the workflow after 90 days of non-usage. Select the specific license. 4. The process of unassigning the license will be different for different employees. Let's create different automation paths accordingly. Add the "If/Else branch" action. 5. Click the "Add branch" button in the action configuration panel. 7. We will first check if the employee who stopped using the license is a C-level employee. Configure the filter based on the HRMS data (here the title in Hibob). 8. We will then check if the employee is a manager. To do that, add another branch and configure the filter. 9. Let's add actions under each branch. In case of C-Level employees we won't reclaim the license and will just update the IT team. Add Send Slack notification action under the C-Level branch. Configure the action. Select recipients (users or channels) and add a message. 10. Add Request approval action under the Managers branch. In the case of managers, we will request their approval to reclaim the license. You can send the approval request either via email or Slack. Let's choose to send it via Slack. You can then refine the text of the approval request in the 'Message text' field. The user will get a Slack message with 2 buttons (Approve and Decline). You can edit the button labels. This is how the Slack message will look. 11. Note that the "Request approval" action includes two pre-built branches for the "Request approved" and "Request declined" cases. Actions added under each branch will execute after the user clicks "Approve" or "Decline" in the Slack message. Add the Unassign Office 365 license action under the "Request approved" branch. Configure the action. Choose the license type you wish to unassign. Ensure it aligns with the same license selected in the trigger. 12.Add the Send Slack notification action under the 'Request declined' branch. The message will inform the IT team that the user has asked to keep the license. Use variables (personalization tokens) to add details about the user and the license. 13. Add the Unassign Office 365 license action under the "None met" branch. Select the license as you did in the previous branch. This action will run if the employee who stopped using the license is neither a C-level nor a manager. In this case, you will immediately remove their license. #### Summary - What to Expect Once you activate the workflow: 1. You'll be prompted to decide whether to apply the workflow to users who haven't utilized their Office licenses for 90 days or more. If you choose "Yes," it will execute for all users shown in the preview. Opting for "No" means it will only be applied to users whose usage will exceed 90 days in the future. 2. When activated, Torii will continually monitor the usage of assigned Office 365 licenses. If a user hasn't utilized their license for 90 consecutive days, it will be automatically unassigned, except for managers or C-level executives. 3. Managers will need to confirm before their license is removed to ensure their consent. 4. Licenses for C-level employees will be retained, and IT will receive a Slack notification for transparency purposes. # Page Title Licenses ## Page URL https://support.toriihq.com/hc/en-us/articles/35268051764123-Licenses ## Page Description The Licenses section is where licensing information sourced from direct integrations is displayed, enabling Torii admins to understand ## Details ### How can we help? The Licenses section is where licensing information sourced from direct integrations is displayed, enabling Torii admins to understand the usage scenario and pinpoint opportunities to streamline allocation. #### Licenses: Current Tab The Current tab presents a list of your integrated applications and the basic data for each: license counts, costs and statuses, expandable (by clicking anywhere in a row) to display a detailed list of license types: Each line details the license type's contribution to the app total count, allowing a Torii admin to adjust that type's subtotal and price by clicking the blue pencil icons that appear on hover: For more information, see Enter Total Licenses , Adding License Costs and License Cost Benchmarks. Clicking the blue number by "Inactive" pops up a window that lists the individual licenses of the type and their related data for each user, including the reason Torii considers them inactive. Scroll to the right to (on hover) reveal a "Take Action" button for each license which will allow a Torii admin to run a removal action from the set available to the integration. #### Licenses: Recommendations Tab The Recommendations tab is where you will find actionable suggestions for optimizing license usage towards savings on SaaS spend. For detailed information on this section, see Recommendations. #### Licenses: Trend Tab The Trend tab presents an activity-over-time graph that can be used to note when specific license types are abandoned and usage patterns for those in use. #### Licenses: Chargeback Tab The chargeback tab can help you see which parts of your organization drive costs, laying out which departments are responsible for specific SaaS expenses. Setting up chargebacks can help with budgeting, planning, and forecasting. For more information, see Chargeback Report. # Page Title Linear Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/35609948618523-Linear-Integration ## Page Description Overview Torii integrates with your Linear account and syncs the following data: User Fields License Types Email Linear Status ## Details ### How can we help? ### Linear Integration Torii integrates with your Linear account and syncs the following data: #### How to Connect the Integration For any further questions, please contact Torii Support. # Page Title Litmos Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/7473138027035-Litmos-Integration ## Page Description Set up the Litmos integration and get all the insights in Torii's dashboard Overview Torii integrates with Litmos and syncs: ## Details ### How can we help? ### Litmos Integration Torii integrates with Litmos and syncs: To connect Litmos integration to Torii, you are required to get the account owner's API Key. #### Connect Litmos integration to Torii To connect Litmos to Torii, follow the below steps: # Page Title LogicMonitor Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/6325297326619-LogicMonitor-Integration ## Page Description Setup your LogicMonitor integration and get the insights in Torii's dashboard Overview Torii integrates with your LogicMonitor account ## Details ### How can we help? ### LogicMonitor Integration Torii integrates with your LogicMonitor account and syncs the list of users, statuses, emails & last used date. #### Connect LogicMonitor integration to Torii From the Integrations page select the LogicMonitor tile In the connect LogicMonitor window enter the Account name.Log in to your account and copy the account name only (https://ACCOUNTNAME.logicmonitor.com/santaba/rest) # Page Title Logz.io Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5191405363611-Logz-io-Integration ## Page Description Setup your Logz.io integration and get all the insights in Torii's dashboard Torii integrates with your Logz.io account and syncs the ## Details ### How can we help? ### Logz.io Integration Torii integrates with your Logz.io account and syncs the list of users. You can always contact our support team for help at support@toriihq.com. # Page Title Looker Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5167288060955-Looker-Integration ## Page Description Set up Looker integration and get all the insights in Torii's dashboard Overview Torii integrates with your Looker account and syncs: ## Details ### How can we help? ### Looker Integration Torii integrates with your Looker account and syncs: Users: list, roles, status, last login dates Licenses - Viewer, Standard, and DeveloperClick here to see how Torii maps Looker roles to licenses. Note that Torii can support multiple accounts To connect Torii to Looker, you will be required to get the following from Looker: API URL - Get your API URL using the Admin settings page. Client ID & Client Secret - Create API3 credentials on the Users page in the Admin section of your Looker instance. If you’re not a Looker admin, ask your Looker admin to create the API3 credentials for you. The API3 credentials that you generated include both. API3 credentials are always bound to a Looker user account. API requests execute “as” the user associated with the API3 credentials. Calls to the API will only return data that the user can see and modify only what the user can modify. #### Connect Looker integration to Torii. Once the integration is connected and synced, it will display a green checkbox. ##### How does Torii map Looker roles to licenses? #### Integration Capabilities You can constantly be updated with application information and available actions for Looker from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table # Page Title Lucid Enterprise Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/38816796890779-Lucid-Enterprise-Integration ## Page Description OverviewTorii integrates with Lucid and syncs: User Fields License Types Email LucidSuite Status Torii does not support syncing ## Details ### How can we help? ### Lucid Enterprise Integration Torii integrates with Lucid and syncs: #### How to Generate the Required Values #### How to Connect the Integration Choose permissions. #### Supported Actions For any further questions, please contact Torii Support. # Page Title Lucidchart Enterprise Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5191458507803-Lucidchart-Enterprise-Integration ## Page Description Overview Torii integrates with Lucidchart and syncs the users: Roles, Statuses, and licenses. With Torii, you can perform the following ## Details ### How can we help? ### Lucidchart Enterprise Integration Torii integrates with Lucidchart and syncs the users: Roles, Statuses, and licenses. With Torii, you can perform the following actions in Lucidchart: To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Lucidchart help center, or their support. Connect Lucidchart integration to Torii To connect Lucidchart to Torii, follow these steps: Q: After I run the "Deactivate Lucidchart user" action, I can still see the user as active in my Lucid dashboard. Why is that? A: Torii returns only uses with licenses from the Lucidchart integration. The "Deactivate Lucidchart user" action removes the Lucidchart license from the selected user, and as such the user won't return from the integration anymore. They are still an active Lucid user, though without a license, which is why you can still see them in the Lucid dashboard. # Page Title Lucidscale Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/6567501019931-Lucidscale-Integration ## Page Description Overview Torii integrates with Lucidscale and syncs the users: Roles, Statuses, and licenses. Prerequisites Lucid admin user ## Details ### How can we help? ### Lucidscale Integration Torii integrates with Lucidscale and syncs the users: Roles, Statuses, and licenses. To make sure SCIM is set up correctly before integrating with Torii, please check with your IT team, Lucidscale help center, or their support. Connect Lucidscale integration to Torii To connect Lucidscale to Torii, follow these steps: Once the integration is connected and synced, it will display a green checkbox. # Page Title Lucidspark Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/6568162039451-Lucidspark-Integration ## Page Description Overview Torii integrates with Lucidspark and syncs the users: Role, Status, and License. Prerequisites Lucid admin user Users ## Details ### How can we help? ### Lucidspark Integration Torii integrates with Lucidspark and syncs the users: Role, Status, and License. To make sure SCIM is set up correctly before integrating with Torii, please check with your IT team, Lucidspark help center, or their support. Connect Lucidspark integration to Torii To connect Lucidspark to Torii, follow these steps: # Page Title Manage Users and Licenses Manually ## Page URL https://support.toriihq.com/hc/en-us/articles/12256710253211-Manage-Users-and-Licenses-Manually ## Page Description Overview Keeping your app user lists updated is foundational to effective SaaS management. Here’s why: One Source of Truth: Have a ## Details ### How can we help? ### Manage Users and Licenses Manually Keeping your app user lists updated is foundational to effective SaaS management. Here’s why: Torii's automation-first approach allows for the automatic fetching of users and licenses through direct integrations. Unfortunately, this isn't always possible. Sometimes, third-party APIs either don't provide complete information or are restricted. In such cases, Torii offers the flexibility to add users and their licenses via custom integration or manual file import, ensuring your user data is always up-to-date. #### When to manage users and licenses manually #### How to manage users for non-integrated apps Importing users to Torii is an easy and intuitive process. Permission scope required to import users: Applications Take Action ##### Supported File Types We support CSV files with column headers listing active users. There's no need for a specific template; whether it's an exported user report or your own custom file, we've got you covered. For popular apps, we've created custom parsers that align with their standard exported user lists. So, if you use a native user export, Torii will automatically parse it, saving you the hassle of manual column mapping. Available custom parsers are: Gong, Figma, Whimsical, Loom, Airtable and Hex. ##### Supported Columns for Import ##### First-Time Import ##### Regular Update Import When you import a user list to an app for the second time or more, Torii will perform a full sync: #### How to adjust licenses for integrated apps Adjusting integration licenses in Torii is an easy and intuitive process, and very similar to "Import users" described above. A few things to note before you start ##### First time license adjustment ##### Regular license adjustment When you import a user licenses list to an app for the second time or more, Torii will update the licenses and last used dates according to the data in your file. ##### Important Notes ##### Recommended Follow-Up Actions Once the import is complete, head over to the application's "Overview" tab to check out the licenses breakdown. You'll quickly spot areas where you could save money, whether it's licenses assigned to past users or those sitting unused. Learn more about gaining cost saving from unused licenses. Additional recommended actions: ##### Q: What if the file has multiple columns for licenses? A: If your file has licenses split across multiple columns, you can create a single "Licenses" column that consolidates all user licenses separated by commas. Use Excel functions to merge the columns, then import the combined column into Torii. ##### Q: Can I update license data for users from the integration? A: Not currently. Imported users reside in a different account, so license data from the integration cannot be overwritten. ##### Q: What if I only want to add users? A: Use the same flow and select "Uploaded file only contains user additions or updates" in step 2. ##### Q: Can I mark manually uploaded users as removed from the app? A: Yes. If you want to offboard those users from this app as part of a complete employee offboarding, go to their user page and click "Start offboarding" or manually run an offboarding workflow. If you only want to remove them from a specific app, import a new file that excludes their names. They will be automatically marked as removed. ##### Q: Can I permanently delete imported users? A: Yes, you can delete all imported users if needed using the "Delete all imported users" option. ##### Q: Can I add users to an integrated account? A: No. Adding users is only available for manual accounts. ##### Q: What if I already imported users before this feature was released and they were created in a manual account? A: This is easy to fix by following these steps: # Page Title Manage "Zoom Licensed" (Pro) Licenses ## Page URL https://support.toriihq.com/hc/en-us/articles/4833260814363-Manage-Zoom-Licensed-Pro-Licenses ## Page Description It is important to be alerted when the amount of un-utilized licenses reaches a certain level so you can take action before it reaches a ## Details ### How can we help? ### Manage "Zoom Licensed" (Pro) Licenses It is important to be alerted when the amount of un-utilized licenses reaches a certain level so you can take action before it reaches a critical level. This is more so true for licenses with a monthly cost attached to them. This example monitors the amount of Unassigned Zoom Licensed licenses. When the limit is reached an email will trigger to the IT team that manages access and licenses for Zoom. # Page Title Managing AI Settings ## Page URL https://support.toriihq.com/hc/en-us/articles/38227217845531-Managing-AI-Settings ## Page Description The AI Settings page in Torii allows you to control which AI-powered features are active in your environment. Each feature can be enabled ## Details ### How can we help? ### Managing AI Settings The AI Settings page in Torii allows you to control which AI-powered features are active in your environment. Each feature can be enabled or disabled independently, giving you flexibility over how AI is used across your organization. #### Accessing AI Settings To access AI Settings: #### Available AI Features From this screen, you can enable or disable the following features: Each feature includes a toggle switch to turn it on or off at any time. #### Providing Your Own OpenAI API Key Torii allows you to provide your own OpenAI API key for enhanced flexibility and performance. ##### How to provide your API key: How to obtain your OpenAI API key:Log in at https://platform.openai.com/api-keysClick Create new secret key. Choose Service account, give your key a name, and optionally select a project.Copy the key and paste it into Torii. Torii stores it securely and it cannot be accessed by any user. ##### What features use your custom OpenAI key: When configured, your API key will be used in the following features: It will not be used for Eko or Custom App Details ##### Benefits of using your own key: # Page Title Managing Auto-Renewal Contracts ## Page URL https://support.toriihq.com/hc/en-us/articles/20689856427291-Managing-Auto-Renewal-Contracts ## Page Description Overview In the dynamic landscape of contractual agreements, understanding and effectively managing auto-renewing contracts is paramount. ## Details ### How can we help? ### Managing Auto-Renewal Contracts In the dynamic landscape of contractual agreements, understanding and effectively managing auto-renewing contracts is paramount. As organizations navigate a myriad of subscriptions and services, the potential for overlooked renewals and unexpected financial commitments is large. This guide will walk you through the process of documenting auto-renewal terms in your contracts. Additionally, we'll explore how to configure renewal reminders for auto-renewing contracts, ensuring you have time to prepare and make informed decisions well in advance of the cancellation deadline. #### How to add the auto-renewal terms to your contract The auto-renewal terms can be captured using 3 contract fields placed under the Auto-Renewal group: The first 2 fields can be either entered manually or be automatically parsed with Torii magic auto-fill. The “Cancellation Deadline” is a calculated field derived from the contract end date and the cancellation notice period. Therefor it cannot be manually edited. #### How to identify a contract with an auto-renewal clause In the Renewal Calendar, an Auto-Renewal icon helps identify at a glance auto-renewal contracts. In addition, the Auto-Renewal field can be used as a filter criteria to quickly find all contracts with an auto-renewal clause. #### How to create renewal notifications for auto-renewing contracts When configuring renewal notifications we recommend creating 2 different notifications - one for contracts which are not auto-renewing and another one for auto-renewing contracts. Here are step by step instructions. ##### What if I already have auto-renewal custom fields? If you already use your own custom fields to document auto-renewals, we strongly recommend you migrate and use Torii built in fields. Read more about why to migrate and a step by step guide in this article. # Page Title Managing Contracts In Multiple Currencies ## Page URL https://support.toriihq.com/hc/en-us/articles/13240433662107-Managing-Contracts-In-Multiple-Currencies ## Page Description Overview Managing contracts can be challenging when dealing with vendors from different countries, especially if the contracts involve ## Details ### How can we help? ### Managing Contracts In Multiple Currencies Managing contracts can be challenging when dealing with vendors from different countries, especially if the contracts involve different currencies. On the one hand, you may need to consolidate the contracts into a single currency for accounting purposes. On the other hand, it's important to retain the original currency to facilitate communication with your vendors.This article will guide you on managing contracts with multiple currencies in Torii. When adding a new contract to Torii, the currency is displayed on the Contracts tab. The currency displayed is pulled from the selected currency configured in Torii's Settings page. However, what about contracts that were signed with a different currency?How can you see them? How does Torii read them? #### Working with different contract currencies Torii enables you not to lose sight of the original contract you signed, along with calculating it with the currency your company work with.When uploading a contract, go to the Contract currency dropdown and select the currency used when signing the contract. In the Contract value field, enter the contract cost as it appears in the contract with the original currency. Once Torii recognizes the different currency, it will display any contract currency field in the "Contract value" column in two different numbers Note that the converted cost will be the one displayed on the application's main page. #### What is the conversion rate? The conversion rate is calculated according to the "start date" you entered when uploading the contract.If there is no start date, Torii will use the contract creation date. If the start date of the contract is in the future, Torii will use the contract creation date until the start date arrives and then update it according to the start date. Please note that whenever editing a contract with a different currency, make sure to enter the ORIGINAL cost in the "Contract Value" field. Torii will make the conversion for you. #### Trigger a "contract meets criteria" workflow Filtering currency fields in the workflow trigger will be applied to converted values. #### Contract currency as personalization tokens Using currency fields as personalization tokens will result in showing the converted value and original value (in parenthesis) in the message. #### Manage contracts via CSV uploads. #### Manage contracts via the public API # Page Title Managing Monthly Renewals / Contracts ## Page URL https://support.toriihq.com/hc/en-us/articles/4833988743579-Managing-Monthly-Renewals-Contracts ## Page Description Automatically update monthly renewal dates using workflows Torii can help you keep track of your monthly renewals by keeping the next ## Details ### How can we help? ### Managing Monthly Renewals / Contracts Torii can help you keep track of your monthly renewals by keeping the next renewal date updated automatically. #### Step 1 - Create Contracts With Monthly Navigate to the application you'd like to add a monthly renewal date Go to the Contracts tab and click the Plus sign to add a new contract Update the contract with the details you'd like to track In the Payment terms field, select Monthly In the End date field, type the date the upcoming monthly renewal date #### Step 2 - Create a Workflow to Automatically Update the Renewal Date Create a new workflow Select "Contract Meets Criteria" as the trigger type In the criteria setup, add these two filters: End date is exactly 0 days from now and Payment term is Monthly Add action - Update contract field to update the End field to Plus 1 month Give the workflow a meaningful name and activate it # Page Title Managing Multiple App Contacts ## Page URL https://support.toriihq.com/hc/en-us/articles/13224225470107-Managing-Multiple-App-Contacts ## Page Description On a single application page, you will find the APP CONTACTS section. Here you can view and add different contact types to your app ## Details ### How can we help? ### Managing Multiple App Contacts On a single application page, you will find the APP CONTACTS section. Here you can view and add different contact types to your app information, like the App, security, contract, and budget owners. The widget will display all the application's contacts in one place, helping you to reach out to any of them for any question easily.All contacts can be edited except for the "Contract owners" field, pulled from the contact information. You can see the App contacts from any specific application page.Under the Overview tab, scroll down to APP CONTACTS. The APP CONTACTS section displays all contacts from type "Employee" as it appears and configured on the "Settings" page. #### How to add a new contact? # Page Title Manually Run Workflows ## Page URL https://support.toriihq.com/hc/en-us/articles/4702411787163-Manually-Run-Workflows ## Page Description Select a workflow and trigger it immediately Torii workflows are automatically triggered when their trigger matches the configured ## Details ### How can we help? ### Manually Run Workflows Torii workflows are automatically triggered when their trigger matches the configured criteria. You can read more on how workflows are automatically triggered here. In some cases, you might want to run a workflow manually. Here are some scenarios: Testing a workflow Asking a user to fill in an app security questionnaire again Running a specific onboarding workflow on an employee Running a license management workflow on employees who missed the trigger window #### How to manually run a workflow In order to manually run a workflow, click the Run manually button ( icon) which can be found in the following places. In the Workflows table, while hovering over a specific workflow row When editing a workflow When completing a workflow #### Providing trigger inputs After clicking Run manually, a popup dialog will appear, asking to fill in the required details to trigger the workflow. Since the workflow is being manually triggered, it might need additional inputs in order to execute on the right target entities. The input field(s) depends on the workflow trigger type. For example, when running a workflow with a User meets criteria trigger, the following dialog will show up, asking you to select the user for the workflow execution. Click Run now to trigger the workflow. #### View workflow audit log Once the workflow has run, you can view its audit log in one of two ways: Click View Logs in the dialog that appears after initiating the manual workflow run. Or, in the Workflows table, click the number in the "Triggered" column or the status in the "Last Status" column. ##### Why is the "Run manually" button sometimes disabled? You can only run a workflow that is valid, which means that all workflow trigger conditions and actions have been configured. In the workflows table, an invalid workflow is marked with a red indicator: When editing a workflow, an invalid workflow action configuration is marked with a blue indicator: # Page Title Marketo integration ## Page URL https://support.toriihq.com/hc/en-us/articles/8923028170139-Marketo-integration ## Page Description Overview Torii integrates with Marketo and syncs the user's names, emails, statuses, roles, and last visit time. Prerequisites Have ## Details ### How can we help? ### Marketo integration Torii integrates with Marketo and syncs the user's names, emails, statuses, roles, and last visit time. #### Integration Process To connect Marketo to Torii, follow these steps: #### Integration Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. #### Troubleshooting In case you receive the following error: "Sync disabled - Insufficient permissions" Follow the below instructions: Authentication is successful, but the user doesn’t have sufficient permission to call this API.Additional permissions may need to be assigned to the user role, or Allowlist for IP-Based API Access may be enabled. # Page Title Media Shuttle Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5192149954971-Media-Shuttle-Integration ## Page Description Setup the Media Shuttle integration and get all the insights in Torii's dashboard Torii integrates with Signiant's Media Shuttle and ## Details ### How can we help? ### Media Shuttle Integration ### Setup the Media Shuttle integration and get all the insights in Torii's dashboard Step 1: Log in to your IT Administration console. Step 3: Click Developer to view your API key. Step 4: Click Copy to Clipboard to copy your API key to the clipboard. Step 5: Go to General tab and copy the Portal URL. Example: subdomain.mediashuttle.com - Make sure that: Step 6: Go to Torii Integrations page and click on the Media Shuttle tile in order to connect. Step 7: Provide the Portal URL and API Key. You can always contact our support team for help at support@toriihq.com. # Page Title Microsoft Entra ID (formerly Azure Active Directory) Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5164909707547-Microsoft-Entra-ID-formerly-Azure-Active-Directory-Integration ## Page Description Setup your Microsoft Entra ID integration and get all the insights in Torii's dashboard Overview Torii integrates with Microsoft Entra ID ## Details ### How can we help? ### Microsoft Entra ID (formerly Azure Active Directory) Integration Torii integrates with Microsoft Entra ID and syncs: 3rd party application list 3rd party permissions ##### Accounts & permissions You are required to have an Administrator role For Torii to pull sign-in info from Microsoft Entra ID, it requires you to have a Premium 1 license (P1). Without this license, Torii will not be able to retrieve the SaaS applications connected to your Microsoft Entra ID information The user who connects Microsoft Entra ID to Torii should have a P1 license. That should cost around $6/month UserAuthenticationMethod.ReadWrite.All user_impersonation (for PowerShell actions) #### Prerequisites Technical instructions Create a new Service Account in Microsoft Entra ID Go to Users to assign Administrative Roles to the service Select Assigned roles Click on Add assignments to add the roles Read permissions - To connect Torii with minimum Read permissions, Microsoft Entra ID requires the following roles: Application Administrator or Global reader Get usage permissions - to allow Torii to get and show usage, you will have to enable one of the following roles: Security Administrator Security Operator Security Reader Read and take actions permissions including PowerShell actions - To provide Torii full permissions that will enable you to have a comprehensive user and usage view, select the Global administrator role. There is no way to choose less privileged permissions in this case due to Microsoft limitations. #### Connect Microsoft Entra ID integration to Torii Go to the Integrations page and select the Microsoft Entra ID tile Connect to Microsoft Entra ID In Connect Microsoft Entra ID select the permission type (Read or Read and Take action) #### Purchasing Microsoft Entra ID P1 license Sign in to the Microsoft consumer portal (https://portal.office.com/AdminPortal) and navigate to Billing -> Purchase services. Look for the "Microsoft Entra ID Premium P1" or “Azure Active Directory Premium P1” license. Purchase one license, and assign it to the relevant user (I can assume that would be you). Please notice that you only need to purchase one license, which should be assigned to the user connecting Entra ID to Torii. Q: Which Microsoft Entra ID groups will be shown in Torii? A: The "Microsoft 365" and "Security" groups are the only group types that will be shown due to limitation with the Microsoft Graph API. Q: How can I update non-standard or advanced user fields via actions? A: Use the Custom Attributes field in the action to pass additional key–value pairs (strings, arrays, JSON objects, etc.) to the target app. See the detailed setup guide: Custom Attributes configuration . # Page Title Microsoft Intune Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/26871834630171-Microsoft-Intune-Integration ## Page Description Set up the Microsoft Intune integration and get all the insights in Torii's dashboard. Overview Torii integrates with Microsoft Intune to ## Details ### How can we help? ### Microsoft Intune Integration Set up the Microsoft Intune integration and get all the insights in Torii's dashboard. Torii integrates with Microsoft Intune to provide comprehensive insights by syncing the users' lists, licenses, and installed applications. It supports multiple Microsoft Intune accounts, allowing your organization to manage and monitor device applications and their users efficiently. ##### Accounts & Permissions #### Connect Microsoft Intune Integration Follow these steps to connect Microsoft Intune to Torii: The data for Intune discovered apps is updated with a 7-day delay due to limitations of Microsoft Intune. # Page Title Microsoft Teams actions : Selecting Teams ## Page URL https://support.toriihq.com/hc/en-us/articles/20565893627547-Microsoft-Teams-actions-Selecting-Teams ## Page Description This article provides guidance for actions that require selecting teams within Microsoft Teams: Adding Microsoft Teams users to teams ## Details ### How can we help? ### Microsoft Teams actions : Selecting Teams This article provides guidance for actions that require selecting teams within Microsoft Teams: These actions allow selecting a team from a prepopulated list or manually entering the Team ID. The instructions below will guide you through this process. Selecting Teams from the List To add or remove users from multiple teams, select teams sequentially from the teams list. Manually Entering Team IDs If you have trouble locating the desired team or encounter delays while loading the teams list, you have the option to manually enter the Team ID. Simply select the 'Enter team ID' radio button and paste the ID into the text field below. How to Find Your Team ID in Microsoft Teams 3. Choose “Get link to team”. A popup with the link will appear, and the value after 'groupID' in the link is the Team ID. Example Team ID format: 0efcc002-6001-4a21-991b-8ba10bac0612 4. Copy the Team ID from the link to your clipboard. To add or remove users from multiple teams, paste the Team IDs, separated by commas. You can add 14 teams maximum. # Page Title Microsoft Teams Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/8800543593371-Microsoft-Teams-Integration ## Page Description Setup your Microsoft Teams integration and get all the insights in Torii's dashboard Overview Torii integrates with Microsoft Teams and ## Details ### How can we help? ### Microsoft Teams Integration Note that Torii's actions and capabilities might be updated, therefore the best way to always up-to-date is from our "Applications Capabilities" table. #### Connect Microsoft Teams integration to Torii #### Application Capabilities and Actions You can always be updated with application information and actions from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. Q: How can I update non-standard or advanced user fields via actions? A: Use the Custom Attributes field in the action to pass additional key–value pairs (strings, arrays, JSON objects, etc.) to the target app. See the detailed setup guide: Custom Attributes configuration . # Page Title Mimecast Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5191704932507-Mimecast-Integration ## Page Description Setup the Mimecast integration and get all the insights in Torii's dashboard Overview Torii integrates with Mimecast and syncs: Users ## Details ### How can we help? ### Mimecast Integration Torii integrates with Mimecast and syncs: Note: Torii considers all users and licenses to be active because the Mimecast API does not provide status information for users. With this integration, you will be able to: The process: Create Client ID & Secret | Connect Mimecast to Torii ##### Integration prerequisites - Create Client ID & Client Secret When connecting the integration, you will need to provide your Mimecast Client ID and Client Secret from the Admin Console. For additional guidance, visit: Managing API Applications – Mimecast Support #### Connect Mimecast integration to Torii # Page Title Miro Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5191973909659-Miro-Integration ## Page Description Setup the Miro integration and get all the insights in Torii's dashboard Organization-level integration is available only to customers ## Details ### How can we help? ### Miro Integration Torii integrates with your Miro account and syncs the following attributes: Furthermore, you can automate Miro onboarding and off-boarding using Torii workflows. Torii collects data about the entire organization, including all teams. Torii is able to retrieve usage data and Miro's most accurate license data, including Full Member, Free Member, and Guest license types. Please note - this integration requires an Enterprise Plan with Miro to connect. ### Connect Miro integration to Torii #### Connect Team level account type #### Connect Organization level account type Note that the organization level required an Enterprise plan with Miro. For organization-level integration, a single connection is enough. Torii can pull all data about the entire organization using a single connection, including all teams. Organization-level access requires the following permissions: organizations:read organizations:teams:read organizations:teams:write To enable fetching usage data, the user connecting the integration must be a "Company Admin" within Miro. #### Integration Information and actions You can always be updated with integration information and actions from our Integrations Page >> Integration Capabilities button (1) >> Integration Capabilities table (2). Note the following: Team level - If a removed user owns any boards or projects, they also will be removed.After deleting the "Team admin," you will be able to restore the deleted items from the team's trash. Organization level - the boards are automatically assigned to the team's admin and are not removed from Miro. Action Configuration # Page Title Mixpanel Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5728714083483-Mixpanel-Integration ## Page Description Overview Torii integrates with Mixpanel and syncs the users' lists and statuses. Prerequisites You need an active Enterprise ## Details ### How can we help? ### Mixpanel Integration Torii integrates with Mixpanel and syncs the users' lists and statuses. You need an active Enterprise plan subscription with Mixpanel & organization admin Users are authenticated using SAML single sign-on Users are provisioned by an Identity Provider using SCIM To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Mixpanel's help center, or their support. #### Integration Process To connect Mixpanel to Torii, follow these steps: Go to Torii's Integrations page and click the Mixpanel tile In the Connect Mixpanel window, note that Torii already identified and populated the Base URL and Authentication Method fields In the Access token field, paste the access token Once the integration is connected and synced, it will display a green checkbox # Page Title Monday Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5192035045403-Monday-Integration ## Page Description Setup your Monday integration and get all the insights in Torii's dashboard Overview Torii integrates with Monday and syncs the users' ## Details ### How can we help? ### Monday Integration #### Connect Monday integration to Torii To connect Monday to Torii, follow these steps: #### Integration Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title MongoDB Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/36168350036251-MongoDB-Integration ## Page Description Overview Torii integrates with MongoDB and syncs: User Fields License Types Email MongoDB Status Role Torii supports ## Details ### How can we help? ### MongoDB Integration Torii integrates with MongoDB and syncs: ##### Accounts & Permissions #### How to Generate the Required Values 1. Log in to your MongoDB Atlas account.2. Go to Access Manager > Organization Access3. Go to Organization > Access Manager > Applications tab. 4. Go to the left menu under Organization > Settings, and copy your Organization ID. #### How to Connect the Integration Go to the Integrations page in Torii. Select the MongoDB tile. Enter the following values: Click Connect to finalize the integration. Once the integration is connected and synced, a green checkbox will appear next to the integration. Q: What if the integration doesn't connect successfully? A: Please ensure the following: The API key was created with the correct Organization Read Only permission. The private key is entered correctly. The IP Access List under API Key Details allows external connections. You can either allow access from all IPs by keep the list empty, or specifically allow Torii's IP addresses. For the list of IPs used by Torii, refer to this article: What are the IP Addresses Used By Torii? For any further questions, please contact Torii Support. # Page Title Monitor third-party apps and block access to sensitive data ## Page URL https://support.toriihq.com/hc/en-us/articles/27307369999387-Monitor-third-party-apps-and-block-access-to-sensitive-data ## Page Description Overview With the abundance of SaaS apps available and employees having unrestricted access to numerous tools, organizations face ## Details ### How can we help? ### Monitor third-party apps and block access to sensitive data With the abundance of SaaS apps available and employees having unrestricted access to numerous tools, organizations face increased security risks. The Torii SaaS management platform addresses these challenges by helping you stay on top of shadow IT and minimize organizational security risks: Complete Visibility: Torii provides comprehensive visibility into third-party apps accessed via organizational Google, Azure AD, and Slack accounts. You can also configure notifications for newly discovered apps and the potential security risks associated with these connections. Proactive Security Measures: Torii allows you to proactively revoke employee permissions for unsanctioned apps linked through Google, thereby safeguarding sensitive organizational data. #### Monitoring third-party party app connections The Security page provides a detailed summary of all apps connected via Google, Azure AD, and Slack accounts. Here, you can see how many users have connected to each app, assess the potential security risk, and review the specific permissions required by each app. #### Blocking Access to Sensitive Data with Torii Available for customers on the Enterprise plan Torii provides you with the capability to manage and secure data access for applications connected to users' Google Workspace accounts. This feature is similar to what an Admin can view in the Google Workspace Admin console, specifically under Users -> User -> Security -> Connected applications. ##### Understanding Google Workspace App Access Management Google Workspace allows you to "temporarily remove an app’s access to data" through the Google Workspace Admin console. By clicking the "Remove" button, an Admin can revoke an app's access to a user's data. However, this action is temporary, and Google notes that if a user has the necessary permissions, they can grant access to the app again by signing in, which restores the data access. ##### How Torii's "Block Access" Feature Works Torii's "Block access" feature extends the functionality of Google's "Remove" button. While Google's removal is temporary, Torii continuously monitors for any re-granting of access to the app and automatically revokes it within a few minutes. This ensures a persistent block on the app's access to the user's data. When you block access in Torii, it effectively revokes the permissions granted to the app to access the user’s Google data. ##### Example Use Case Consider a user who has given the Calendly app access to their Google Calendar. If you mark the Calendly app as "Closed" in Torii and enable the "Block access" feature, Torii will revoke Calendly's access to the user's calendar. If the user attempts to reconnect Calendly, Torii will detect this and revoke access again, maintaining a secure environment. ##### End-User Experience of Being Blocked The end-user experience of being blocked can vary depending on the app. In some cases, users might not notice the block at all. In other instances, users could be logged out of the app or lose access to specific features. For more detailed information on the impact of removing app access, you can refer to Google's documentation on the "Remove App" feature and contact Google for further assistance. ##### How to See Which Apps Were Blocked To see which apps were blocked: Please note that only apps with at least one user who connected via Google and granted permissions will appear in the list. Apps that are closed and were never connected via Google, or those that were connected but did not receive permissions, will not be listed under Google in the Security tab. ##### Configuring the "Block Access" Feature in Torii To configure the "Block access" feature: Once enabled, Torii will automatically revoke permissions for all users who have connected to closed apps via Google. This ensures that sensitive data remains secure and inaccessible to unauthorized applications Here are Torii's recommendations for staying on top of shadow IT and minimizing security risks: # Page Title Monitoring SaaS Expenses in Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/27029413893275-Monitoring-SaaS-Expenses-in-Torii ## Page Description Overview Monitoring SaaS expenses is crucial for effective SaaS management. Torii helps you: Differentiate between paid and free apps. ## Details ### How can we help? ### Monitoring SaaS Expenses in Torii Monitoring SaaS expenses is crucial for effective SaaS management. Torii helps you: Finance teams can quickly identify high-spending tools, find their owners, and access detailed information about the tools, including users, owners, contract terms, compliance, and security details. Customized notifications for any new app with spend are also available. Additionally, Torii allows monitoring month-over-month spend per app. #### How to Get Expenses into Torii There are three ways to import expenses into Torii: If you use multiple finance systems (e.g., Expensify and Netsuite), it's recommended to connect the main one, as secondary systems are usually integrated with it. In cases where transaction details specifying the application name are not fetched into the main system, connecting multiple systems may be necessary. Torii's deduplication mechanism ensures each transaction is accounted for only once. #### How Transactions Are Matched to Applications Torii uses a sophisticated matching algorithm to link transactions (vendor bills, credit card charges, etc.) to apps, based on description and memo fields.Users can create custom matching rules to suit their organization’s specific needs, such as internal tool names.Non-SaaS transactions are not displayed in the Torii UI and are accessible only by users with the Expenses “Take action” scope. #### Who Can See Finance Data in Torii Torii’s granular roles and permissions capabilities allow the Torii admin to define who can view finance data (contracts and expenses). #### Filtering Transactions Fetched by Torii The Netsuite finance integration can be configured to include or exclude specific GL accounts and/or transaction types. For more information, please reach out to support@toriihq.com or your Torii CSM. #### How to Integrate Your Finance System into Torii Refer to these step-by-step guides to connect your system to Torii and start managing your SaaS spend effectively: Netsuite Integration Xero Integration Oracle Financials Cloud Integration Quickbooks Integration Sage Intacct Integration Workday Financial Management Integration Expensify Integration Bill.com Integration Concur Integration # Page Title Mosyle Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/29646078476699-Mosyle-Integration ## Page Description Set up the Mosyle integration and get all the insights in Torii's dashboard Overview Torii integrates with Mosyle and syncs: User ## Details ### How can we help? ### Mosyle Integration Set up the Mosyle integration and get all the insights in Torii's dashboard Torii integrates with Mosyle and syncs: ##### Available actions You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table ##### Accounts & permissions To see your user data from Mosyle in Torii, we require the following permissions: Additionally, to use Mosyle user management actions, Torii requires these permissions: #### Connect Mosyle Integration Go to the Integrations page and click on the "Mosyle" tile Connect to Mosyle In the Connect Mosyle box enter the below information received from Mosyle: The email and password should belong to the user you intend to connect the integration with, and the account you use to generate the API token. Once the integration is connected and synced, it will display a green checkbox. #### How to create your API token: Log in to Mosyle as an administrator. Navigate to Mosyle API Integration. Click Add new token Enter a name, such as "Torii" Copy the API Token and save it. # Page Title Namely Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5165123568283-Namely-Integration ## Page Description Set up Namely integration and get all the insights in Torii's dashboard Overview Torii integrates with Namely and syncs: Users list - All ## Details ### How can we help? ### Namely Integration Torii integrates with Namely and syncs: Users list - All employees with company email, Roles, Status & License Note, Torii can support multiple accounts Make sure you have Namely account and admin user To connect Torii to Namely you will be required to get the following from Namely:Subdomain ( 1 ) and Personal Access Token (2) #### Get Subdomain and Personal Access Token Get the Subdomain from the URL of your Namely account (example: https://subdomain.namely.com) Get the Personal Access Token from your admin account - Get the full instructions from the Intercom website - Authentication After clicking on API, you will see a tab for OAuth Applications and a tab for Personal Access Tokens you need to get the Personal Access Token #### Connect Namely integration to Torii Go to the Integrations page and select the Namely tile Click Connect to Namely In the Connect Namely box enter the Subdomain and the Personal Access Token #### Update the User Lifecycle settings Now, in order to make sure you get the user lifecycle information in Torii, define Namely as your Human resource management system. Under Settings >> User Lifecycle, click the Edit button to review the options. In case Namely is your only source for user management, make sure touncheck Azure and Google workspace Click Preview changes On the next scheduled sync, the user's statuses will be reflected in Torii # Page Title Navan Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/37392518012699-Navan-Integration ## Page Description Overview Torii integrates with Navan and analyzes SaaS expenses: Default synced transaction types Fields used for expense matching ## Details ### How can we help? ### Navan Integration Torii integrates with Navan and analyzes SaaS expenses: ##### Accounts & Permissions #### How to Generate the Required Values #### How to Connect the Integration Q: Can any customer access the Navan Expense API? A: Any customer wishing to use the Expense API must first request the Navan team to enable the Public API for their account. Additionally, the customer must be provisioned for Navan Expense services, as this is a prerequisite for API access. For any further questions, please contact Torii Support. # Page Title NetSuite Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/7913931662363-NetSuite-Integration ## Page Description Set up the NetSuite integration to get a complete overview of all SaaS expenses Overview Torii integrates with NetSuite and analyzes ## Details ### How can we help? ### NetSuite Integration Torii integrates with NetSuite and analyzes SaaS expenses. Torii will automatically match transactions to the correct application, summarize expenses and provide insights. Torii syncs transaction data up to one year prior to first connection date. Before starting, we recommend watching Torii's "NetSuite Integration Overview" video to see how connecting NetSuite can benefit your organization and a few recommendations. Since NetSuite is a flexible platform and can have different configurations for different organizations, we recommend you contact your implementation manager or CSM before the integration. By default, the integration syncs the posted and approved transactions from all NetSuite accounts. Transaction types that are pulled in by default are: You may choose to sync additional supported transaction types: The integration can be further customized to fit different NetSuite setups. You may: ##### Default Configuration Be an administrator in the NetSuite account #### How to Integrate NetSuite The integration process consists of the following steps #### I. Create a Role Go to the Lists tab and add all the following permissions at the "View" level: Accounts, Currency, Departments, Items, and Vendors. Click Edit next to the name of the employee you want to assign the role. This could be your own user or a new dedicated user you create for this integration. Click the Access tab. In the Role field, select the role you've created: Click Add and then Save. #### II. Download Torii's Restlet script Download the Restlet script file: toriirestletv1.js #### III. Upload Torii's Restlet script into NetSuite #### VI. Deploy the Restlet script We will deploy the Restlet and create a REST endpoint: #### V. Create a NetSuite Integration #### VI. Create a NetSuite Access Token First, make sure the Authentication is enabled: Now, create the access token: #### VII. Connect NetSuite Integration to Torii This last step is done within Torii. Connect to NETSUITE. Torii will begin syncing the last 12 months of transaction data from NetSuite, which may take up to 48 hours to appear.You can access each app’s transactions by looking at the Expenses section within the app. Q: I am interested in expense data that is older than what Torii brings in from this integration. Is there a way to get more than one year of data synced into Torii? A: While we we only sync a year of expense data upon connection of this integration in Torii by default, we can bring in data from any time point. If you are interested in getting data from an expanded time frame, please contact Torii's support team and we will be happy to help you with this. Please note, syncing data for a lengthy time period can bring back a lot of data, which can take a significant amount of time to sync (up to a several days, depending on the period of time back you are interested in). Q: I previously connected the NetSuite integration using a Suitelet, how do I migrate to the Restlet integration A: On NetSuite, remove the previous Torii Suitelet. Now follow the steps detailed on this page to install the Restlet. For the last step, go to the Torii integrations page, find the NetSuite tile and click Reconnect. After the sync is complete, verify the new transactions have synced successfully. # Page Title New App Questionnaire: Video Walkthrough ## Page URL https://support.toriihq.com/hc/en-us/articles/4833667753371-New-App-Questionnaire-Video-Walkthrough ## Page Description When Torii discovers a new application, there is a workflow to send the first user a questionnaire. Here is a short tutorial on creating ## Details ### How can we help? ### New App Questionnaire: Video Walkthrough When Torii discovers a new application, there is a workflow to send the first user a questionnaire. Here is a short tutorial on creating this commonly used workflow used throughout the community. # Page Title New Relic Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5168573932955-New-Relic-Integration ## Page Description Setup your New Relic Integration and get the insights in Torii's dashboard Overview Torii integrates with New Relic and syncs: Users ## Details ### How can we help? ### New Relic Integration Torii integrates with New Relic and syncs: Users list - All New Relic users User status - Active, Inactive User roles - Admin, Standard, Billing License - View who is licensed and who is not.Note, we do not present licenses for customers under the "one user model". Users are authenticated using SAML single sign-on Users are provisioned by an Identity Provider using SCIM To make sure SCIM is set up correctly before integrating with Torii, please check with your IT team, New Relic help center, or their support. To see what is your User Model click here #### Connect New Relic to Original User Model New Relic integration consists of the following steps: Step 1 - Copy the REST API V2 key Step 2 - Connect Torii to New Relic In case you are facing syncing issues, it might be due to the following reasons: 1. The API key is invalid - Make sure you created REST API V22. The user that created the API key is not a "Full platform user" #### Connect New Relic to Torii with One user model # Page Title New User Training Overview ## Page URL https://support.toriihq.com/hc/en-us/articles/7332915399067-New-User-Training-Overview ## Page Description Hello, and welcome to Torii! We are so excited to work with you/your team and cannot wait to hear about all the great ways Torii has ## Details ### How can we help? ### New User Training Overview Hello, and welcome to Torii! We are so excited to work with you/your team and cannot wait to hear about all the great ways Torii has impacted your organization! To get you started with learning about your new SaaS Management Platform, we have created a series of training videos called 'New User Training'. It consists of 13 bite-sized videos that are each 5-10 minutes long and total 1 hour and 39 minutes. You will learn more tips about completing the series in the first video, but we wanted to give you a quick sneak peek of what you will learn. The videos are in sequential order and gradually build on the previous videos' content, so we strongly suggest that you watch the videos in the order they are listed below. To get started just click on the first video! If you have any questions while completing this series, please reach out to your Customer Experience Manager or use the blue chat bubble in the bottom right corner of your Torii environment. # Page Title Notion Integration - Deprecated ## Page URL https://support.toriihq.com/hc/en-us/articles/5192273839643-Notion-Integration-Deprecated ## Page Description Setup Notion integration and get all the insights in Torii's dashboard Torii integrates with Notion and syncs the list of users, ## Details ### How can we help? ### Notion Integration - Deprecated Torii integrates with Notion and syncs the list of users, roles, and their last logged-in time. ##### Important: Requirements Before integrating Notion, make sure that your Notion account login is set with a permanent password, instead of a temporary passcode: On Notion, click Settings & Members at the top of the left sidebar, and then My Account . If you're on mobile, tap Notifications & Settings in your sidebar. Click the Set a Password button. Enter a password that meets the security requirements, and repeat to confirm. Go to the Torii Integrations page and click on the Notion tile in order to connect. Type in your Notion username and password and click Connect. # Page Title Notion Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5167242510747-Notion-Integration ## Page Description Setup Notion integration and get all the insights in Torii's dashboard Overview Torii integrates with Notion and syncs the user list, ## Details ### How can we help? ### Notion Integration Torii integrates with Notion and syncs the user list, status and licenses assigned to each user. Workflow actions for provisioning and deprovisioning users are supported for Notion Enterprise users. Note: Torii supports multiple Notion accounts The Notion integration can be connected with Read or Read and Take action permissions. - For Read: a Notion API Key is required to read the users and license information. - For Read and Take action: in addition to the Notion API Key, a SCIM Provisioning token is required to take provisioning and deprovisioning actions. This option is only available to the Notion Enterprise tier. #### Generate a Notion API Key From your Notion user go to Settings & Members Select Connections Scroll to the bottom and select Develop or manage integrations.(Alternatively, you can directly browse to Notion's My Integrations page) Click on New Integration Give the integration a name Select a workspace to which you want to connect ToriiNote: You can connect more then one integration, but you will be required to open New Integration per workspace Make sure the Content Capabilities are checkedNote: Minimum requirement Read Content Under User Capabilities make sure the Read user information including email addresses is checked Click Show and copy the Secrets (API key) #### Generate a SCIM Provisioning token (optional) Notion users who are on the Notion Enterprise plan can create a SCIM token to leverage workflow actions for user provisioning and deprovisioning. #### Connect the Notion integration to Torii Go to the Integrations page Connect to Notion Paste the API key and optionally also the SCIM Provisioning token. Once the application is synced, a green checkbox will appear at top left If you wish to connect another workspace, find another Notion tile and click Connect another #### Provisioning members When creating a member, if they already have a Notion user account with the same email, they will be added to your workspace, and their name will remain the same. If the user does not exist, a new Notion user will be created with the email and name you select and then added to your workspace. Learn more on Notion help center. # Page Title Offboarding Employees ## Page URL https://support.toriihq.com/hc/en-us/articles/30079898075291-Offboarding-Employees ## Page Description Overview Offboarding employees from applications is a critical task for IT administrators to ensure security and efficiency. Torii's ## Details ### How can we help? ### Offboarding Employees Offboarding employees from applications is a critical task for IT administrators to ensure security and efficiency. Torii's offboarding feature allows the IT to: Let’s deep dive into how Torii offboarding works and how to leverage it to the maximum. In order for Torii offboarding to work accurately, you will need to: ##### User Lifecycle Source of Truth and Offboarding User lifecycle source of truth definition affects when a user in Torii is marked as a candidate for offboarding and is added to the Offboarding To-fo list on the Offboarding page. ##### Application Offboarding Configuration in Offboarding Settings Torii offboarding will only work once you define application offboarding methods in Offboarding settings. You need to go over all discovered apps and configure each app with a dedicated offboarding method. The application offboarding method dictates the action taken on an app user when the offboarding process is initiated. Note that for integrated apps, you need to define distinct offboarding methods for each connected account and for any "unmanaged" accounts. The "unmanaged" account includes users not detected through integration, such as those solely sourced from browser extension or SSO. #### Available Offboarding Methods Torii support 3 offboarding methods. The methods can be configured per each app in the Configure pop-up window. Let's look at them. 1. Automatic offboarding The user will be marked as offboarded from the app in Torii the moment the configured automatic action was executed successfully. Note that Torii platform offers complete flexibility, allowing you to choose the offboarding actions that suit your specific needs. Hence, if a user is marked as "offboarded" from an application in Torii, it doesn't automatically imply that their access to that app has been terminated. 2. Delegate offboarding This method is recommended for managed apps that are not integrated or aren’t supported by Torii automation. Note that Torii cannot definitively confirm if the user has been removed; it relies entirely on the status reported by the task owner. We also support opening tickets in Asana, Freshservice, Monday, ServiceNow and Zendesk, although unlike in Jira, Torii does not actively monitor these tickets. Consequently, if any of these actions are defined as an app offboarding method in Torii, the user will be marked as offboarded from the app as soon as the ticket is opened. 3. Ignore offboarding This method is recommended for apps that are taken care of outside Torii (e.g. via an identity provider like Okta or Jumpcloud) or unmanaged apps. If an app is defined with the “Ignore” method, no action will be triggered when the offboarding is initiated, and the user will only be removed from the app’s current user list in Torii. #### Offboarding Execution Employee offboarding in Torii can be initiated: 1. Manually by clicking on the Start Offboarding button in the To-do list or User page. 2. Automatically by adding Torii action “Start offboarding” to a workflow. Note that you can add more actions to your workflow, to make it optimized for your organizational process. See example here. Once the offboarding initiates, corresponding offboarding actions are activated across all user apps based on the apps' configurations in the settings. The user transitions from the To-do page to the In-progress page, and their user page reflects the offboarding audit log, detailing progress for all apps from which the user is being offboarded. The status of app offboarding in the log will automatically show as complete under the following circumstances: Once all apps are marked as complete, the entire offboarding process concludes automatically. The user transitions from the In-progress page to the Done page and will display the Offboarding badge when appearing on other pages within Torii. You can audit employee’s offboarding from their user page, or via Actions audit log. Note that offboarding actions execute for all apps the user has ever used, regardless of the user's current status in these apps. This means that the offboarding process will proceed even if a user is no longer active or listed in the app. #### Offboarding Task Reminders Torii provides the option to send reminders for offboarding tasks when the assigned task owners forget to complete these (i.e., do not mark their tasks as "Done"). These reminders are delivered via email or Slack based on a customizable schedule set in the Offboarding settings. In situations where the same owner is assigned multiple tasks, a consolidated email or Slack message containing a link to the offboarding tasks web page will be sent to that specific owner. Sample Slack message: Sample offboarding tasks page: Torii admins can monitor the status of delegated tasks on the Pending tasks page. Read more about it here. #### Offboarding Best Practices # Page Title Offboarding for Sensitive Apps ## Page URL https://support.toriihq.com/hc/en-us/articles/4833333510171-Offboarding-for-Sensitive-Apps ## Page Description Offboarding an employee from apps does not have to happen all at once. Some apps can be removed within a week while others should be ## Details ### How can we help? ### Offboarding for Sensitive Apps Offboarding an employee from apps does not have to happen all at once. Some apps can be removed within a week while others should be removed almost immediately. This example below triggers once an employee leaves and sends requests to application owners to remove access for the most sensitive apps. This workflow even includes an alert to remove the user from backend database access. # Page Title Officevibe Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/11579095916955-Officevibe-Integration ## Page Description Overview Torii integrates with Officevibe and syncs the users' list and licenses. Prerequisites Accessing the API requires: An ## Details ### How can we help? ### Officevibe Integration Torii integrates with Officevibe and syncs the users' list and licenses. Accessing the API requires: #### Connect Officevibe to Torii Follow the below steps: Once the integration is connected and synced, it will display a green checkbox. # Page Title Okta integration ## Page URL https://support.toriihq.com/hc/en-us/articles/23967598630683-Okta-integration ## Page Description Set up your Okta Cloud integration and get the insights in Torii's dashboard. Overview Torii integrates with Okta and syncs: Users ## Details Torii integrates with Okta and syncs: Users list - All Okta users User status - Staged, Provisioned, Active, Suspended License - View who is licensed and who is not Usage - Torii presents the login usage for Okta users Maps and presents 3rd party apps login Users list per-app login - Note If users have access to a 3rd party App but did not log in, Torii does not count them as part of the usage The usage per app after login Multiple accounts - Torii supports and syncs multiple accounts Actions - With Torii, you can create Okta "workflow" actions like creating/activating/Deleting Okta users #### Connect Okta to Torii Okta integration consists of the following steps: Step 1 - Install Torii app on your Okta admin console Step 2 - Connect Okta to Torii Go to the Okta website and log in as an Administrator Select API service integrations in the left menu. Click "Add integration". 3. Scroll and find the Torii apps. 4. Select Torii (Read) or Torii (Read and Take action) in the app list. Torii Read will allow Torii to sync data from Okta with Torii. Torii Read and Take action will allow Torii to take actions in Okta on Torii behalf (creating Okta groups, creating users in Okta and more). 5. Click "Install and Authorize". You will be taken to the authorization screen where you can copy Okta domain and Client ID. You will also need to generate the Client secret. Once you generated the secret, copy and save it. The next step would be copying the above details and populating them in Torii. Go to the Integrations page Find Okta tile and click Connect Select the permission, "Read," or "Read and Take action."Note that "Read and Take" action permission is required to use Torii's Okta actions Copy your Okta domain from Okta and paste it to the Torii Okta Organization URL field Copy your Client ID from Okta and paste it to the Torii Client ID field Copy your Client secret and paste it to the Torii Client Secret field. Click Continue. 7. The "Test Connection" window will show up, generating the connection test. Click Connect to continue. 8. Once the integration is connected and synced, it will display a green checkbox Once connected, Torii will retrieve and present the usage from the last 30 days and forward. Torii continuously monitors Okta events and updates data in Torii in real-time accordingly. The Okta events that Torii monitors are: User was deleted User was deactivated (and their status was changed to deprovisioned) If you set Okta as the user lifecycle source of truth, the Offboarding To-Do list in Torii will be continuously updated based on the events above. You can also leverage Torii's App Event workflow trigger to trigger automation based on the above events whenever an event happens in Okta. # Page Title Onboarding New Hires to Slack ## Page URL https://support.toriihq.com/hc/en-us/articles/4833283909659-Onboarding-New-Hires-to-Slack ## Page Description It can be time consuming to manually complete all ideal onboarding steps for new hires. This can lead to certain steps never being ## Details ### How can we help? ### Onboarding New Hires to Slack It can be time consuming to manually complete all ideal onboarding steps for new hires. This can lead to certain steps never being completed even if it would speed up the ramp up time of the new hire. The example below shows a workflow that automates adding new hires to relevant Slack groups. In this workflow, new hires are added to Slack groups based on their location based within Okta. # Page Title OneLogin Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5165027185435-OneLogin-Integration ## Page Description Setup your OneLogin integration and get all the insights in Torii's dashboard Overview Torii integrates with your OneLogin account and ## Details ### How can we help? ### OneLogin Integration #### Prerequisites in OneLogin #### Connect OneLogin Integration #### Integration Capabilities and Actions You can always be updated with application information and actions from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title OneTrust Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/9291270253083-OneTrust-Integration ## Page Description Setup the OneTrust integration and get all the insights in Torii's dashboard Overview Torii integrates with your OneTrust account and ## Details ### How can we help? ### OneTrust Integration Torii integrates with your OneTrust account and syncs the users' names, emails, statuses, licenses statuses, and roles. OneTrust account admin user is required Torii's OneTrust integration requires the Organization and SCIM scopes to function correctly. When enabling these general scopes, the following specific scopes are enabled: Additionally, go get usage data, we will also require access to the User general scopes, which enables the following specific scopes: #### Connecting the integration ##### Step 1 - Generate an API key ##### Step 2 - Enable the required scopes ##### Step 3 - Connect the OneTrust Integration #### Application Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title Open a FreshService Ticket From Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/9449895014427-Open-a-FreshService-Ticket-From-Torii ## Page Description Overview As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and ## Details ### How can we help? ### Open a FreshService Ticket From Torii As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and relying on rich Torii data, you can create tickets or tasks in popular collaboration platforms whenever Torii identifies that a process needs to be initiated.Read more FreshService Integration is connected with "Read and Take action" permissions. #### How to open a ticket Note that the following fields will be populated with the following default values in FreshService: # Page Title Open a Jira Ticket From Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/9449215129499-Open-a-Jira-Ticket-From-Torii ## Page Description Overview As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and ## Details ### How can we help? ### Open a Jira Ticket From Torii As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and relying on rich Torii data, you can create tickets or tasks in popular collaboration platforms whenever Torii identifies that a process needs to be initiated.Read more Jira cloud integration is connected with Reading and writing permissions. #### How to open a ticket You can also include custom fields. You must add the custom field ID and its corresponding value. To get the custom field ID: 2. Open the required custom field details from the menu. 3. You will see the field ID in the URL. Copy the ID and paste it into the left text field. Note that you need to add a prefix customfield, resulting in a format like customfield1234. Next, input the desired value into the right field. You can use personalization tokens. Note that we currenly support the following custom field types: When a workflow is triggered, and the ticket is open, you can view its ID in the workflow actions log. Click on the ID link in the "Details" column to open the ticket in the Jira instance. #### Share ticket details with stakeholders Once you created a ticket, you can add the ticket ID and URL as personalization tokens in the next workflow actions. For example, when an employee requests access to an app from the catalog, you can first create a Jira issue and next send the employee a Slack message with the issue number and a direct link to Jira, allowing to easily monitor the progress of their request. #### Additional articles Delegate an Offboarding Task With Jira # Page Title Open a Monday Item From Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/11387499480347-Open-a-Monday-Item-From-Torii ## Page Description Overview As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and ## Details ### How can we help? ### Open a Monday Item From Torii As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and relying on rich Torii data, you can create items or tasks in popular collaboration platforms whenever Torii identifies that a process needs to be initiated.Read more Monday integration is connected with Reading and writing permissions. #### How to open an Item for Torii # Page Title Open a ServiceNow Ticket From Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/9449233376283-Open-a-ServiceNow-Ticket-From-Torii ## Page Description Overview As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and ## Details ### How can we help? ### Open a ServiceNow Ticket From Torii As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and relying on rich Torii data, you can create tickets or tasks in popular collaboration platforms whenever Torii identifies that a process needs to be initiated.Read more #### How to open a ticket # Page Title Open a Zendesk ticket from Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/26072029928859-Open-a-Zendesk-ticket-from-Torii ## Page Description Overview As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and ## Details ### How can we help? ### Open a Zendesk ticket from Torii As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and relying on rich Torii data, you can create items or tasks in popular collaboration platforms whenever Torii identifies that a process needs to be initiated.Read more Zendesk integration is connected with Reading and Writing permissions. #### How to open an ticket from Torii 1. From the workflow, select Zendesk >> Open Zendesk ticket action 2. Select the Account 3. Populate the fields with the information relevant for the ticket. You can use personalization tokens to enrich information in the ticket. The standard available fields are: 4. You can also include custom fields. You must add the custom field ID and its corresponding value. To get the custom field ID, navigate to Objects and Rules > Fields tab in your Zendesk admin console. Copy the ID from the "Field ID" row and paste it into the left text field. Next, input the desired value into the right field. You can use personalization tokens. 5. Once the ticket is created, you can see its details In the workflow log. # Page Title OpenAI Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/32590037715739-OpenAI-Integration ## Page Description Overview Torii integrates with OpenAI and syncs: User Fields License Types Email OpenAI Role Status Torii supports ## Details ### How can we help? ### OpenAI Integration Torii integrates with OpenAI and syncs: ##### Accounts & Permissions #### How to Generate the Required Values 1. Log in to OpenAI Developer platform.2. Finding the Organization ID: 3. Finding the Admin Key #### How to Connect the Integration Go to the Integrations page in Torii. Select the OpenAI tile. Enter the required values: Click Connect to finalize the integration. Once the integration is connected and synced, a green checkbox will appear next to the integration. Q: Can I use a regular API Key instead of an Admin Key? A: No, only the Admin Key is supported. Regular API Keys do not have the necessary permissions to fetch the required user and license data. Q: What if I don’t have an Organization ID? A: The Organization ID is mandatory for connecting the integration. Please refer to the steps above to locate your Organization ID in OpenAI. Q: Can Torii use the Admin Key to access OpenAI features, such as starting a ChatGPT conversation or creating an image? A: No, the Admin Key is intended for administrative management only and cannot be used to access OpenAI features. For example: For any further questions, please contact Torii Support. # Page Title Opsgenie Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5192366193947-Opsgenie-Integration ## Page Description Setup your Opsgenie integration and get all the insights in Torii's dashboard Torii integrates with your Opsgenie account and syncs the ## Details ### How can we help? ### Opsgenie Integration Torii integrates with your Opsgenie account and syncs the list of users, roles, status in app, and licenses. Create an API key Sign in to your Opsgenie account.Note: Ensure you sign in to the actual Opsgenie website and not through the Atlassian website. #### Connect Opsgenie to Torii # Page Title Oracle Financials Cloud Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166316677915-Oracle-Financials-Cloud-Integration ## Page Description Introduction Torii leverages Oracle Financials Cloud API, allowing us to update your SaaS expenses without any user interaction ## Details ### How can we help? ### Oracle Financials Cloud Integration Torii leverages Oracle Financials Cloud API, allowing us to update your SaaS expenses without any user interaction automatically. Torii syncs transaction data up to one year prior to first connection date. Torii syncs invoices from your Oracle Financials Cloud account and matches SaaS-related expenses to their respective app on Torii. The following fields of transactions are used for mapping the expense to the correct application: invoiceLines.ItemDescription, Description and Supplier. #### Connect Oracle Financials Cloud to Torii The permissions granted to Torii are equivalent to the permissions of the user used to connect the integration.Torii will only be able to access data that this user has access to. Q: I am interested in expense data that is older than what Torii brings in from this integration. Is there a way to get more than one year of data synced into Torii? A: While we we only sync a year of expense data upon connection of this integration in Torii by default, we can bring in data from any time point. If you are interested in getting data from an expanded time frame, please contact Torii's support team and we will be happy to help you with this. Please note, syncing data for a lengthy time period can bring back a lot of data, which can take a significant amount of time to sync (up to a several days, depending on the period of time back you are interested in). # Page Title Organize Your Tech Stack Inventory ## Page URL https://support.toriihq.com/hc/en-us/articles/4551065231899-Organize-Your-Tech-Stack-Inventory ## Page Description You probably have hundreds of SaaS applications in your tech stack, so organizing those applications can present a challenge. ## Details ### How can we help? ### Organize Your Tech Stack Inventory You probably have hundreds of SaaS applications in your tech stack, so organizing those applications can present a challenge. Torii provides you with extensive capabilities to keep your SaaS inventory organized and managed. These include: Assign Application Owners Set Application State Create Application Views Enrich Application Details Hide Applications By keeping your SaaS organized, Torii serves as your single source of truth for all your SaaS applications. # Page Title Outreach Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/14615844772123-Outreach-Integration ## Page Description Overview Torii integrates with your Outreach account and syncs the users': roles, statuses in the app, last used date, and licenses. ## Details ### How can we help? ### Outreach Integration #### Connect Outreach integration to Torii. # Page Title PagerDuty Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166547360539-PagerDuty-Integration ## Page Description Set up PagerDuty integration and get all the insights in Torii's dashboard Overview Torii integrates with your PagerDuty account and ## Details ### How can we help? ### PagerDuty Integration Torii integrates with your PagerDuty account and syncs users list - Names, emails, statuses, licenses, and roles. To connect Torii to PagerDuty, you will need to get an API token. There are two types of PagerDuty REST API keys: #### Generate general access REST API key Copy the API KeyNote that after closing the window, the API key will not be visible #### Generate user token REST API key #### Connect PagerDuty integration to Torii Once the integration is connected and synced, it will display a green checkbox Torii supports the following actions, allowing to seamlessly automate employee onboarding, offboarding, mid lifecycle changes and more: #### Integration Information # Page Title PandaDoc Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166999867163-PandaDoc-Integration ## Page Description Set up the PandaDoc integration and get all the insights in Torii's dashboard Overview Torii integrates with your PandaDoc account and ## Details ### How can we help? ### PandaDoc Integration Torii integrates with your PandaDoc account and syncs: the users' list, roles, and statuses. To connect Torii to PandaDoc you will need to get PandaDoc API. #### How to get PandaDoc API token From the PandaDoc website go to your user >> profile settings Select Integrations from the sidebar Click on Generate sandbox key Copy the Sandbox API #### Connect PandaDoc integration to Torii Go to the Integrations page and select the PandaDoc tile In the Connect PandaDoc box enter the API created in the previous step Once the integration is connected and synced, it will display a green checkbox # Page Title Paylocity Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/6563351950235-Paylocity-Integration ## Page Description Set up the Paylocity integration and get all the insights in Torii's dashboard Overview Torii integrates with Paylocity and syncs: ## Details ### How can we help? ### Paylocity Integration Torii integrates with Paylocity and syncs: Torii can sync multiple Paylocity accounts. If you don't already possess the required information, please get in touch with Paylocity support. #### Connect Paylocity integration to Torii To connect Paylocity to Torii, follow the below steps: Once the integration is connected and synced, it will display a green checkbox. #### Update the User Lifecycle settings To ensure you get the user lifecycle information in Torii, define Paylocity as your Human resource management system. Under Settings >> User Lifecycle, click on the Edit button to review the options. The users' statuses will be reflected in Torii on the next scheduled sync. # Page Title Peakon Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5728662752923-Peakon-Integration ## Page Description Overview Torii integrates with Peakon and syncs the users' list. Prerequisites Users are authenticated using SAML single sign-on ## Details ### How can we help? ### Peakon Integration Torii integrates with Peakon and syncs the users' list. To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Peakon's help center, or their support. #### Integration Process To connect Peakon to Torii, follow these steps: Once the integration is connected and synced, it will display a green checkbox # Page Title Personalization Tokens List ## Page URL https://support.toriihq.com/hc/en-us/articles/7831474160667-Personalization-Tokens-List ## Page Description Overview In this article, you will find Torii's default Personalization Tokens List. You can use personalization tokens or variables to ## Details ### How can we help? ### Personalization Tokens List In this article, you will find Torii's default Personalization Tokens List. You can use personalization tokens or variables to personalize email messages and notifications, as well as to add rich contextual data. You can also use tokens to populate fields in one app with values from another app. Read more about it in Personalization Tokens (Data Fabric) Overview. Our tokens include: #### Torii's default tokens #### User tokens from integrated apps Azure AD | BambooHR | Google Workspace | Hibob | HubSpot | JumpCloud | Namely | OneLogin | Okta | Salesforce | Slack | Workday The app must be directly integrated with Torii to get these personalization tokens. ADP Manager (First Name, Last Name, Email, Full Name) Azure Company Name Azure Cost Center Azure Deleted Date Azure Department Azure Job Title Azure Office Location Azure On Premises Sam Account Name Azure User Manager (First Name, Last Name, Email, Full Name) BambooHR Country BambooHR Department BambooHR Division BambooHR Effective Date BambooHR Employee ID BambooHR Employment Status BambooHR Hire Date BambooHR Job Title BambooHR Location BambooHR Preferred Name BambooHR Private Email BambooHR Termination Date BambooHR User Manager (First Name, Last Name, Email, Full Name) BambooHR Zip Code BambooHR Management Role Google Workspace Address Google Workspace Building Id Google Workspace Cost Center Google Workspace Department Google Workspace Job Title Google Workspace Org Unit Google Workspace Start Date Google Workspace End Date Google Workspace Type of Employee Google Workspace User Manager (First Name, Last Name, Email, Full Name) Hibob Department Hibob Employment Type Hibob Is A Manager Hibob Lifecycle Status Hibob Private Email Hibob Probation End Date Hibob Reports To (First Name, Last Name, Email, Full Name) Hibob Start Date Hibob Termination Date HubSpot Primary Team JumpCloud Company JumpCloud Cost Center JumpCloud Country JumpCloud Department JumpCloud Employee ID JumpCloud Employee Type JumpCloud Job Title JumpCloud Location JumpCloud User Manager (First Name, Last Name, Email, Full Name) Namely Access Role Namely Department Namely Departure Date Namely Job Title Namely Office Location Namely Onboarding Complete Date Namely Personal Email Namely Reports To (First Name, Last Name, Email, Full Name) Namely Start Date OneLogin Company OneLogin User Department OneLogin User Manager (First Name, Last Name, Email, Full Name) OneLogin User Title Okta Cost Center Okta Creation Date Okta Department Okta Employee Number Okta Legal Entity Okta Organization Okta User Manager (First Name, Last Name, Email,Full Name) Okta Legacy Email Personio Cost Centers Personio Department Personio Hire Date Personio Manager (First Name, Last Name, Email,Full Name) Personio Position Personio Status Salesforce Default Currency Iso Code Salesforce Department Salesforce Division Salesforce Manager (First Name, Last Name, Email, Full Name) Salesforce Profile Name Salesforce Title Workday Business Title Workday Department Workday Employee ID Workday Employee Type Workday End Employment Date Workday Hire Date Workday Location Workday Preferred Name Workday Retired Workday Worker Type Workday Worker's Manager (First Name, Last Name, Email, Full Name) Q: Does the App URL token pull in the public-facing URL?A: The URL that appears will be a link to the app in your Torii environment. # Page Title Personio Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/8999763745947-Personio-Integration ## Page Description Overview Torii integrates with Personio and syncs the user's email, name, app status, license status, and profile picture. ## Details ### How can we help? ### Personio Integration Torii integrates with Personio and syncs the user's email, name, app status, license status, and profile picture. ##### Accounts & Permissions To connect the integration, you need to be a Personio account admin. To get users' Team and Cost Center attributes, you will need to whitelist them under Settings > Integrations > API Credentials > Corresponding API Credentials > Readable Attributes. #### Integration Process To connect Personio to Torii, follow these steps: #### Update the User Lifecycle settings To ensure you get the user lifecycle information in Torii, define Personio as your Human resource management system. #### Application Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title Pipedrive Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/14829025693595-Pipedrive-Integration ## Page Description Overview Torii integrates with your Pipedrive account and syncs the users' roles, statuses in the app, and licenses, including "last ## Details ### How can we help? ### Pipedrive Integration Torii integrates with your Pipedrive account and syncs the users' roles, statuses in the app, and licenses, including "last visit date." Torii supports user management actions. To leverage automation actions, you need to connect the integration with the "Take action" permissions. Note that a user connecting the integration must have an admin role in Pipedrive. Torii can support multiple Pipedrive accounts. #### Connect Pipedrive integration to Torii # Page Title PivotalTracker Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/27274045092635-PivotalTracker-Integration ## Page Description Overview Torii integrates with your PivotalTracker account and syncs the following information: User Fields License Types User ## Details ### How can we help? ### PivotalTracker Integration Torii integrates with your PivotalTracker account and syncs the following information: You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table ##### Accounts & permissions #### Connect the LeadIQ Integration Go to the Integrations page and click on the PivotalTracker tile Add your API key. You can find your API key in your PivotalTracker profile specifications, under the “API TOKEN” section (link is also provided in the connection screen) Once the integration is connected and synced, it will display a green checkbox # Page Title Postman Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5192398838683-Postman-Integration ## Page Description Setup your Postman integration and get all the insights in Torii's dashboard Overview Torii integrates with Postman and syncs the ## Details ### How can we help? ### Postman Integration Torii integrates with Postman and syncs the users' list, status, and license. Postman Enterprise To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Postman's help center, or their support. #### Integration Process To connect Postman to Torii, follow these steps: Once the integration is connected and synced, it will display a green checkbox # Page Title Procurement Role - Permissions & Scopes ## Page URL https://support.toriihq.com/hc/en-us/articles/6277853570331-Procurement-Role-Permissions-Scopes ## Page Description Objectives This article is intended for Torii admin who wishes to create a controlled permission view to the Procurement persona. You ## Details ### How can we help? ### Procurement Role - Permissions & Scopes This article is intended for Torii admin who wishes to create a controlled permission view to the Procurement persona. You will learn how Torii defines the Procurement role and how to assign it to a specific user.At the end of this article, you will find a short video presenting the information available for the procurement role once assigned. * Prerequisite - Read the Introduction to Role-Based Access Control (RBAC) article The Procurement role is designed for users from the finance department, specifically those with Procurement process ownership. Procurement users will use Torii mainly for managing renewals of SaaS assets. They are responsible for negotiation with vendors based on usage of licenses, app adoption, and other considerations. Procurement users should be exposed to financial data (Cost of granular level) and usage patterns but not necessarily specific usage by users or user details. This role also has visibility into expenses. #### View Procurement Role Scopes #### What are the Procurement role scopes & access levels? How to Assign a Role? #### Procurement Role Information Visibility - Short Video View this short video showing the information to which the Procurement role will be exposed. # Page Title Put New Apps Through InfoSec Approval Process ## Page URL https://support.toriihq.com/hc/en-us/articles/4833433874459-Put-New-Apps-Through-InfoSec-Approval-Process ## Page Description This was submitted by Alexis at Mirakl! Shadow IT management involves multiple teams. Use workflows to easily bring them all into the ## Details ### How can we help? ### Put New Apps Through InfoSec Approval Process Shadow IT management involves multiple teams. Use workflows to easily bring them all into the fold in a collaborative environment.This example below automatically changes the state of the new app for easy filtering in Torii and then sends the approval request to InfoSec for review. Once this is reviewed, the app will show as sanctioned and all users can safely use it in the future. # Page Title Q&A: App catalog | how to add an app that isn't showing in the Applications list? ## Page URL https://support.toriihq.com/hc/en-us/articles/18937069309339-Q-A-App-catalog-how-to-add-an-app-that-isn-t-showing-in-the-Applications-list ## Page Description Question/Issue: How to add an app to the App Catalog that isn't showing in the Applications list? Resolution: The App needs to be added ## Details ### How can we help? ### Q&A: App catalog | how to add an app that isn't showing in the Applications list? Question/Issue: How to add an app to the App Catalog that isn't showing in the Applications list? The App needs to be added first to the Applications list. # Page Title Q&A: App Owner | Can an App owner change an App state? ## Page URL https://support.toriihq.com/hc/en-us/articles/21129988565531-Q-A-App-Owner-Can-an-App-owner-change-an-App-state ## Page Description Question/Issue: Can an App owner change an App state? Cause: Depends if the App Owner is a Torii user or not: App Owner who is NOT ## Details ### How can we help? ### Q&A: App Owner | Can an App owner change an App state? Question/Issue: Can an App owner change an App state? Depends if the App Owner is a Torii user or not: Relevant articles: App Owner Access - For New App Owners App Owner Access - For Torii Admins # Page Title Q&A: Browser Extension deployed in unauthenticated mode isn't reporting usage ## Page URL https://support.toriihq.com/hc/en-us/articles/17229149598107-Q-A-Browser-Extension-deployed-in-unauthenticated-mode-isn-t-reporting-usage ## Page Description Question/Issue: Browser Extension deployed in unauthenticated mode isn't reporting usage Resolution: When configured to use ## Details ### How can we help? ### Q&A: Browser Extension deployed in unauthenticated mode isn't reporting usage Question/Issue: Browser Extension deployed in unauthenticated mode isn't reporting usage When configured to use unauthenticated mode, the Torii Browser Extension may not start reporting usage immediately. It will require some time for it to recognize app usage through multiple logins. # Page Title Q&A: Can Figma Dev Mode be added to the Torii apps database? ## Page URL https://support.toriihq.com/hc/en-us/articles/22584443123355-Q-A-Can-Figma-Dev-Mode-be-added-to-the-Torii-apps-database ## Page Description Question/Issue: Can Figma Dev Mode be added to Torii's apps database? Resolution: Figma Dev Mode cannot be added to the database due to ## Details ### How can we help? ### Q&A: Can Figma Dev Mode be added to the Torii apps database? Question/Issue: Can Figma Dev Mode be added to Torii's apps database? Figma Dev Mode cannot be added to the database due to it being a sub-product without the distinguishing features needed for inclusion. # Page Title Q&A: Can I Manually Run a Workflow? ## Page URL https://support.toriihq.com/hc/en-us/articles/4822756276251-Q-A-Can-I-Manually-Run-a-Workflow ## Page Description Question/Issue: Can I Manually Run a Workflow? Resolution: Yes. You select a workflow and run it ad-hoc. See this help article for ## Details ### How can we help? ### Q&A: Can I Manually Run a Workflow? Question/Issue: Can I Manually Run a Workflow? Yes. You select a workflow and run it ad-hoc. See this help article for details - Manually Run Workflows # Page Title Q&A: Can I trigger a workflow one week before an employee joins? ## Page URL https://support.toriihq.com/hc/en-us/articles/4822623901083-Q-A-Can-I-trigger-a-workflow-one-week-before-an-employee-joins ## Page Description Question/Issue: Can I trigger a workflow one week before an employee joins? Resolution: Yes. Assuming you have the employee start date ## Details ### How can we help? ### Q&A: Can I trigger a workflow one week before an employee joins? Question/Issue: Can I trigger a workflow one week before an employee joins? # Page Title Q&A: Can I trigger a workflow several days after an employee has left? ## Page URL https://support.toriihq.com/hc/en-us/articles/4822624655771-Q-A-Can-I-trigger-a-workflow-several-days-after-an-employee-has-left ## Page Description Question/Issue: Can I trigger a workflow several days after an employee has left? Resolution: Yes. You can trigger a workflow based on ## Details ### How can we help? ### Q&A: Can I trigger a workflow several days after an employee has left? Yes. You can trigger a workflow based on any date that is synced to Torii. # Page Title Q&A: Can we provision users via Jumpcloud SCIM to a custom role that we have created? ## Page URL https://support.toriihq.com/hc/en-us/articles/18075254955675-Q-A-Can-we-provision-users-via-Jumpcloud-SCIM-to-a-custom-role-that-we-have-created ## Page Description Question/Issue: Can we provision users via Jumpcloud SCIM to a custom role that we have created? Resolution: Torii allows you to send a ## Details ### How can we help? ### Q&A: Can we provision users via Jumpcloud SCIM to a custom role that we have created? Question/Issue: Can we provision users via Jumpcloud SCIM to a custom role that we have created? Torii allows you to send a custom role in the 'userType' attribute in the SCIM Create User API. Keep in mind that you may have limitations on the JumpCloud side to send this information. Most customers leverage the Employee Type Attribute on JumpCloud to send the appropriate role required for the Torii SCIM Create User. # Page Title Q&A: Do all users need to log back in to the browser extension after our domain changed? ## Page URL https://support.toriihq.com/hc/en-us/articles/17309322444059-Q-A-Do-all-users-need-to-log-back-in-to-the-browser-extension-after-our-domain-changed ## Page Description Question/Issue: Do all users need to log back in to the browser extension after our domain changed? Resolution: Yes, all users will have ## Details ### How can we help? ### Q&A: Do all users need to log back in to the browser extension after our domain changed? Question/Issue: Do all users need to log back in to the browser extension after our domain changed? Yes, all users will have to log out and back into the browser extension. # Page Title Q&A: Do app owners have access to shared views in Torii? ## Page URL https://support.toriihq.com/hc/en-us/articles/17973699529627-Q-A-Do-app-owners-have-access-to-shared-views-in-Torii ## Page Description Question/Issue: Do app owners have access to shared views in Torii? Resolution: No, app owners only have access to views created by them. ## Details ### How can we help? ### Q&A: Do app owners have access to shared views in Torii? Question/Issue: Do app owners have access to shared views in Torii? No, app owners only have access to views created by them. # Page Title Q&A: Do we have retention period for offboarded users? ## Page URL https://support.toriihq.com/hc/en-us/articles/17260559599387-Q-A-Do-we-have-retention-period-for-offboarded-users ## Page Description Question/Issue: Do we have a retention period for offboarded users? Resolution: The retention period is infinite, offboarded user data is ## Details ### How can we help? ### Q&A: Do we have retention period for offboarded users? Question/Issue: Do we have a retention period for offboarded users? The retention period is infinite, offboarded user data is stored forever. # Page Title Q&A: Do Workflow Actions Run Sequentially? ## Page URL https://support.toriihq.com/hc/en-us/articles/4822972351003-Q-A-Do-Workflow-Actions-Run-Sequentially ## Page Description Question/Issue: Do Workflow Actions Run Sequentially? Resolution: Yes, each action waits until the previous action has been ## Details ### How can we help? ### Q&A: Do Workflow Actions Run Sequentially? Do Workflow Actions Run Sequentially? Yes, each action waits until the previous action has been completed. # Page Title Q&A: Does the browser extension track user activity if there is a DNS / URL redirect for an app? ## Page URL https://support.toriihq.com/hc/en-us/articles/17278272300315-Q-A-Does-the-browser-extension-track-user-activity-if-there-is-a-DNS-URL-redirect-for-an-app ## Page Description Question/Issue: Does the browser extension track user activity if there is a DNS / URL redirect for an app? Resolution: Our Browser ## Details ### How can we help? ### Q&A: Does the browser extension track user activity if there is a DNS / URL redirect for an app? Question/Issue: Does the browser extension track user activity if there is a DNS / URL redirect for an app? Our Browser Extension will only detect the final URL (not the initial URL). For example, if ABC.com redirects to XYZ.com the Browser Extension will discover XYZ.com. # Page Title Q&A: Does the Netsuite integration provide user data? ## Page URL https://support.toriihq.com/hc/en-us/articles/17280974999579-Q-A-Does-the-Netsuite-integration-provide-user-data ## Page Description Question/Issue: Does the Netsuite integration provide user data? Resolution: No, the Netsuite integration only syncs transactions, not ## Details ### How can we help? ### Q&A: Does the Netsuite integration provide user data? Question/Issue: Does the Netsuite integration provide user data? No, the Netsuite integration only syncs transactions, not users. # Page Title Q&A: Does the Tableau integration work with MFA enabled? ## Page URL https://support.toriihq.com/hc/en-us/articles/17251517825179-Q-A-Does-the-Tableau-integration-work-with-MFA-enabled ## Page Description Question/Issue: Does the Tableau integration work with MFA enabled? Resolution: Yes, you must use a Personal Access Token (PAT). Here is ## Details ### How can we help? ### Q&A: Does the Tableau integration work with MFA enabled? Question/Issue: Does the Tableau integration work with MFA enabled? Yes, you must use a Personal Access Token (PAT). Here is an article that explains how to do so: https://help.toriihq.com/en/articles/5036653-tableau-integration # Page Title Q&A: Does Torii have an integration for on-premise Active Directory? ## Page URL https://support.toriihq.com/hc/en-us/articles/22741134659867-Q-A-Does-Torii-have-an-integration-for-on-premise-Active-Directory ## Page Description Question/Issue: Q&A: Does Torii have an integration for on-premise Active Directory? Resolution: Torii integrates with Azure Active ## Details ### How can we help? ### Q&A: Does Torii have an integration for on-premise Active Directory? Question/Issue: Torii integrates with Azure Active Directory (Azure AD) but does not directly integrate with on-premises Active Directory. # Page Title Q&A: How can I avoid the workflow from stopping if an action fails? ## Page URL https://support.toriihq.com/hc/en-us/articles/4823811808923-Q-A-How-can-I-avoid-the-workflow-from-stopping-if-an-action-fails ## Page Description Question/Issue: How can I avoid the workflow from stopping if an action fails? Resolution: Continue workflow on error You can control the ## Details ### How can we help? ### Q&A: How can I avoid the workflow from stopping if an action fails? Question/Issue: How can I avoid the workflow from stopping if an action fails? Continue workflow on error You can control the execution flow on errors per action by enabling or disabling the Continue workflow on the error toggle. If the action is configured to Continue workflow on error, then the workflow will continue executing the next action. The workflow status will be marked as Completed with errors. If the action is not configured to Continue workflow on error, then the workflow will stop. The workflow status will be marked as Error. # Page Title Q&A: How Can I View the Workflow Execution Log? ## Page URL https://support.toriihq.com/hc/en-us/articles/4823365272731-Q-A-How-Can-I-View-the-Workflow-Execution-Log ## Page Description Question/Issue: How Can I View the Workflow Execution Log? Resolution: Workflow audit log The workflow execution log can be viewed by ## Details ### How can we help? ### Q&A: How Can I View the Workflow Execution Log? Question/Issue: How Can I View the Workflow Execution Log? If the workflow has not yet been executed, then the Triggered column will show the dash (-) sign. # Page Title Q&A: How do I pre-approve the Torii application in the Zoom marketplace solely for my integration user and not the entire org? ## Page URL https://support.toriihq.com/hc/en-us/articles/17604852012443-Q-A-How-do-I-pre-approve-the-Torii-application-in-the-Zoom-marketplace-solely-for-my-integration-user-and-not-the-entire-org ## Page Description Question: How do I pre-approve the Torii application in the Zoom marketplace solely for my integration user and not the entire org? ## Details ### How can we help? ### Q&A: How do I pre-approve the Torii application in the Zoom marketplace solely for my integration user and not the entire org? How do I pre-approve the Torii application in the Zoom marketplace solely for my integration user and not the entire org? For additional information, please contact Zoom support. # Page Title Q&A: How does Torii ensure all apps are up to date? ## Page URL https://support.toriihq.com/hc/en-us/articles/17996114399387-Q-A-How-does-Torii-ensure-all-apps-are-up-to-date ## Page Description Question/Issue: How does Torii ensure all Apps details are up to date? Resolution: Apps are constantly changing and we cannot ## Details ### How can we help? ### Q&A: How does Torii ensure all apps are up to date? Question/Issue: How does Torii ensure all Apps details are up to date? Apps are constantly changing and we cannot guarantee 100% accuracy. However, Torii technology and data analysts constantly review existing and new apps and update Torii App Database on a daily basis. Customers may submit requests to update/change apps and those are being updated usually within 24 hours. # Page Title Q&A: How is an app with no users discovered? ## Page URL https://support.toriihq.com/hc/en-us/articles/17229045120667-Q-A-How-is-an-app-with-no-users-discovered ## Page Description Question/Issue: How is an app with no users discovered? Resolution: An app can have no users: If it was picked up from an expense ## Details ### How can we help? ### Q&A: How is an app with no users discovered? Question/Issue: How is an app with no users discovered? An app can have no users: # Page Title Q&A: How to exclude emails from workflows? ## Page URL https://support.toriihq.com/hc/en-us/articles/19811353540763-Q-A-How-to-exclude-emails-from-workflows ## Page Description Question/Issue: How to exclude emails from workflows? In the "inactive license" workflow, is there a way to exclude a list of ## Details ### How can we help? ### Q&A: How to exclude emails from workflows? Question/Issue: How to exclude emails from workflows? In the "inactive license" workflow, is there a way to exclude a list of emails? Create Asana task if the license is inactive but ignore it if it's one of these emails. Torii does not support distribution lists in the "Send email" action. You should either add emails 1 by 1, or look for a common attribute for all emails, e.g user email contains X.IF ELSE branch action would be: Branch 1 - If user email contains X (no action) None met - create Asana task # Page Title Q&A: I'm logged into the browser extension in Chrome and Edge, but only one user is showing up in the browser extension report. ## Page URL https://support.toriihq.com/hc/en-us/articles/20270309509147-Q-A-I-m-logged-into-the-browser-extension-in-Chrome-and-Edge-but-only-one-user-is-showing-up-in-the-browser-extension-report ## Page Description Question/Issue: I'm logged into the browser extension in Chrome and Edge, but only one user is showing up in the browser extension ## Details ### How can we help? ### Q&A: I'm logged into the browser extension in Chrome and Edge, but only one user is showing up in the browser extension report. Question/Issue: I'm logged into the browser extension in Chrome and Edge, but only one user is showing up in the browser extension report. The browser extension report will only show the icon of the last browser extension to sync its data to Torii. # Page Title Q&A: I’ve updated a Google Workspace (G Suite) user, the Torii workflow ran, but I can’t see the update in Torii, why is that? ## Page URL https://support.toriihq.com/hc/en-us/articles/4823032420123-Q-A-I-ve-updated-a-Google-Workspace-G-Suite-user-the-Torii-workflow-ran-but-I-can-t-see-the-update-in-Torii-why-is-that ## Page Description Question/Issue: I’ve updated a Google Workspace (G Suite) user, the Torii workflow ran, but I can’t see the update in Torii, why is that? ## Details ### How can we help? ### Q&A: I’ve updated a Google Workspace (G Suite) user, the Torii workflow ran, but I can’t see the update in Torii, why is that? Question/Issue: I’ve updated a Google Workspace (G Suite) user, the Torii workflow ran, but I can’t see the update in Torii, why is that? By default Torii syncs data from Google Workspace (G Suite) every 24 hours. You can go to the integrations page and click the "Sync Now" button to see the updated data reflected in Torii. # Page Title Q&A: If an App Owner is offboarded will the IT team will get a notification to update all of the app owner's Apps? ## Page URL https://support.toriihq.com/hc/en-us/articles/17365614650139-Q-A-If-an-App-Owner-is-offboarded-will-the-IT-team-will-get-a-notification-to-update-all-of-the-app-owner-s-Apps ## Page Description Question/Issue: If an App Owner is offboarded will the IT team get a notification to update all of the app owner's Apps? Resolution: ## Details ### How can we help? ### Q&A: If an App Owner is offboarded will the IT team will get a notification to update all of the app owner's Apps? Question/Issue: If an App Owner is offboarded will the IT team get a notification to update all of the app owner's Apps? Currently, the answer is NO. There should not be any error as sometimes employees who are also app owners leave the org, but their apps are in a closed state or these employees were the only users of these apps, hence no error should be made, but for other occasions maybe there should be a notification for the IT. Near future: We will be adding to the Workflows triggers the ability to check if an employee is an app owner, so our customers can set workflows to accommodate their process accordingly. Feedback item: https://airtable.com/appHUTvmPMcNANJ9s/tbl5sCMUHdYleLexk/viws67Nn5uW3AaNf8/recn37UjTtTdMpznx?blocks=hide # Page Title Q&A: If I accidentally offboard a User, how can I undo that? ## Page URL https://support.toriihq.com/hc/en-us/articles/17981029894811-Q-A-If-I-accidentally-offboard-a-User-how-can-I-undo-that ## Page Description Question/Issue: If I accidentally offboard a User, how can I undo that? Resolution: Yes. Go to Offboarding > Done and click on the ## Details ### How can we help? ### Q&A: If I accidentally offboard a User, how can I undo that? Question/Issue: If I accidentally offboard a User, how can I undo that? Yes. Go to Offboarding > Done and click on the User's name>> Click on "Re-Open" under their name at the top and Torii will remove the 'Offboarded' flag. Can I undo a user offboarding? # Page Title Q&A: If we make changes to the custom field name, will the changes be reflected in Torii automatically? ## Page URL https://support.toriihq.com/hc/en-us/articles/17387448428315-Q-A-If-we-make-changes-to-the-custom-field-name-will-the-changes-be-reflected-in-Torii-automatically ## Page Description Question/Issue: If we make changes to the custom field names will the changes be reflected in Torii automatically? Resolution: No. It ## Details ### How can we help? ### Q&A: If we make changes to the custom field name, will the changes be reflected in Torii automatically? Question/Issue: If we make changes to the custom field names will the changes be reflected in Torii automatically? No. It would be best to update (Torii Support) to add the fields after settled on the names, as the Support would likely need to recreate them after renaming. # Page Title Q&A: Is it possible to filter expenses by the integration name if multiple integrations are connected for the same app? ## Page URL https://support.toriihq.com/hc/en-us/articles/17289960821787-Q-A-Is-it-possible-to-filter-expenses-by-the-integration-name-if-multiple-integrations-are-connected-for-the-same-app ## Page Description Question/Issue: Is it possible to filter expenses by the integration name if multiple integrations are connected for the same app? ## Details ### How can we help? ### Q&A: Is it possible to filter expenses by the integration name if multiple integrations are connected for the same app? Question/Issue: Is it possible to filter expenses by the integration name if multiple integrations are connected for the same app? No; a feature request has been submitted here: https://airtable.com/appHUTvmPMcNANJ9s/tbl5sCMUHdYleLexk/viws67Nn5uW3AaNf8/reck7Tcrl9V0yNgVg?blocks=hide # Page Title Q&A: Is it possible to set the contract's currency through the API? ## Page URL https://support.toriihq.com/hc/en-us/articles/17278708952731-Q-A-Is-it-possible-to-set-the-contract-s-currency-through-the-API ## Page Description Question/Issue: Is it possible to set a contract's currency through the API? Resolution: At this time there is no way to change a ## Details ### How can we help? ### Q&A: Is it possible to set the contract's currency through the API? Question/Issue: Is it possible to set a contract's currency through the API? At this time there is no way to change a contract's currency via the API, only via the user interface. # Page Title Q&A: Is it possible to use the same custom Access Request Policy for multiple apps? ## Page URL https://support.toriihq.com/hc/en-us/articles/17260411754779-Q-A-Is-it-possible-to-use-the-same-custom-Access-Request-Policy-for-multiple-apps ## Page Description Question/Issue: Is it possible to use the same custom Access Request Policy for multiple apps? Resolution: No, it's not possible to have ## Details ### How can we help? ### Q&A: Is it possible to use the same custom Access Request Policy for multiple apps? Question/Issue: Is it possible to use the same custom Access Request Policy for multiple apps? No, it's not possible to have multiple applications associated with a custom access request policy. The default policy can cover multiple apps but any custom policy is dedicated to one app each. # Page Title Q&A: Is MFA supported for 1Password? ## Page URL https://support.toriihq.com/hc/en-us/articles/17228744837659-Q-A-Is-MFA-supported-for-1Password ## Page Description Question/Issue: Is MFA supported for 1Password? Resolution: Yes, it is supported by using the 1Password SCIM Bridge integration. The ## Details ### How can we help? ### Q&A: Is MFA supported for 1Password? Question/Issue: Is MFA supported for 1Password? Yes, it is supported by using the 1Password SCIM Bridge integration. The regular 1Password integration is the recommended one to use. It does not support 1Password accounts with MFA due to 1Password's user management API limitations. When 1Password provides such capabilities, Torii will be the first to adapt them. # Page Title Q&A: Is the Torii browser extension supported in Safari? ## Page URL https://support.toriihq.com/hc/en-us/articles/12010702230043-Q-A-Is-the-Torii-browser-extension-supported-in-Safari ## Page Description Question/Issue: Is the Torii browser extension supported in Safari? Environment: Safari Browser (Any/All Versions) Resolution: There ## Details ### How can we help? ### Q&A: Is the Torii browser extension supported in Safari? Question/Issue: Is the Torii browser extension supported in Safari? Safari Browser (Any/All Versions) There are technical limitations preventing the viability of developing a SaaS management extension on Apple's platform and is therefore NOT supported. Are there plans to support the browser extension in Safari? Why isn't the browser extension supported in Safari? # Page Title Q&A: Is there a character limit on the 'Description' of an expense? ## Page URL https://support.toriihq.com/hc/en-us/articles/17260490428059-Q-A-Is-there-a-character-limit-on-the-Description-of-an-expense ## Page Description Question/Issue: Is there a character limit on the 'Description' of an expense? Resolution: Yes, there is a limit of 1024 characters. ## Details ### How can we help? ### Q&A: Is there a character limit on the 'Description' of an expense? Question/Issue: Is there a character limit on the 'Description' of an expense? Yes, there is a limit of 1024 characters. # Page Title Q&A: Is there a difference between the "license not in use" trigger and the "user meets criteria" trigger? ## Page URL https://support.toriihq.com/hc/en-us/articles/17370471645723-Q-A-Is-there-a-difference-between-the-license-not-in-use-trigger-and-the-user-meets-criteria-trigger ## Page Description Question/Issue: Is there a difference between the "license not in use" trigger and the "user meets criteria" trigger? ## Details ### How can we help? ### Q&A: Is there a difference between the "license not in use" trigger and the "user meets criteria" trigger? Question/Issue: Is there a difference between the "license not in use" trigger and the "user meets criteria" trigger? There is a difference between the "license not in use" trigger and the "user meets criteria" trigger. In the "license not in use" trigger, we filter based on the last utilized date of the license. On the other hand, the "user meets criteria" trigger filters based on the "last used date," which refers to the most recent date the user interacted with the application in general. # Page Title Q&A: What are The Different Action Statuses? ## Page URL https://support.toriihq.com/hc/en-us/articles/4823311702555-Q-A-What-are-The-Different-Action-Statuses ## Page Description Question/Issue: What are The Different Action Statuses? Resolution: Each action can be in one of the following statuses: In progress - ## Details ### How can we help? ### Q&A: What are The Different Action Statuses? Question/Issue: What are The Different Action Statuses? Each action can be in one of the following statuses: In progress - the action is still in progress or waiting for a user to complete a task (e.g. complete a form) Completed - the action has been completed successfully Error - the action has ended with errors # Page Title Q&A: What are The Different Workflow Statuses? ## Page URL https://support.toriihq.com/hc/en-us/articles/4823094475675-Q-A-What-are-The-Different-Workflow-Statuses ## Page Description Question/Issue: What are The Different Workflow Statuses? Resolution: Each workflow can be in one of the following statuses: In ## Details ### How can we help? ### Q&A: What are The Different Workflow Statuses? Question/Issue: What are The Different Workflow Statuses? Each workflow can be in one of the following statuses: In progress - the workflow is in progress and has not completed its last action Completed - all workflow actions have been completed successfully Completed with errors - the workflow has been completed, but some actions were completed with error Error - the workflow has stopped due to a failed action that was not configured to continue on error # Page Title Q&A: What Happens If a Workflow Action has Failed? ## Page URL https://support.toriihq.com/hc/en-us/articles/4823770705691-Q-A-What-Happens-If-a-Workflow-Action-has-Failed ## Page Description Question/Issue: What Happens If a Workflow Action has Failed? Resolution: Workflow error behavior If the action is configured to ## Details ### How can we help? ### Q&A: What Happens If a Workflow Action has Failed? If the action is configured to Continue workflow on error, then the workflow will continue and execute the next action. The workflow status will be marked as Completed with errors. If the action is not configured to Continue workflow on error, then the workflow will stop. The workflow status will be marked as Error. # Page Title Q&A: What happens if I edit a workflow while there is an active execution running? ## Page URL https://support.toriihq.com/hc/en-us/articles/23923033314715-Q-A-What-happens-if-I-edit-a-workflow-while-there-is-an-active-execution-running ## Page Description Question/Issue: What happens if I edit a workflow while there is an active execution running? Resolution: When a workflow is triggered, ## Details ### How can we help? ### Q&A: What happens if I edit a workflow while there is an active execution running? Question/Issue: What happens if I edit a workflow while there is an active execution running? When a workflow is triggered, any configuration changes that occur while it is running will not affect it. This means that if you edit an action, remove an action, or even disable the workflow, executions that have already been triggered will not stop and will continue running based on the original workflow configuration. The only exception is when a workflow is deleted. Deleting a workflow removes all its execution history and stops any executions that are in progress. # Page Title Q&A: What timezone are the internal database timestamps in? ## Page URL https://support.toriihq.com/hc/en-us/articles/17260441180187-Q-A-What-timezone-are-the-internal-database-timestamps-in ## Page Description Question/Issue: What timezone are the internal database timestamps in? Resolution: Coordinated Universal Time (UTC) ## Details ### How can we help? ### Q&A: What timezone are the internal database timestamps in? Question/Issue: What timezone are the internal database timestamps in? Coordinated Universal Time (UTC) # Page Title Q&A: Which currencies can be set as contract currencies? ## Page URL https://support.toriihq.com/hc/en-us/articles/17287240600219-Q-A-Which-currencies-can-be-set-as-contract-currencies ## Page Description Question/Issue: Which currencies can be set as contract currencies? Resolution: All currencies are supported. References: ## Details ### How can we help? ### Q&A: Which currencies can be set as contract currencies? Question/Issue: Which currencies can be set as contract currencies? All currencies are supported. https://support.toriihq.com/hc/en-us/articles/5130361788187-Which-Currencies-are-Supported- # Page Title Q&A: Why are Actions In-Progress For a Long Time? ## Page URL https://support.toriihq.com/hc/en-us/articles/4823360053147-Q-A-Why-are-Actions-In-Progress-For-a-Long-Time ## Page Description Question/Issue: Why are Actions In-Progress For a Long Time? Resolution: There are three scenarios in which actions can be in the ## Details ### How can we help? ### Q&A: Why are Actions In-Progress For a Long Time? Question/Issue: Why are Actions In-Progress For a Long Time? There are three scenarios in which actions can be in the "In progress" state for a long time: The action is waiting for a user input. For example, a "Send application form" is waiting for an employee to complete the form. The action takes a long time to complete. For example, Transfer Google Workspace (G Suite) Docs and Drive data may take a long time to complete, depending on the amount of data. The action has failed due to a temporary error. For example, the SaaS provider returned a "temporarily unavailable" status code. In this case, Torii will try to perform several retries to overcome the temporary error. # Page Title Q&A: Why does a workflow run at a different time than I set in the schedule? ## Page URL https://support.toriihq.com/hc/en-us/articles/22866196740891-Q-A-Why-does-a-workflow-run-at-a-different-time-than-I-set-in-the-schedule ## Page Description Question/Issue: Why does a workflow run at a different time than I set in the schedule? Resolution: The time presented on the Workflow ## Details ### How can we help? ### Q&A: Why does a workflow run at a different time than I set in the schedule? Question/Issue: Why does a workflow run at a different time than I set in the schedule? The time presented on the Workflow execution log is UTC. Workflow schedule times # Page Title Q&A: Why does the Browser Extension Report show certain users as having 'Never Reported'? ## Page URL https://support.toriihq.com/hc/en-us/articles/18497484974875-Q-A-Why-does-the-Browser-Extension-Report-show-certain-users-as-having-Never-Reported ## Page Description Question/Issue: Why do some users (who have signed into the browser extension) still have a status of 'Never Reported'? Background: ## Details ### How can we help? ### Q&A: Why does the Browser Extension Report show certain users as having 'Never Reported'? Question/Issue: Why do some users (who have signed into the browser extension) still have a status of 'Never Reported'? After enabling the browser extension and getting the "You are all set!" message, the user's status in the report is still showing like it isn't enabled. The Chrome version wasn't up to date. Updating the Chrome version to the latest version solves the problem. # Page Title Q&A: Why is Confluence usage not being picked up by the browser extension? ## Page URL https://support.toriihq.com/hc/en-us/articles/17440918065179-Q-A-Why-is-Confluence-usage-not-being-picked-up-by-the-browser-extension ## Page Description Question/Issue: Why is Confluence usage not being picked up by the browser extension? Cause: Our browser extension has tracking disabled ## Details ### How can we help? ### Q&A: Why is Confluence usage not being picked up by the browser extension? Question/Issue: Why is Confluence usage not being picked up by the browser extension? Our browser extension has tracking disabled for Confluence. Usage and logins must come from another source. # Page Title Q&A: Why is the last used date not being picked up by our Asana integration? ## Page URL https://support.toriihq.com/hc/en-us/articles/17287542927259-Q-A-Why-is-the-last-used-date-not-being-picked-up-by-our-Asana-integration ## Page Description Question/Issue: Why is the last used date not being picked up by our Asana integration? Cause: Our Asana integration does not gather Last ## Details ### How can we help? ### Q&A: Why is the last used date not being picked up by our Asana integration? Question/Issue: Why is the last used date not being picked up by our Asana integration? Our Asana integration does not gather Last Used Date for users. Not currently supported by our integration. # Page Title Q&A: Why is there a Separate Offboarding Page vs workflows? ## Page URL https://support.toriihq.com/hc/en-us/articles/5190172172187-Q-A-Why-is-there-a-Separate-Offboarding-Page-vs-workflows ## Page Description Question/Issue: Why is there a Separate Offboarding Page vs workflows? Resolution: The offboarding page lets you control the behavior ## Details ### How can we help? ### Q&A: Why is there a Separate Offboarding Page vs workflows? Question/Issue: Why is there a Separate Offboarding Page vs workflows? The offboarding page lets you control the behavior of Torii's built-in offboarding workflow. The value of Torii's offboarding workflow is the ability to execute offboarding actions for all of the user's applications without the need to specify them individually each time. # Page Title Q&A: why the View Actions page doesn't show all the latest workflows? ## Page URL https://support.toriihq.com/hc/en-us/articles/19508770883099-Q-A-why-the-View-Actions-page-doesn-t-show-all-the-latest-workflows ## Page Description Question/Issue: Why the View Actions page doesn't show all the latest workflow actions? Cause: The View Actions page only shows manual ## Details ### How can we help? ### Q&A: why the View Actions page doesn't show all the latest workflows? Question/Issue: Why the View Actions page doesn't show all the latest workflow actions? The View Actions page only shows manual actions that were executed manually (and not as part of a workflow). Our Product team is aware that this is confusing and we have a release in the backlog to change that and create a unified log. # Page Title Q&A: Why we are getting "insufficient permissions" error in Salesforce Integration? ## Page URL https://support.toriihq.com/hc/en-us/articles/17912724303387-Q-A-Why-we-are-getting-insufficient-permissions-error-in-Salesforce-Integration ## Page Description Question/Issue: Getting "insufficient permissions" after connecting Salesforce Integration for the first time as read-only with ## Details ### How can we help? ### Q&A: Why we are getting "insufficient permissions" error in Salesforce Integration? Question/Issue: Getting "insufficient permissions" after connecting Salesforce Integration for the first time as read-only with the goal of getting usage data. The runtime error is:Object type 'Organization' is not supported. Enable the "View Setup and Configuration" permission for the integration user. Then reconnect the integration and the sync should complete. Note: It's the same process that you followed in the Usage Prerequisites section but instead of looking for API Enabled/View Event Log Files, you will want to enable "View Setup and Configuration." # Page Title Q&A: Why we are missing Google Groups in a workflow list? ## Page URL https://support.toriihq.com/hc/en-us/articles/17486139134235-Q-A-Why-we-are-missing-Google-Groups-in-a-workflow-list ## Page Description Question/Issue: Why we are missing Google Groups in a workflow list? Cause: Searching the Group by its Google email address and not by ## Details ### How can we help? ### Q&A: Why we are missing Google Groups in a workflow list? Question/Issue: Why we are missing Google Groups in a workflow list? Searching the Group by its Google email address and not by its Google Group name. Google groups in Torii Worfkows are listed in the Google Group Name, and not by their email address. For example, the Google Group with the email itteam@rgtoriitest.org is listed in Torii Workflow Google Groups as 'it group rgt'. From Torii workflows: # Page Title Q&A: Will non-managed users be seen by the Atlassian or Jira Cloud integrations? ## Page URL https://support.toriihq.com/hc/en-us/articles/17286918891291-Q-A-Will-non-managed-users-be-seen-by-the-Atlassian-or-Jira-Cloud-integrations ## Page Description Question/Issue: Will non-managed users be seen by the Atlassian or Jira Cloud integrations? Resolution: No; only managed users will be ## Details ### How can we help? ### Q&A: Will non-managed users be seen by the Atlassian or Jira Cloud integrations? Question/Issue: Will non-managed users be seen by the Atlassian or Jira Cloud integrations? No; only managed users will be seen by our integration. https://support.toriihq.com/hc/en-us/articles/5169138420763-Atlassian-and-Jira-Cloud-Integrations-A-deeper-look # Page Title Qualys Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/6263258534299-Qualys-Integration ## Page Description Overview Torii integrates with Qualys and syncs the users: Role, Status, and last used date. Connect Qualys integration to Torii ## Details ### How can we help? ### Qualys Integration Torii integrates with Qualys and syncs the users: Role, Status, and last used date. Connect Qualys integration to Torii To connect Qualys to Torii, follow these steps: # Page Title Quickbooks Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166368162843-Quickbooks-Integration ## Page Description Set up the Quickbooks integration to get a complete overview of all SaaS expenses. Torii integrates with Quickbooks and analyzes SaaS ## Details ### How can we help? ### Quickbooks Integration Torii integrates with Quickbooks and analyzes SaaS expenses. Torii will automatically match transactions to the correct application, summarize expenses and provide insights.Torii syncs transaction data up to one year prior to first connection date. Connect Quickbooks from the Integrations page. Torii syncs transactions of type Bill and Expense from your Quickbooks account and matches SaaS related expenses to their respective app on Torii. The following fields of transactions are used for mapping the expense to the correct application: name and memo. Q: I am interested in expense data that is older than what Torii brings in from this integration. Is there a way to get more than one year of data synced into Torii? A: While we we only sync a year of expense data upon connection of this integration in Torii by default, we can bring in data from any time point. If you are interested in getting data from an expanded time frame, please contact Torii's support team and we will be happy to help you with this. Please note, syncing data for a lengthy time period can bring back a lot of data, which can take a significant amount of time to sync (up to a several days, depending on the period of time back you are interested in). # Page Title Ramp Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/35252942870299-Ramp-Integration ## Page Description Overview Torii integrates with Ramp and analyzes SaaS expenses: Default synced transaction types Fields used for expense matching ## Details ### How can we help? ### Ramp Integration Torii integrates with Ramp and analyzes SaaS expenses: ##### Accounts & Permissions #### Create a Ramp API Application #### How to Connect the Ramp Integration #### Additional Notes Q: I am interested in expense data that is older than what Torii brings in from this integration. Is there a way to get more than one year of data synced into Torii? A: While Torii only syncs one year of expense data by default upon first connection, we may be able to import older records manually. Please contact Torii Support to request historical data import. Note that syncing longer periods may take significant time. # Page Title Real-Time Offboarding ## Page URL https://support.toriihq.com/hc/en-us/articles/14384429548059-Real-Time-Offboarding ## Page Description Overview Ensuring employee access to apps is promptly terminated upon departure is essential for maintaining organizational security. ## Details ### How can we help? ### Real-Time Offboarding Ensuring employee access to apps is promptly terminated upon departure is essential for maintaining organizational security. Torii simplifies this process by allowing IT to offboard employees in real-time automatically. Torii can trigger workflows and update user lifecycle statuses by listening for key app events, facilitating efficient and effective offboarding. The functionality is currently available for Google Workspace, Okta and BambooHR only. Make sure you enable the relevant scopes for Google, Okta and BambooHR. Please note: The BambooHR feature is still in beta. #### Sync and Real-time offboarding However, to ensure that user lifecycle data remains up-to-date, we continually monitor critical events that are crucial for initiating offboarding and update the information related to these events in real time within Torii. BambooHR (beta) Torii only monitors sudden employee terminations. Specifically, the event captures cases where a user’s employment status is changed to "terminated" and the termination date is set to today, or a past date. For users with a planned termination and a future termination date, updates will occur every 24 hours during the daily sync once the termination date arrives. However, for users with an immediate termination, we will update the BambooHR employment status and BambooHR termination date attributes in Torii in real time. #### Adding users to the Offboarding To-Do list While you can manually trigger employee offboarding from the To-do list, we highly recommend leveraging Torii's "App Event" trigger to automate the process entirely. By relying on Torii automation, you can achieve a more efficient and effective offboarding experience that requires minimal intervention. Note that BambooHR operates differently from Google Workspace and Okta. Users will not be marked as "Past Users" in real time and will only be added to the Offboarding To-Do list one day after they are marked as terminated in BambooHR. For real-time offboarding with BambooHR, it is essential to rely on Torii’s automation to trigger the process immediately upon termination. #### App Event trigger and Real-time offboarding Workflows that use the App Event trigger will be triggered immediately whenever a selected Google, Okta or BambooHR event occurs. Select the Application, Application account, and Event to set up the trigger. Add an action, in this case, "Start employee offboarding." Note that Google Workspace, Okta and BambooHR do not have to be selected as a user lifecycle source of truth in Torii to use this trigger. Q: Will workflows with "User left' and "User meets criteria" triggers that rely on Google Workspace, Okta or BambooHR attributes be triggered in real time? A: Despite the User attributes being updated in real-time, it might take up to 1h for workflows with state-based triggers to be initiated. Use the "App event" trigger to trigger workflows in real-time. Please note that "User left" workflows will not be triggered in real time for BambooHR, as we do not mark a user as past in real time when BambooHR is set as the user lifecycle source of truth. However, "User meets criteria" workflows with the filters "BambooHR employment status is terminated" and "BambooHR termination date is today" will be triggered within 1 hour, but only for users whose termination is immediately effective. # Page Title Recommendations ## Page URL https://support.toriihq.com/hc/en-us/articles/12141142114971-Recommendations ## Page Description Recommendations are part of the "licenses" page and play a big role in the cost-saving considerations. Here you will find a ## Details ### How can we help? ### Recommendations Recommendations are part of the "licenses" page and play a big role in the cost-saving considerations. Here you will find a collection of actionable recommendations that will help you optimize your license utilization and save on SaaS spending.Our recommendations are based on feature-level usage and are carefully curated to help you identify the most relevant cost savings opportunities. ##### Available recommendations The following recommendation types are currently available: The recommendations are available for Zoom, Salesforce, Asana, Zendesk, Miro, Calendly, Monday, Smartsheet, Lastpass, Freshservice, and Airtable. More apps will be supported soon. Each recommendation consists of the following: Recommendation detailsOn the recommendation details page, you will be able to: # Page Title Recommended Videos for App Owners ## Page URL https://support.toriihq.com/hc/en-us/articles/11292091686171-Recommended-Videos-for-App-Owners ## Page Description Where Does Torii Get Its Data? To Renew or Not to Renew License Running a Single Action ## Details ### How can we help? ### Recommended Videos for App Owners # Page Title Redgate Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/28373860890779-Redgate-Integration ## Page Description Overview Torii integrates with your Redgate account and syncs the following information: User Fields License Types User (Email) ## Details ### How can we help? ### Redgate Integration Torii integrates with your Redgate account and syncs the following information: ##### Accounts & permissions #### Connect Redgate Integration Click on Connect. Enter your Redgate User name and Password and click Connect. Once the integration is connected and synced, a green checkbox will be displayed. # Page Title Redis Labs Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/7568018354587-Redis-Labs-Integration ## Page Description Set up Redis Labs integration and get all the insights in Torii's dashboard Overview Torii integrates with your Redis Labs account and ## Details ### How can we help? ### Redis Labs Integration Torii integrates with your Redis Labs account and syncs the users: names, IDs, emails, roles, status, licenses statusNote that Torii supports multiple Redis Labs accounts To get the Account key you need an account associated with the Redis Enterprise Cloud subscription. #### Connect Redis Labs integration to Torii Once the integration is connected and synced, it will display a green checkbox # Page Title Refining Application Discovery ## Page URL https://support.toriihq.com/hc/en-us/articles/18676256770971-Refining-Application-Discovery ## Page Description Overview As your SaaS system of truth, Torii automatically discovers applications from multiple sources. This allows Torii to create an ## Details ### How can we help? ### Refining Application Discovery As your SaaS system of truth, Torii automatically discovers applications from multiple sources. This allows Torii to create an accurate, rich & complete mapping of your organization's SaaS stack. In rare cases, you may come across an application used in your organization that is missing from your Torii environment. This article will help you understand how Torii’s app mapping works, how to find these apps, present them in Torii, and get access to their data. #### Torii app mapping Torii finds all third-party applications in your SaaS stack and matches them to relevant apps in our state-of-the-art database using AI. Using this method, we reduce noise from non-business apps and allow you to focus on managing what matters. With Torii’s app matching capability, you are empowered to customize Torii’s mapping by making any manual changes that fit your needs - whether it’s showing apps we cleaned up for you, removing information from test accounts within your tenant, or any other relevant use cases. #### Discovered apps In addition to the curated list of SaaS apps found in the Review tab in the Applications page, Torii provides access to the full list of discovered apps within your environment, as well as the ability to manually match them to the correct apps - and even create custom apps to fit any need. You can access the list of applications discovered by Torii in two ways: In these pages, you can easily find all applications that Torii has discovered, and make any customizations you need to fit your organization’s needs. In addition, you can manually match an undisplayed app to manage it within Torii. Any changes made will be updated in your Torii environment after a short automatic sync. The current list of applications from which Torii discovers additional apps are: Q: I am not able to find a specific application in the Refine tab that does appear in the Review tab in the Applications page. Why is this? A: Apps discovered through Torii’s browser extension will not be shown in the refine tab and cannot by mapped by Torii customers. Q: The “Discovery date” for my apps is very recent, but I’ve been using Torii for a while now. Why is that? A: The “Discovery date” is measured from the release of this feature. It will not accurately show previously found app dates, but will be accurate for all newly discovered apps going forward. Q: There is an app I know my organization is using, but I can’t find it in the Applications -> Review tab. Why is Torii not recognizing this app? A: Torii’s smart discovery capabilities are extensive, but, there are two known cases where an app you’re expecting to see could be missing: Q: Under the Refine tab, why are there multiple instances of the same app from the same source? A: This can happen due to two reasons: Q: I manually matched a discovered app in the Refine tab that did not previously appear in the Review tab, but it is not showing as a discovered app in the Torii. Why is that? A: This can happen for a number of reasons: # Page Title Renewal Forecast ## Page URL https://support.toriihq.com/hc/en-us/articles/31994369436443-Renewal-Forecast ## Page Description Overview Effective management of SaaS subscription renewals is crucial for IT and procurement managers aiming to maximize cost savings. A ## Details ### How can we help? ### Renewal Forecast Effective management of SaaS subscription renewals is crucial for IT and procurement managers aiming to maximize cost savings. A critical aspect of this process is accurately forecasting the number of licenses needed for the next contract term. Our Renewal Forecast tool is designed to streamline the license rightsizing process, ensuring you're well-prepared for vendor negotiations and can optimize both efficiency and savings at renewal time. Available for customers on the Enterprise plan The renewal forecast is a step by step flow that is analyzing the licenses you've purchased vs. what you actually use to then generate a forecast of the number of licenses you'd need and which ones can be reclaimed. ##### When and where to start We recommend to start preparing for the renewal 120 days in advance. For all apps renewing in the next 120 days' you'll see in the Overview tab of each app, a renewal coming soon notice followed by a "Start renewal forecast" button. Click it to access the Renewal Forecast wizard. You can also access forecasts through renewal notification emails or the renewal calendar. Clicking "Start Renewal Forecast" launches a wizard that guides you through creating the renewal forecast report. The wizard consists of 3 steps: Begin by checking your user list for correctness and completeness to form a solid foundation for your forecast. An initial check will indicate whether the data is sufficient, requires enrichment, or is incomplete. In some cases, data may be marked as needing enrichment for the following reasons: If the license data appears accurate enough, you may still proceed despite these warnings. However, if the data completeness check indicates missing license data, you'll need to import a user file with license data to continue. Make sure each user-assigned license has both the Annual Cost and Total Licenses recorded. This data is essential for estimating savings and identifying any unassigned licenses. To find these details, use the "Related Contracts" button to view all the contract PDFs tied to your non-closed contracts. Locate the order form with the purchased line item details, match these to their corresponding licenses, and enter the cost and total amount accordingly. Complete your process by examining the license forecast, adjusting settings, and sharing the findings. You can see projected cost changes, license count recommendations, and detailed breakdowns. Keep in mind that free licenses are excluded by default. If necessary, adjust the settings at the top to include them in your view. Additionally, you can modify the renewal buffer, which allows you to set a percentage that accounts for forecasted growth. This means the recommended license count will include not only currently active licenses but also anticipated expansion. To view all users with a specific license, along with their utilization status and suggested adjustments, expand the detailed breakdown section. ##### Export and share For further analysis or sharing, click the "Download to CSV" button. In addition you can share a link to the forecast with stakeholders who have the necessary Torii access. Integrate the license forecast into your organization's renewal workflow to streamline the process. Add a link to the app overview tab (using the [Trigger.Contract.App.Link-to-Torii-overview-page] variable) in your workflow-based renewal notifications, prompting the app owner to generate a renewal forecast. Once the forecast is complete, the app owner can share the link in the Renewals Slack/Teams channel, ensuring everyone has the opportunity to review and collaborate effectively. ##### Q: How is Renewal Forecast different from the license analysis in the Licenses page? A: The Renewal Forecast offers more control over licenses considered, allows data enrichment for all apps, and provides a full utilization breakdown for each license type. ##### Q: Can I do a renewal forecast with users from multiple accounts? A: Not at the moment. The renewal forecast is generated per account and is currently not supported if your users are coming from multiple accounts. ##### Q: Are changes made in the wizard saved? A: Yes, any adjustments are saved in Torii as if made from the licenses page or app users tab. # Page Title Renewal workflow ## Page URL https://support.toriihq.com/hc/en-us/articles/24406273731867-Renewal-workflow ## Page Description This workflow automates the contract renewal process by sending automated renewal notifications, ensuring timely action, and effective ## Details ### How can we help? ### Renewal workflow This workflow automates the contract renewal process by sending automated renewal notifications, ensuring timely action, and effective preparation for upcoming renewals. The high level process is: 1. Trigger the workflow 90 days before the contract renewal date. 2. Check if the contract will auto-renew. 3. Send notification to the contract owner. #### Workflow Overview #### How to Configure the Workflow 1. Click the "New workflow" button and choose "From scratch" from the dropdown menu. 2. Select the Contract meets criteria trigger and click "Next". The new workflow will be created. 3. Configure the trigger. Choose the ideal timeframe to initiate preparations for renewal. We suggest beginning this process 90 days prior to the contract end date. 4. Add the "If/Else branch" action. 6. Create different automation branches for contracts set to auto-renew and those that do not. To do this, click the "Add branch" button in the action configuration panel. 7. Add the filter Contract auto-renewal is Yes. 8. Add another branch and configure it to Contract auto-renewal is No. 9. Add the "Send Slack notification" action under the first branch (that we called Auto Renewal). Configure the action. You can send the notification to either the contract owner or any other stakeholder responsible for the renewal process. In the message mention if the contract will auto-renew. We recommend advising the recipient to reach out to the application owner for further insight on whether the current contract should be renewed unchanged or if there's an opportunity for optimization, such as requiring fewer licenses or negotiating a better price. 10. Add the "Send Slack notification" action under the second branch (that we called Will expire). Configure the action, adjusting the message that will be sent to the contract owner. #### Summary - What to Expect Once you activate this workflow: 1. Torii will continuously evaluate if there are contracts whose renewal date is upcoming in 90 days. 2. Once such a contract is found, Torii will check if the contract will renew automatically, and send a Slack notification to the contract owner, suggesting which actions to take. # Page Title Renewals Yearly Summary Report ## Page URL https://support.toriihq.com/hc/en-us/articles/27435239563675-Renewals-Yearly-Summary-Report ## Page Description Overview Managing SaaS subscription renewals effectively is key for IT and procurement managers striving to maximize cost savings. ## Details ### How can we help? ### Renewals Yearly Summary Report Managing SaaS subscription renewals effectively is key for IT and procurement managers striving to maximize cost savings. However, presenting these achievements to executive stakeholders can be challenging. The Renewals Yearly Summary report is your streamlined solution, offering a clear, visual summary of renewal management year-over-year (YOY). Available for customers on the Enterprise plan Torii analyzes all apps with active contracts for the selected year, comparing their annualized contract values year over year to identify cost increases or decreases. The report offers: The table can be filtered by renewal buckets using the drop down filter menu or by clicking on one of the buckets in the waterfall chart. ##### Renewal buckets After analyzing the annualized contract value, apps are divided into the following renewal buckets: #### Understanding Annualized Contract Value and Year-over-Year Change in Contract Value ##### What is Annualized Contract Value? The Annualized Contract Value (ACV) of a contract is a metric that converts the total value of a contract into an equivalent annual amount. This helps in understanding the yearly financial impact of contracts with varying durations. ##### Why is Annualized Contract Value Important? Calculating the Annualized Contract Value allows you to compare contracts of different lengths on a consistent basis. This is particularly useful for assessing changes in contract value between calendar years, which can indicate cost increases or decreases. ##### How Torii Calculates Annualized Contract Value Torii calculates the Annualized Contract Value for each contract using the following steps: \[\text{Annualized Contract Value} = \left( \frac{\text{Contract Value}}{\text{Contract Length in Months}} \right) \times 12\] ##### Example Calculation If you have a 15-month contract with a total value of $15,000: ##### Calculating Year-over-Year Change in Contract Value To determine the change in contract value between calendar years, Torii follows these steps: ##### Example 1 Calculation - Single Annual Contract Assume you have the following annualized contract values: Annualized Contract Value for Previous Year: $50,000 Annualized Contract Value for Current Year: $55,000 Change in Annualized Contract Value: \[\text{Change in Annualized Contract Value} = 55,000 - 50,000 = 5,000\] This indicates a $5,000 increase in the contract value from the previous year to the current year. ##### Example 2 Calculation - 2 Overlapping Contracts for the Same Period Let's consider a more complex scenario: This indicates a $10,000 increase in the contract value from the previous year to the current year. By calculating the Annualized Contract Value of your contracts and comparing these values between calendar years, you can effectively track changes in your contract expenditures. This helps in budgeting, forecasting, and identifying trends in your vendor costs. The Renewals Yearly Summary report is your go-to tool for presenting your renewal management achievements, making it easy to gain executive support and drive even more significant cost savings. #### Recommended followup actions # Page Title Request Approval Workflow Action ## Page URL https://support.toriihq.com/hc/en-us/articles/4833785835675-Request-Approval-Workflow-Action ## Page Description Overview A commonly used workflow action is to request approval to complete an action for an employee. Common use cases for this would be ## Details ### How can we help? ### Request Approval Workflow Action A commonly used workflow action is to request approval to complete an action for an employee. Common use cases for this would be to start offboarding an employee, removing unused paid licenses or granting access to an application when a user requests it from the app catalog. To do this you would use the "Request approval" action within a workflow or app access policy. #### Action behavior This action will send an email or Slack notification requesting the user to approve or decline a question. Here is a how it would look like when sent via email: Once the message recipient clicks "Approve" the action configured after "Request approved" will run. If the user clicks "Decline" the action configured after "Request declined" will run. To configure the action, take the following steps: #### Action monitoring You will be able to monitor the approval process via the Workflow audit log. The first user who clicks will take precedence. In Slack all other messages will be updated to reflect that the request was already approved or declined. For email messages, if a user clicks a message that was already approved or declined by someone else, they would get a notification. # Page Title Rescale Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/6552550843803-Rescale-Integration ## Page Description Setup your Rescale integration and get the insights in Torii's dashboard Overview Torii integrates with your Rescale account and syncs ## Details ### How can we help? ### Rescale Integration Torii integrates with your Rescale account and syncs the list of users, statuses & emails. #### Connect Rescale integration to Torii From the Integrations page, select the Rescale tile # Page Title Restore Workflow from History ## Page URL https://support.toriihq.com/hc/en-us/articles/32329607686683-Restore-Workflow-from-History ## Page Description The "Restore Workflow from History" feature allows users to effortlessly revert to previous workflow versions from the history ## Details ### How can we help? ### Restore Workflow from History The "Restore Workflow from History" feature allows users to effortlessly revert to previous workflow versions from the history list. This powerful capability ensures that users can quickly recover from mistakes or return to a more effective version of a workflow with just a few clicks, providing enhanced flexibility and control. When viewing a workflow, there are two distinct modes: ### How to Use the Restore Workflow Feature #### Switching to History View Click the View Edit History button to open a dialog displaying all previously saved versions, allowing the user to pick one to view. Once a version is selected, the chosen workflow version is displayed in History View. The Restore button appears at the top of the specific workflow version the user is currently viewing. You can navigate between saved versions using the next/back arrows. Click the Restore button for the version you want to revert to. #### Exiting History View If you want to exit History View without restoring, click the "< Back to Current Version" button. # Page Title RingCentral Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5194843543451-RingCentral-Integration ## Page Description Setup your RingCentral integration and get all the insights in Torii's dashboard Torii integrates with your RingCentral account and ## Details ### How can we help? ### RingCentral Integration Torii integrates with your RingCentral account and syncs the list of users. For adding and removing users your directory provider should be set to SCIM: # Page Title Rippling Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/22767372848411-Rippling-Integration ## Page Description Set up the Rippling integration and get all the insights in Torii's dashboard Overview Torii integrates with Rippling and syncs: User ## Details ### How can we help? ### Rippling Integration Set up the Rippling integration and get all the insights in Torii's dashboard Torii integrates with Rippling and syncs: ##### Accounts & Permissions #### Connect Rippling Integration Q: Can I connect Torii and Rippling via the Rippling app store? A: Yes, the installation process can also be done completely via Rippling's app store, including setting up sing-in to Torii via Rippling SSO. Q: Why does the "Rippling Termination Date" field not show future termination dates? A: This is a known limitation due to a security policy enforced by Rippling. The API does not expose termination dates that are set in the future - only past termination dates are returned. This means Torii will reflect a termination date only after it has passed, and users scheduled for termination will continue to appear as active until their termination date has occurred. # Page Title SaaS Management with Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/4571409213979-SaaS-Management-with-Torii ## Page Description Step-by-step instructions to manage your SaaS Today’s modern enterprises use hundreds of cloud-based software solutions. They have to ## Details ### How can we help? ### SaaS Management with Torii Today’s modern enterprises use hundreds of cloud-based software solutions. They have to if they want to stay relevant. The problem that every company faces is how to centralize and manage the company's software. Torii automatically discovers and maps all cloud applications, licenses, and users. It automates all daily SaaS-related tasks resulting in SaaS cost reductions, less time spent on managing its technology, and improved productivity and internal policies so that you get the most out of your software. This guide will walk you through the steps required to manage your SaaS. They’re listed below: # Page Title Sage Intacct Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/12334080526747-Sage-Intacct-Integration ## Page Description Overview Torii integrates with your Sage Intacct account and syncs the transaction list under Bills in Accounts Payable. Torii syncs ## Details ### How can we help? ### Sage Intacct Integration Torii integrates with your Sage Intacct account and syncs the transaction list under Bills in Accounts Payable. Torii syncs transaction data up to one year prior to first connection date. #### Create a User with Role-Based Security #### Create a Web Service user #### Connect Sage Intacct integration to Torii #### Integration Capabilities You can continuously be updated with application information and actions from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. Q: I am interested in expense data that is older than what Torii brings in from this integration. Is there a way to get more than one year of data synced into Torii? A: While we we only sync a year of expense data upon connection of this integration in Torii by default, we can bring in data from any time point. If you are interested in getting data from an expanded time frame, please contact Torii's support team and we will be happy to help you with this. Please note, syncing data for a lengthy time period can bring back a lot of data, which can take a significant amount of time to sync (up to a several days, depending on the period of time back you are interested in). # Page Title Sailpoint Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/6713728972827-Sailpoint-Integration ## Page Description Set up the Sailpoint integration and get all the insights in Torii's dashboard Overview Torii integrates with Sailpoint and syncs: ## Details ### How can we help? ### Sailpoint Integration Torii integrates with Sailpoint and syncs: #### To connect Sailpoint to Torii, follow the below steps: #### Update the User Lifecycle settings To ensure you get the user lifecycle information in Torii, define Sailpoint as your Identity Provider management system. The users' statuses will be reflected in Torii on the next scheduled sync. # Page Title Salesforce Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5195073819035-Salesforce-Integration ## Page Description Set up your Salesforce integration and get all the insights in Torii's dashboard Overview Torii integrates with Salesforce, syncing: ## Details ### How can we help? ### Salesforce Integration Torii integrates with Salesforce, syncing: Last logged in time Usage: 2 types of usage events:Event Log File: Logs of activity in Salesforce.Login History: Logs of user Logins to Salesforce. ##### Supported user types The Customer Portal Users is not supported, please connect the integration with another user type. ##### Supported license types Torii supports the following license types: Standard User License types, as described here Feature license types: We do not support External types, which are not meant for company employees like: Partner Community, Customer Community, Customer Portal User, Customer Portal Manager, Chatter, and Guest. To sync the feature licenses to Torii, the user who connected the integration must have view/read permissions to ALL of the following fields from the User object: UserPermissionsMobileUser UserPermissionsMarketingUser UserPermissionsLiveAgentUser UserPermissionsInteractionUser UserPermissionsSupportUser #### Usage Prerequisites In order to get usage information, please ensure that the account used to connect the integration has permission to access the EventLogFile and LoginHistory objects. Accessing these objects requires View Event Log Files and API Enabled user permissions. To grant this, follow the steps below. Note: Users with View All Data permission can view event log files. 1. Log into Salesforce 2. Look for Permissions Sets 3. Select the permission set of the user who connected the integration 4. Scroll down to System 5. Click on System Permissions 6. Click the Edit button 7. Check to enable the API Enabled 8. Check to enable the View Event Log Files #### Connecting the Integration 1. Go to the Integrations page. 2. Click Connect. Note: Your Salesforce account can be integrated as "Read-Only" or "Read/Take Action" which is required in order to allow workflows to take action directly through Torii. 4. When redirected, log in to your Salesforce account. You will be requested to approve the following: refreshtoken and offlineaccess - Allows Torii to perform requests on your behalf at any time by enabling a refresh token to be returned when the requesting client is eligible and allowing the app to interact with the user’s data while the user is offline. The id scope allows Torii to access your basic information The api scope allows Torii to access and manage your data Select Allow to allow the requested permissions. # Page Title Schedule Onboarding & Offboarding Workflows ## Page URL https://support.toriihq.com/hc/en-us/articles/16286405384603-Schedule-Onboarding-Offboarding-Workflows ## Page Description Overview Onboarding and offboarding employees are routine processes that can be fully automated using Torii's powerful workflows. With ## Details ### How can we help? ### Schedule Onboarding & Offboarding Workflows Onboarding and offboarding employees are routine processes that can be fully automated using Torii's powerful workflows. With Torii, you have the ability to create workflows with customized schedules, allowing you to trigger onboarding and offboarding automation on selected days and hours based on your time zone. These workflows will rely on the employee start/termination date in HRMS and initiate the process at a selected date and time, for example: Once configured, this will be a recurring workflow, which will trigger on the configured date and time when an employee joining/ termination date is due. We also highly recommend building an additional workflow using Torii's real-time offboarding capability for employees who leave unexpectedly and need to be offboarded immediately. This can be achieved by configuring a workflow with the "App event" trigger. #### How to build a scheduled Onboarding/ Offboarding workflow. In this example, we have created a workflow that initiates the offboarding process for employees whose Hibob termination date is set to "Today" and who are located in New York.The workflow is scheduled to run at 5 PM New York time.Each day, Torii will examine if there are any users from New York whose employment termination is scheduled for the current day. If such users exist, the workflow will be executed at 5 PM New York time, specifically for those users. # Page Title Secrets Vault ## Page URL https://support.toriihq.com/hc/en-us/articles/13702709476507-Secrets-Vault ## Page Description OverviewSecrets are encrypted variables you can create and use securely in workflows as personalization tokens.Once a secret is created ## Details ### How can we help? Secrets are encrypted variables you can create and use securely in workflows as personalization tokens.Once a secret is created and stored in Torii, its value will never be visible again.A common use case is for storing an API Key of a 3rd party service and using it as a personalization token when using a Custom Workflow Action Torii encrypts and stores the secrets securely. Secrets are only decrypted right before being used during workflow execution #### Create a secret Add the Secret Name and Value and click on Create.Secret names can only contain the following characters: a-z, A-Z, 0-9, hyphen -, and underscore _. #### Adding a secret to a workflow custom action # Page Title Security and Compliance Review ## Page URL https://support.toriihq.com/hc/en-us/articles/4577395120027-Security-and-Compliance-Review ## Page Description SaaS brings new security and compliance challenges. Shadow-IT, exposing Personally Identifiable Information (PII), unexpected app access, ## Details ### How can we help? ### Security and Compliance Review SaaS brings new security and compliance challenges. Shadow-IT, exposing Personally Identifiable Information (PII), unexpected app access, and sharing the company IP with 3rd parties are all just some of the security and compliance concerns your organization should address. Torii provides several built-in reports to help mitigate some of the risk that comes with SaaS, as well as dedicated privacy and security standard certifications information for each app discovered by Torii. #### Security Reports Torii comes out of the box with a couple of reports that can assist you: Security page - This report provides an analysis of the risk inherent in apps discovered via Google Workspace (G-suite), Azure, and Slack. For each app, Torii provides a risk level as well as the permissions that app has access to. You can use this report to help determine whether an app is proving to be a large security risk, and take action (outside of Torii) to limit the available scopes this app has. SSO audit - This report audits managed vs. unmanaged users in your SSO provider per app. You can use this report to understand how has access to which app, and whether access to the app went through the intended SSO channel or not. #### Privacy and security standard certifications Privacy and security standard certifications such as SOC II, GDPR and ISO 27001 are crucial benchmarks that organizations strive to achieve to demonstrate their commitment to protecting sensitive information and maintaining robust security measures. Torii provides this information to help you discover and assess apps which could be determined as risky due to lack of compliance to these standards. Read more about it here. Torii also provides a dedicated report with a breakdown of this information by app in the reports page. # Page Title Segment Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/37923440273563-Segment-Integration ## Page Description OverviewTorii integrates with Segment and syncs: User Fields License Types Email Segment Status Role Torii supports ## Details ### How can we help? ### Segment Integration Torii integrates with Segment and syncs: ##### Accounts & Permissions #### How to Generate the Required Values #### How to Connect the Integration Torii supports actions for managing Segment users. For any further questions, please contact Torii Support. # Page Title Send Direct Slack Notifications ## Page URL https://support.toriihq.com/hc/en-us/articles/4824217208091-Send-Direct-Slack-Notifications ## Page Description Use workflows to notify employees on Slack Slack is the most widely used communication platform in organizations nowadays. Torii allows ## Details ### How can we help? ### Send Direct Slack Notifications Slack is the most widely used communication platform in organizations nowadays. Torii allows you to reach your employees faster by sending direct Slack notifications. #### How to send notifications In this example, you can create a workflow that sends Slack notifications to an app owner when a user with an assigned app license leaves or to notify the budget owner about an upcoming renewal. When adding actions to a workflow, select the "Send slack notification" action, which appears in the Slack actions section. You will be asked to select a Slack account, users, and/or Slack channels you would like to send notifications. Add notification text, and you are good to go! #### Sending notifications to private channels To send notifications to private channels, you need to invite the Torii app to the channel. Tag the app as @Torii, and approve when Slack asks you if to invite the app to the channel. If the app was invited to the private channel, you will be able to select to send a notification to this channel along with public channels. #### How do employees get notifications? The notification will be sent from the Torii bot. Users won't be able to interact with the bot. If they reply to the bot, they will get a message explaining they need to contact their IT admin. Q: In case a Slack channel name is changed, will the workflow still run as expected? A: Yes, a Slack channel has a unique identifier that never changes, so the name may change but the workflow will work as expected. # Page Title Send Employees Their Initial Google Workspace (G-Suite) Credentials ## Page URL https://support.toriihq.com/hc/en-us/articles/4833761700891-Send-Employees-Their-Initial-Google-Workspace-G-Suite-Credentials ## Page Description Onboarding workflow - send new employees their initial Google Workspace credentials to their personal email address Giving new ## Details ### How can we help? ### Send Employees Their Initial Google Workspace (G-Suite) Credentials Onboarding workflow - send new employees their initial Google Workspace credentials to their personal email address Giving new employees their Google Workspace (G Suite) credentials is probably one of the first steps required to get them up and running. The example workflow below shows how to send the initial credentials to their personal email address. This example assumes you have new hires' personal email addresses already synced to Torii. ##### 1. Create a User Meets Criteria Workflow Create a new workflow Select User Meets Criteria trigger Setup the criteria based on the employee start date ##### 2. Change Google Workspace User Password Add Change Google Workspace user password action Select your Google Workspace account Choose User - as we're changing the password of the user that meets the criteria In the password login - choose Random password ##### 3. Send the Credentials to the Private Email Address of the New Employee Add Send Email action In the To address, choose the employee private email address Optionally, send it to their manager as well User [Action 1: New password] placeholder to add the newly generated password ##### 4. Force User to Change Their Password Add Force Google Workspace user to change password at next login action Choose User - that meets the criteria ##### 5. Activated your Workflow Activate your workflow by click the Active toggle button. # Page Title Send Remove User Request Action ## Page URL https://support.toriihq.com/hc/en-us/articles/4824085763739-Send-Remove-User-Request-Action ## Page Description Delegate employee removal sending a remove user request When offboarding employees, it is important to make sure you close their ## Details ### How can we help? ### Send Remove User Request Action When offboarding employees, it is important to make sure you close their accounts across the various SaaS tools they were using. While Torii can automate many of those tasks for you, there are applications where an API is not available. The best solution for these apps would be to send a remove the account request, during an employee's offboarding, to the employee who manages that app. For example, LinkedIn Sales Navigator does not provide a user management API. In this case, you'd like to have Torii send a remove user request to the application owner of LinkedIn Sales Navigator in your organization. #### How to Use the Send Remove User Request Action The Send Remove User Request action can be used in: Offboarding configuration, using the Delegate method Workflow action, using the Send Remove User Request action Below is an example of a Send Remove User Request configuration: App to remove the user from: The app being offboarded from User to remove: User being offboarded Send request from: One of your IT team members Send request to: The application owner Message: Personalized message Send submissions to: Notify when tasks are completed ##### Automatic Reminders With the auto-reminders feature, you can set up reminders to be emailed automatically to users who haven’t yet completed their tasks. You can disable/enable auto reminders by going to the Offboarding Settings page. ##### Email to Employee With Tasks to Complete The employee who receives the tasks to complete, the application owner in our case, will receive an email containing all tasks they need to complete as seen in the screenshot below. Once tasks are completed, a notification will be sent to the email set in Send submissions to. # Page Title SendGrid Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/14481810492571-SendGrid-Integration ## Page Description Overview Torii integrates with your SendGrid account and syncs the users' users names, emails, statuses, and roles. Torii supports ## Details ### How can we help? ### SendGrid Integration #### Connect SendGrid Integration #### Create an API Key For SendGrid documentation, click here. #### Finding your Account ID Your Account ID can be found under Account Details -> Account -> Account ID. # Page Title Sentry Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5195131183899-Sentry-Integration ## Page Description Setup your Sentry integration and get all the insights in Torii's dashboard Overview Torii integrates with your Sentry (hosted) account ## Details ### How can we help? ### Sentry Integration Note: Users who are not part of a team and pending users will not be synced into Torii. Torii will need your Sentry Organization Slug & Auth token #### Get the Organization Slug & API key #### Connect Sentry to Torii #### Integration Capabilities You can continuously be updated with application information and actions from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title ServiceNow Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5195107952539-ServiceNow-Integration ## Page Description Setup your ServiceNow integration and get all the insights in Torii's dashboard Overview Torii integrates with your ServiceNow account ## Details ### How can we help? ### ServiceNow Integration Torii mimics the license logic from the ServiceNow UI based on a user's role: If your organization maps user roles to licenses differently, Torii can accommodate this. Please create a support ticket and attach your organization's role to licenses mapping. #### Connect ServiceNow integration to Torii To connect ServiceNow to Torii, follow these steps: Q: What should I do if my integration is disabled with the following error: "Maximum execution time exceeded. Need to adjust the "Maximum Duration (seconds)" of the Transaction Quota Rules"?A: This error means that the integration sync timed out due to a sync limitation in ServiceNow. By default, this limit is 60 seconds, but you can change or remove this limitation. Follow the instructions in this ServiceNow help article to do so. #### Additional ServiceNow information: Open a ServiceNow Ticket from Torii # Page Title Set Application State ## Page URL https://support.toriihq.com/hc/en-us/articles/4572728727451-Set-Application-State ## Page Description Learn how to view, set, and create application state (status) Overview Torii strongly recommends that you use the most basic ## Details ### How can we help? ### Set Application State Torii strongly recommends that you use the most basic classification of the Status attribute. You can classify your applications to the relevant state based on the following: Discovered - this is the default state. These applications should be reviewed and moved to the appropriate state In Review - Application needs review by members of the IT staff. Evaluation period - Employees are evaluating this application. The IT department has not yet approved it for general use. Sanctioned - Applications approved by the IT staff. Cost optimization - Usually Sanctioned applications under investigation for cost optimization opportunities. Need to close - Applications that should be closed. There may still be some company IP addresses on these tools that you'd like to remove before marking them as "Closed." Closed - Applications that are no longer in use ##### How to set application state An application state can be assigned either from the Applications Table or the Application Page. Click on the State attribute and select the correct state ##### How to create a new application state Torii enables you to add your own state to the dropdown list. Select Application Details Go and hover over the State line Click the edit icon The "Enabled" fields are the custom fields, you can edit, delete and change the order of these custom fields The grayed-out state fields are Torii's defaults, and can't be edited or deleted Click on the +Add option, to create a new state A new state field is added Give a name to the state # Page Title New User Training #3: Setting Up Your Account ## Page URL https://support.toriihq.com/hc/en-us/articles/8175987436187--New-User-Training-3-Setting-Up-Your-Account ## Page Description This is video 3 out of 13 in the New User Training Series. Learn the basics of your Torii environment, which users have access to which ## Details ### How can we help? ### New User Training #3: Setting Up Your Account This is video 3 out of 13 in the New User Training Series. #### Questions for Implementation #### Continue Your Training Series Next Video: Explorer's Guide to Your SaaS Ecosystem Pt. 1 #### Additional Resources Notification Settings Overview Updating Personal Email Notifications Torii User Roles & Permissions Guide Adding and Removing Torii Users Defining Application Inactivity Customizing the Application Catalog SSO Into Your Torii Environment # Page Title Settings > API Access ## Page URL https://support.toriihq.com/hc/en-us/articles/32561743779867-Settings-API-Access ## Page Description Learn more about the Settings > API Access section: Torii provides a public API where you can fetch and modify data displayed in the ## Details ### How can we help? ### Settings > API Access Learn more about the Settings > API Access section: Torii provides a public API where you can fetch and modify data displayed in the platform. The API Access section lists your organization's stored keys, their expiration dates, who created them and when. On-hover, each entry will display a trashcan icon for removal. Torii maintains a developer platform located at https://developers.toriihq.com/ with guides for creating custom workflow actions and connecting custom integrations. # Page Title Settings > Application Details ## Page URL https://support.toriihq.com/hc/en-us/articles/32565395389723-Settings-Application-Details ## Page Description Learn about the Application Details page: The Applications Details page lists all of the fields that can be populated for each ## Details ### How can we help? ### Settings > Application Details Learn about the Application Details page: The Applications Details page lists all of the fields that can be populated for each Application, and their setup information: #### Application Detail Groups Each application detail field exists inside of an application details group. A group can have any number of application detail fields added to it. Groups can be created by clicking " + Add new group" at the bottom of the list. (For more information on adding new groups, see How to add Application Details Group.) #### Managing Application Detail Fields Fields can be added using the "+ Add field" button at the top of each application detail group. (For more information on adding fields, see How to Add a Custom Application Field) Fields can be reordered by clicking and dragging the drag dots to the left of each entry in the list: Fields can be edited or deleted with the pen and trashcan icons to the right of the entry: # Page Title Settings > Browser Extension ## Page URL https://support.toriihq.com/hc/en-us/articles/33880073579035-Settings-Browser-Extension ## Page Description Learn about the Browser Extension page: The browser extension settings page is where you define the extension's operating mode: ## Details ### How can we help? ### Settings > Browser Extension Learn about the Browser Extension page: The browser extension settings page is where you define the extension's operating mode: For more information see Introduction to Torii Browser Extension. # Page Title Settings > Contract Details ## Page URL https://support.toriihq.com/hc/en-us/articles/32636701320987-Settings-Contract-Details ## Page Description Learn about the Contract Details page The Contract Details page lists all of the fields that can be populated for each contract, and ## Details ### How can we help? ### Settings > Contract Details Learn about the Contract Details page The Contract Details page lists all of the fields that can be populated for each contract, and their setup information: Fields can be added by clicking "+ Add field", choosing from the available field types, and providing the field name and group it should belong to. Fields can be edited, deleted or moved by hovering over the entry to expose the functions. #### Contract Groups For organizational purposes, contract details can be separated into groups. By default there is a "Details" group and an "Auto-Renewal" group, but more can be created for any custom fields you would like to add, and fields can be moved between groups by editing them. Groups can themselves be edited, deleted or moved by hovering over the group name to expose the functions. # Page Title Settings > Custom Applications ## Page URL https://support.toriihq.com/hc/en-us/articles/32561543490203-Settings-Custom-Applications ## Page Description Learn more about the Settings > Custom Applications section: Torii provides a comprehensive database of SaaS applications, but you ## Details ### How can we help? ### Settings > Custom Applications Learn more about the Settings > Custom Applications section: Torii provides a comprehensive database of SaaS applications, but you also have the flexibility to add custom apps as needed. After clicking "+ Add application" you will be asked for the custom app's name and details. Hovering over an entry in the list will expose buttons to Hide or edit the app. To get started, we recommend reviewing Adding and Editing Custom Apps for a detailed introduction to this feature. # Page Title Settings > Emails ## Page URL https://support.toriihq.com/hc/en-us/articles/33878336046747-Settings-Emails ## Page Description Learn about the Emails page: The Emails page is where you can customize the display name and logo of any emails Torii sends on your ## Details ### How can we help? ### Settings > Emails Learn about the Emails page: The Emails page is where you can customize the display name and logo of any emails Torii sends on your organization's behalf. For more information see Email Settings and Logo. # Page Title Settings > General ## Page URL https://support.toriihq.com/hc/en-us/articles/31915017463579-Settings-General ## Page Description Learn about the Settings page Organization ID The Organization ID is used to uniquely identify your account in Torii and is a read ## Details ### How can we help? ### Settings > General Learn about the Settings page #### Organization ID The Organization ID is used to uniquely identify your account in Torii and is a read only field. You might need it when integrating with your SSO provider. The Company name is editable and will appear across the web application. In addition, Torii uses your company name when detecting and mapping expenses to the correct applications. #### Displayed currency The Displayed Currency field lets you choose the currency that will appear across the Torii platform. All amounts will be automatically converted and shown in the selected currency, while the original currency values will still be saved and displayed alongside the converted amounts. This setting applies at the organization level and impacts all users, regardless of their region. The Geolocation toggle allows you to include or exclude the Users Map from the Insights page. #### Sync Renewal Calendar Your organization's Renewal Calendar can be shared by publishing an iCalendar feed and subscribing to it on Google Calendar and Outlook. For more details, see Sync your Renewal Calendar with Google Calendar and Outlook. Torii's license cost benchmarks allow you to compare the price you are paying per license to the prices similar companies pay using anonymized market data. The Benchmark Data toggle allows to opt-in or opt-out from benchmarking data for license costs. For more details, visit the License Cost Benchmarks article. #### Block access to sensitive data for third-party apps The Block Access toggle enables monitoring and blocking of third-party apps from accessing your sensitive data on Google Workspace. For more details, visit the Monitor third-party apps and block access to sensitive data article. #### Use comma separator in CSV exports Torii gives you control over how CSV exports are formatted. Enabling this setting automatically adds a line at the top of exported CSV files: This line ensures that Microsoft Excel interprets the file correctly—especially important in regions like Europe, where Excel defaults to using semicolons (;) as delimiters. Adding sep=, overrides this behavior and preserves the intended column structure. # Page Title Settings > Hidden Applications ## Page URL https://support.toriihq.com/hc/en-us/articles/32604423572507-Settings-Hidden-Applications ## Page Description Learn about the Hidden Applications page: To remove noise, Torii gives you the option to Hide an application. Once hidden, the ## Details ### How can we help? ### Settings > Hidden Applications Learn about the Hidden Applications page: To remove noise, Torii gives you the option to Hide an application. Once hidden, the application will no longer appear in Torii lists or searches, but is still considered active, and data continues to be gathered for it. The hidden applications page serves to store these applications out of the way, where they can be un-hidden if needed. (For more on how to hide an application, see Hiding Applications.) The Hidden Applications settings page shows the application's name, date it was hidden, and who hid it. On hover, each entry will display a button to un-hide the application: Note: Hiding an app will not affect any associated matching rules or contracts - these will need to be manually adjusted or transferred to another app. # Page Title Settings > Labs ## Page URL https://support.toriihq.com/hc/en-us/articles/32760465742875-Settings-Labs ## Page Description Learn about the Labs page: Labs are beta releases of Torii's newest features, available for testing. Each Labs feature has a short ## Details ### How can we help? ### Settings > Labs Learn about the Labs page: Labs are beta releases of Torii's newest features, available for testing. Depending on customer feedback, Labs features may be added to the product for everyone, or removed entirely. In both cases, it will no longer be available in Labs. # Page Title Settings > Members > App Owners ## Page URL https://support.toriihq.com/hc/en-us/articles/31915954069531-Settings-Members-App-Owners ## Page Description Learn about the Members > App Owners page: App owners access to Torii switch The App owners access to Torii toggle is used to ## Details ### How can we help? ### Settings > Members > App Owners Learn about the Members > App Owners page: #### App owners access to Torii switch The App owners access to Torii toggle is used to enable or disable App Owners' access to view and manage their application's information. Visit the App Owner Access - For Torii Admins to learn more. The name of the App Owner will be listed and may be tagged as "Pending" if the user does not have access due to not yet having signed up: #### Torii Usage column Torii Usage is tracked here, based on the number of daily visits in the last 30 days. #### Number of owned apps column This section displays the apps that the Owner (Primary or non-Primary) has assigned. # Page Title Settings > Members > Torii Users ## Page URL https://support.toriihq.com/hc/en-us/articles/31916582030619-Settings-Members-Torii-Users ## Page Description Learn about the Members > Torii Users tab: This tab lists the name, email address and role of every Torii Member who has access or who ## Details ### How can we help? ### Settings > Members > Torii Users Learn about the Members > Torii Users tab: This tab lists the name, email address and role of every Torii Member who has access or who has been invited to the platform. #### Inviting Torii Users # Page Title Settings > Roles ## Page URL https://support.toriihq.com/hc/en-us/articles/31915971902363-Settings-Roles ## Page Description Learn more about the Settings > Roles section: Roles are used to manage user access, permissions, and responsibilities within . ## Details ### How can we help? ### Settings > Roles Learn more about the Settings > Roles section: Roles are used to manage user access, permissions, and responsibilities within Torii. Hovering over an entry in the Roles list will expose buttons to view or change the permissions of that role in Torii. Roles that you have created will be editable and can be deleted. Each scope can be set to "View only", "Take action", or "No access" See Introduction to Roles-Based Access Control (RBAC) article for an overview. # Page Title Settings > Secrets Vault ## Page URL https://support.toriihq.com/hc/en-us/articles/32759793950747-Settings-Secrets-Vault ## Page Description Learn about the Secrets Vault page: Secrets let you add sensitive data (e.g. API keys) and use them in your workflows as personalization ## Details ### How can we help? ### Settings > Secrets Vault Learn about the Secrets Vault page: Secrets let you add sensitive data (e.g. API keys) and use them in your workflows as personalization tokens. Clicking "Add secret to vault" brings up a dialog box allowing the definition of a name/value pair. Entries can be removed by hovering over them and clicking the trashcan icon. The full value of a secret cannot be viewed in the UI once it is set. For information on how to create a secret, see: Create a secret. # Page Title Settings > Security ## Page URL https://support.toriihq.com/hc/en-us/articles/32561616498587-Settings-Security ## Page Description Learn more about the Settings > Security section: Web session length This dropdown defines the amount of time to wait before a user ## Details ### How can we help? ### Settings > Security Learn more about the Settings > Security section: #### Web session length This dropdown defines the amount of time to wait before a user is logged out of Torii and forced to re-login. #### Sign out users on being idle Users can be logged out of Torii after a set amount of time of being idle; this is where that period is defined. #### Single Sign On (SSO) Torii allows for a number of Identity Providers to be used for Single Sign On access to the platform. To set this up, press the "Configure SSO" button and you will be prompted to upload your provider's metadata file. Read more about how to setup SSO: Setup Your Torii Account to Use SSO (Single-Sign-On) For Login. Users in Torii can be managed via System for Cross-domain Identity Management (SCIM). Note: If SCIM is enabled for the org, SAML auto-provisioning will be disabled and activation emails will not be sent for any new members added from the Settings > Members section. Read more about how to setup SCIM at Torii's SCIM User Provisioning. # Page Title Settings > Subscription ## Page URL https://support.toriihq.com/hc/en-us/articles/33880837152539-Settings-Subscription ## Page Description Learn about the Application Details page: The Subscription page displays your current Torii plan and expiration date. Customers on the ## Details ### How can we help? ### Settings > Subscription Learn about the Application Details page: The Subscription page displays your current Torii plan and expiration date. For more information, see Subscription Management. # Page Title Settings > Users & Employees ## Page URL https://support.toriihq.com/hc/en-us/articles/31915920172315-Settings-Users-Employees ## Page Description Learn more about the Settings > Users & Employees section: This section allows you to define your User lifecycle and Employee ## Details ### How can we help? ### Settings > Users & Employees Learn more about the Settings > Users & Employees section: This section allows you to define your User lifecycle and Employee definition systems, and set the way Torii will Merge users. This is also where you can define the Inactivity period after which a user is considered inactive in applications. User lifecycle defines how Torii determines whether a user in the is marked as 'current' (currently active), or 'past' (a previous/terminated employee, removed service account etc.) This configuration affects how some workflows trigger (User Joins, User Leaves,) and when a user will be suggested to be offboarded. Read more about this: User Lifecycle - Source Of Truth (SOT) in Torii. #### Employee definition The Employee definition configuration allows you to define the set of user accounts which belong to human users. This enables refining the number of actual employees in your organization; which is displayed in various parts of the platform and directly informs Torii billing. Read more about this: Employees In Torii. Torii identifies users through their unique email addresses. When people have multiple emails associated with them across different systems, Torii’s Merge users feature uses email aliases to automatically detect and combine accounts under one record. Applying a merge will change the number of users in Torii and will combine the data of merged users (access to apps, licenses, annual cost etc.) This process is reversible: users can be un-merged at any time. Read more about this: Combining email aliases using Merge Users. #### Inactivity period Set the period of time after which a user will be considered inactive in any application. Read more about this: Defining Application Inactivity. # Page Title Setup Your Account to Use Google SSO ## Page URL https://support.toriihq.com/hc/en-us/articles/5200711358107-Setup-Your-Account-to-Use-Google-SSO ## Page Description Configure your Google Single-Sign-On account in order to allow signups and logins to Torii. In order to configure Google SSO: Sign in to ## Details ### How can we help? ### Setup Your Account to Use Google SSO #### Configure your Google Single-Sign-On account in order to allow signups and logins to Torii. In order to configure Google SSO: After you validated that your SSO configuration is in place and working as expected, you can go ahead and enforce all your users to login only via SSO - this is easier for them and better for the organization's security. Go to the Settings -> Security page and change the state of the 'Enforce users to sign in using SSO' switch to On. # Page Title Setup Your Account to Use JumpCloud SSO ## Page URL https://support.toriihq.com/hc/en-us/articles/5200947894299-Setup-Your-Account-to-Use-JumpCloud-SSO ## Page Description Configure your JumpCloud Single-Sign-On account in order to allow signups and logins to Torii. In order to configure JumpCloud SSO: ## Details ### How can we help? ### Setup Your Account to Use JumpCloud SSO #### Configure your JumpCloud Single-Sign-On account in order to allow signups and logins to Torii. In order to configure JumpCloud SSO: Go to the Applications page. Add a new application, and choose "Custom SAML App". Update Display Label to Torii Update the 3 following fields IdP Entity ID, SP Entity ID and ACS URL to have the same value: https://api.toriihq.com/api/saml/ORGID/callback(replace ORGID with your Organization ID. What is my Organization ID?) Download the "metadata.xml" file and continue from step 2 in Setup your Torii account to use SSO After you validated that your SSO configuration is in place and working as expected, you can go ahead and enforce all your users to login only via SSO - this is easier for them and better for the organization's security. Go to the Settings -> Security page and change the state of the 'Enforce users to sign in using SSO' switch to On. # Page Title Setup your account to use Microsoft Entra ID (formerly Azure Active Directory) SSO ## Page URL https://support.toriihq.com/hc/en-us/articles/5200558455195-Setup-your-account-to-use-Microsoft-Entra-ID-formerly-Azure-Active-Directory-SSO ## Page Description Configure your Microsoft Entra ID Single-Sign-On account in order to allow signups and logins to Torii. In order to configure Microsoft ## Details ### How can we help? ### Setup your account to use Microsoft Entra ID (formerly Azure Active Directory) SSO #### Configure your Microsoft Entra ID Single-Sign-On account in order to allow signups and logins to Torii. In order to configure #### Microsoft Entra ID Sign in to the Azure management portal using your Azure Active Directory administrator account. Choose "Azure Active Directory" -> "Directory" -> "Enterprise Applications". Choose "New Application". Select "Add from the gallery". Choose the "Configure Single Sign-on" section and select "SAML-based Sign-on" in the "Single Sign-on Mode" dropdown. Configure the SAML integration with the following:"Identifier": https://api.toriihq.com/api/saml/ORGID/callback"Reply URL": https://api.toriihq.com/api/saml/ORGID/callback"User Identifier": Select "user.mail" from the dropdown.(replace ORG_ID with your Organization ID. What is my Organization ID?) Download the "Metadata" XML file and continue from step 2 in Setup your Torii account to use SSO. Note: The steps above cover everything you need to know. Microsoft has created a dedicated tutorial with images detailing the steps written above: Tutorial: Azure Active Directory single sign-on (SSO) integration with Torii After you validated that your SSO configuration is in place and working as expected, you can go ahead and enforce all your users to login only via SSO - this is easier for them and better for the organization's security. Go to the Settings -> Security page and change the state of the 'Enforce users to sign in using SSO' switch to On. # Page Title Setup Your Account to Use Okta SSO ## Page URL https://support.toriihq.com/hc/en-us/articles/5201049116827-Setup-Your-Account-to-Use-Okta-SSO ## Page Description Configure your Okta Single-Sign-On account in order to allow signups and logins to Torii. In order to configure Okta SSO: Sign into ## Details ### How can we help? ### Setup Your Account to Use Okta SSO #### Configure your Okta Single-Sign-On account in order to allow signups and logins to Torii. In order to configure Okta SSO: Add a new application, search and choose "Torii" from the list. Update the Organization ID field in Okta with your organization ID.(What is my Organization ID?) Download the "metadata.xml" file from the Torii app's "Sign On" tab (you will have to copy and open the link, then save it as a file.) Continue from step 2 in Setup your Torii account to use SSO. For steps 3 and 4, see the following instructions via Okta:https://saml-doc.okta.com/SAML_Docs/How-to-Configure-SAML-2.0-for-Torii.html After you validated that your SSO configuration is in place and working as expected, you can go ahead and enforce all your users to login only via SSO - this is easier for them and better for the organization's security. Go to the Settings -> Security page and change the state of the 'Enforce users to sign in using SSO' switch to On. #### Additional articles # Page Title Setup Your Account to Use OneLogin SSO ## Page URL https://support.toriihq.com/hc/en-us/articles/5201225611035-Setup-Your-Account-to-Use-OneLogin-SSO ## Page Description Configure your OneLogin Single-Sign-On account in order to allow signups and logins to Torii. In order to configure OneLogin SSO: Sign ## Details ### How can we help? ### Setup Your Account to Use OneLogin SSO #### Configure your OneLogin Single-Sign-On account in order to allow signups and logins to Torii. In order to configure OneLogin SSO: Add a new application, search and choose "Torii" from the list. Update the "Company ID" number field in OneLogin with your Organization ID.(What is my Organization ID?) 4. Click "More actions", download the SAML Metadata file - "oneloginmetadataNUMBER.xml" - and continue from step 2 in Setup your Torii account to use SSO. After you validated that your SSO configuration is in place and working as expected, you can go ahead and enforce all your users to login only via SSO - this is easier for them and better for the organization's security. Go to the Settings -> Security page and change the state of the 'Enforce users to sign in using SSO' switch to On. # Page Title Setup Your Torii Account to Use SSO (Single-Sign-On) For Login ## Page URL https://support.toriihq.com/hc/en-us/articles/5199815253787-Setup-Your-Torii-Account-to-Use-SSO-Single-Sign-On-For-Login ## Page Description Make it easier and more secure for your users to log in to Torii Setup your account to use Single-Sign-On in order to allow signups and ## Details ### How can we help? ### Setup Your Torii Account to Use SSO (Single-Sign-On) For Login Setup your account to use Single-Sign-On in order to allow signups and logins to Torii has never been easier. First, make sure you are Admin in your Torii account. You can check this on the Settings -> Team page. Only admins can configure SSO for their accounts. #### SSO Configuration Please follow these steps to set it up: Identify which Identity Provider (Okta, OneLogin, Google, Microsoft Azure AD, etc) your organization is using and follow the appropriate instructions in order to get your SSO metadata XML configuration file: Setup your account to use Azure Active Directory SSO Setup your account to use Google SSO Setup your account to use JumpCloud SSO Setup your account to use Okta SSO Setup your account to use OneLogin SSO Torii supports any other Identity Provider that supports SAML Go to Settings -> Security page Click the Configure SSO button Drag & Drop or browse to select the metadata.xml configuration file you have obtained from your Identity Provider Torii will process the configuration file and will present the following confirmation which indicates your SSO configuration is in place Click Done to close the dialog box SSO is now configured for your account but is not yet enforced #### Testing your SSO configuration Now that SSO has been configured, validate it is working: Log out of Torii Log in to Torii again and you will now be redirected to your Identity Provider to login using SSO In case the login was not successful, you can use the "or click here to login using a password" link that appears after entering your email address: After you validated that your SSO configuration is in place and working as expected, you can go ahead and enforce all your users to login only via SSO - this is easier for them and better for the organization's security. Go to the Settings -> Security page and change the state of the 'Enforce users to sign in using SSO' switch to On. If you would like to revert back to using email and passwords for Torii login, click the Remove SSO button and confirm the removal in the confirmation dialog that will pop up. You can then re-configure your account to use SSO by following the instructions at the top of this guide. Q: What is the expected behavior when SSO is enforced and Torii times out due to inactivity? A: After an idle timeout, the user is sent to the Torii login page.You can always log back into Torii from your SSO portal with one click. Our support team is always available at support@toriihq.com to help. # Page Title Shadow IT discovery workflow ## Page URL https://support.toriihq.com/hc/en-us/articles/24406249328539-Shadow-IT-discovery-workflow ## Page Description This workflow automates the discovery and management of unknown applications within your organization. It will allow you to stay on top ## Details ### How can we help? ### Shadow IT discovery workflow This workflow automates the discovery and management of unknown applications within your organization. It will allow you to stay on top of every new app that your employees start using. The high level process is: 1. Receive Slack notifications for each new app. 2. Notify relevant stakeholders, such as SecOps. 3. Gather additional information from employees who started using the app by sending them a short questionnaire. 4. Update the app state to make it easy to track it. #### Workflow Overview #### How to Configure the Workflow 1. Click "New workflow" button and select "From scratch" in the dropdown menu. 2. Select New app discovered trigger and click "Next". The new workflow will be created. 2. Add "Send Slack notification" action. Make sure you have the Slack integration connected. 3. In "Send to users" field, add users whom you want to notify when Torii discovers a new app. You can edit the text of the message you want to send. 6. Add "Send application form" action. This action will send email with a form to the user who started using a new app. This is helpful to collect information from the user in order to decide if any further steps from the IT side should be taken. This is how the email with the form will look like. 7. Select to send the form to the "User who started using the app". 8. Click "Next" on the right panel. You can now setup the form that will be sent to the user. Add fields that you previously added to the Application Details section in Settings. We suggest adding fields: This is how the form will look like when user opens it from the email. Once the user answers the form, their answers will be automatically populated on the new discovered app info page. Additionally, you can specify recipients in the "Send Form Submission to" field, choosing individuals to whom the submitted answers will be forwarded, facilitating smooth workflow tracking. 8. Add "Change application state" action. Once the user submitted the form, you can start reviewing the app. 5. Configure the app state to be switched to "In review". 9. Send yourself another Slack notification, once the form is submitted, reminding to review the app details. #### Summary - What to Expect Once you activate the workflow, whenever a new app is discovered: 1. You will get a Slack notification. 2. User who started using the app will be asked to answer questions about the app. 3. Upon submission of their responses, the app's status in Torii will automatically change to "In review". 4. You will receive another Slack notification, informing you that the form has been submitted and the app information is ready for your evaluation. At this point, you can review the app information and determine the appropriate course of action. This may involve deciding whether to sanction the app, asking the employee to cease usage and recommending an alternative app, involving finance for paid apps, and more. # Page Title Share & Schedule Reports from Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/28179790220699-Share-Schedule-Reports-from-Torii ## Page Description Overview This article will outline options to share data from Torii to other people in your organization, and provide example best ## Details ### How can we help? ### Share & Schedule Reports from Torii This article will outline options to share data from Torii to other people in your organization, and provide example best practices on how to do so. #### Sharing data from Torii Torii offers two main ways to share data to other employees: These options are available in most pages in Torii. The "Share as report" option allows you to append a .CSV file and send it to specific users or channels via email or Slack. It is a great way to streamline data sharing instead of manually downloading a .CSV file and sharing it. When either option is selected in the context of a specific data set, the columns, column order and filters are set and are static from that point on. What does this mean? #### Scheduled reports Note: Sharing a report on a recurring schedule is available only for customers on the enterprise plan After clicking "Share as report", you can configure how and to whom you want to share the data with, and you may elect to share this data once, or on a set, recurring schedule. If you chose to share on a recurring schedule, the same columns, column order and filters which applied to the data when you set up the recurring report will always apply - they are determined separately from the view from which they may have originated, and are static. For example, the private view "Discovered apps - 30 days" includes the columns: "App name", "Users", "Discovery date", "State" and "Primary app owner", with filters to only show apps in "Discovered" state with "Discovery date" up to 30 days ago. If you share this data with a scheduled report, all reports send will contain these columns & filters, no matter whether you add/remove columns, or change filters for this view later. You can find a table dedicated to reporting scheduling under Reports -> Scheduled reports. In this page, you can see exactly which reports are scheduled, additional relevant information on them, as well as options to edit the schedule/recipients, download the report or delete the schedule. #### Editing & viewing scheduled reports Once a report has been scheduled, the columns & filters selected cannot be altered. If edits are necessary, you can delete a scheduled report and create a new one. Reports are privately owned - meaning that only the report creator (and owner) can see and take action on them in the Scheduled reports page. Additionally, Torii users with the "Scheduled Reports -Take Action" scope (By default, users with the "Admin" role) can see all scheduled reports and take action on them. If you have permissions to see & edit a scheduled report, you can: #### Sharing confirmation When sharing a report , A toast message will pop up, indicating that the sharing or scheduling process was initiated. Afterwards, you will be able to see the status for sharing this report in the following places: #### Recommended best practices Q: I got a confirmation message that my report was shared successfully, but it never arrived at the recipient's email. Why? A: Torii tracks whether the report was sent to the relevant email server successfully or not, but cannot currently determine whether in arrives from there to the recipients inbox or not. Q: Why did I receive an empty report?A: This means that there is no data matching the filters set by the scheduled report owner. When originally set up, the filters caught a subsection of your organization's data, but, for the relevant report and time period, there is no data to present. Torii still sends out the report, as this data can still be a useful metric to track. For example: A scheduled report that shows all new hires in your organization in the last 30 days may return empty (only column headers showing) if there were indeed no new employees recruited in the past month. # Page Title Shopify Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5728549174043-Shopify-Integration ## Page Description Overview Torii integrates with Shopify and syncs the users' list. Prerequisites The Shopify organization admin is only available ## Details ### How can we help? ### Shopify Integration Torii integrates with Shopify and syncs the users' list. The Shopify organization admin is only available to the Shopify Plus plan Users are authenticated using SAML single sign-on Users are provisioned by an Identity Provider using SCIM To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Shopify help center, or their support. #### Integration Process To connect Shopify to Torii, follow these steps: Go to Torii's Integrations page and click the Shopify tile In the Connect Shopify window, enter the Base URL In the Authentication Method dropdown, select Token In the Access token field, paste the access token Once the integration is connected and synced, it will display a green checkbox # Page Title Shortcut Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/7609860308379-Shortcut-Integration ## Page Description Set up the Shortcut integration and get all the insights in Torii's dashboard Overview Torii integrates with Shortcut and syncs the ## Details ### How can we help? ### Shortcut Integration Torii integrates with Shortcut and syncs the users' names, roles, emails, and statuses #### Connect Shortcut integration to Torii To connect Shortcut to Torii, follow the below steps: # Page Title Shyftplan Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/26450880706843-Shyftplan-Integration ## Page Description Overview Torii integrates with your Shyftplan account and syncs the following information: Users list: Emails and statuses License: ## Details ### How can we help? ### Shyftplan Integration Torii integrates with your Shyftplan account and syncs the following information: Note that Torii can support multiple Shyftplan accounts. #### Connect Shyftplan Integration Once the integration is connected and synced, it will display a green checkbox. #### Integration Capabilities You can stay updated with application information by visiting our Integrations page. Click the Integration Capabilities button to view the Integration Capabilities table. # Page Title Slack actions : Selecting channels ## Page URL https://support.toriihq.com/hc/en-us/articles/20703951552795-Slack-actions-Selecting-channels ## Page Description This article provides guidance for actions that require selecting channels within Slack: Send Slack notification Invite Slack user to ## Details ### How can we help? ### Slack actions : Selecting channels This article provides guidance for actions that require selecting channels within Slack: These actions allow selecting a channel from a prepopulated list or manually entering the channel ID. The instructions below will guide you through this process. Selecting Channels from the List To select multiple channels, select them sequentially from the channels list. Manually Entering Channel IDs If you have trouble locating the desired channel or encounter delays while loading the channels list, you have the option to manually enter the Slack channel ID. Simply select the 'Enter channel ID' radio button and paste the ID into the text field below. How to Find Your Channel ID in Slack 2. Scroll down to the bottom of the channel details window. The Channel ID is located at the bottom left corner. Example Slack channel ID format: C05E6K0ENJ0 3. Click the "Copy" icon positioned next to the ID to copy it to your clipboard. To add or remove users from multiple Slack channels, paste the Channel IDs, separated by commas. You can input a maximum of 10 channels. # Page Title Smart offboarding - what happens when it is triggered ## Page URL https://support.toriihq.com/hc/en-us/articles/17273392164635-Smart-offboarding-what-happens-when-it-is-triggered ## Page Description Introduction Cutting employees' access to apps upon their departure is a crucial security measure that protects the company's assets, ## Details ### How can we help? ### Smart offboarding - what happens when it is triggered Cutting employees' access to apps upon their departure is a crucial security measure that protects the company's assets, data, and reputation, while also complying with relevant regulations and industry best practices. Torii's great offboarding features help to streamline the offboarding process, ensuring security and efficiency. Watch a training video to learn more about how to configure and initiate offboarding in Torii ### What happens when offboarding is triggered When the offboarding process is triggered, Torii will execute offboarding actions for all apps where the user was ever discovered, as long as the apps were configured with the offboarding method. This ensures that the user no longer has access to these apps. # Page Title Smartsheet Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5198770970139-Smartsheet-Integration ## Page Description Setup the Smartsheet integration and get all the insights in Torii's dashboard Torii integrates with Smartsheet and syncs the list of ## Details ### How can we help? ### Smartsheet Integration Torii integrates with Smartsheet and syncs the list of users, their roles, statuses and last login time. ##### Important: Requirements The integration requires the Smartsheet "Business" or "Enterprise" plan. Go to the Torii Integrations page and click on the Smartsheet tile in order to connect. Follow the on-screen instructions and grant Torii access to Smartsheet. Torii allows you to automate Smartsheet user management through workflow actions. Important Notes: Adding a User: In certain cases, attributes like first name and last name may be ignored. For instance, if you invite an existing Smartsheet user to join your organization but they have not yet accepted the invitation, any provided first name and last name will be ignored. Defining a Licensed User: In the "Add User" and "Edit User" actions, only the Group Admin and Resource Viewer roles are supported. # Page Title Snowflake Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5728282966811-Snowflake-Integration ## Page Description Overview Torii integrates with Snowflake and syncs the Users' data: email, first name, last name, role, status, license status, ## Details ### How can we help? ### Snowflake Integration #### Step 1: Create an OAuth Security Integration in Snowflake This step must be done by someone with ACCOUNTADMIN role in Snowflake. Run the following SQL command to create an OAuth security integration: * The number 7776000 above is the token expiry time in seconds (90 days). You can set the number to 31622400 (366 days) if you have requested Snowflake support to extend the expiration period from 90 days to a year. For more details, refer to the FAQ section below. You will need to connect Torii to Snowflake with a user who is able to read users' emails. By default, we recommend connecting the integration with a SYSADMIN role. To verify that the role you wish to connect with has access to users' emails, please try to edit a user and make sure you can see their email (The Email field is NOT empty):Here is an example of how to connect with the SYSADMIN role. You can swap the commands for any role as you prefer. ##### Connecting with a SYSADMIN role To allow the SYSADMIN role full access to manage the integration, including modifying, using, and viewing its configuration, run the following command: After creating the OAuth security integration, run this command to retrieve the necessary information about the security integration, adding the chosen integration name between the quote marks (must be in all capital letters): The output will look like the following: Copy and save the text found between the quotes following "OAUTHCLIENTSECRET" and "OAUTHCLIENTID" — excluding the quotes. These are the "Client Secret" and "Client Id," which you will need for step 3 below. #### Step 2: Gather Additional Required Information in Snowflake The 'Base Url' for Snowflake is also necessary. Execute the following SQL command: Look for the line with the OAUTHAUTHORIZATIONENDPOINT property and copy the URL from the property_value that ends in .com. For example, if the endpoint is , the 'Base Url' would be https://eva12345.snowflakecomputing.com. #### Step 3: Connect Snowflake to Torii Now you should have the following Snowflake information required to connect Snowflake to Torii: To connect Snowflake to Torii, Ensure that the person who connects the app will have the default role: SYSADMIN, then follow these steps: Once the integration is connected and synced, it will display a green checkbox. Q: Can I Increase Token Expiry Time Beyond 90 Days? A: By default, Snowflake sets OAuth authorizations to expire after 90 days. Once expired, your integration will cease functioning and you must re-establish the connection with Torii. A Snowflake account administrator may extend the expiration period from 90 days to up to a year by submitting a request to Snowflake Support. Connections that are already established will expire after the standard 90 days. However, connections that are new or re-established after the extension request has been processed will have an extended duration of one year. Once Snowflake support has approved the increased limit for your account, execute the following command to extend the token expiration to 366 days: Q: I've received the error message "The role of the users who connected the integration cannot read users' emails. Check SnowFlake's help article for more information". What does this mean? A: This error means that the user who connected the Snowflake integration does not have the necessary permissions to view users' email addresses. To verify, log into Snowflake using the same user credentials used to connect the integration (not the ACCOUNTADMIN role), and run the following command: If the email addresses do not appear in the result (i.e., the email column is empty), it's likely a permissions issue. In that case, follow the instructions in Snowflake's documentation to grant the appropriate privileges: Snowflake Access Control Requirements for SHOW USERS Specifically, the role must have at least one of the following: Without these privileges, the email column will return NULL, and Torii will not be able to sync user email data. # Page Title Splunk Cloud Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/8089768188443-Splunk-Cloud-Integration ## Page Description Overview Torii integrates with your Splunk Cloud account and syncs the following: User Fields User (email) Status in app Role ## Details ### How can we help? ### Splunk Cloud Integration Torii integrates with your Splunk Cloud account and syncs the following: ##### Accounts & permissions Create a Splunk account and receive an email with your account details. #### Connect Splunk Cloud integration to Torii Once the integration is connected and synced, it will display a green checkbox. Q: I got this error when trying to connect the integration: "please verify port 8089 is open". What does this mean? A: Some customers may need to take extra steps to allow Torii to access their Splunk Cloud Platform deployment using the Splunk REST API. If you receive this error, please submit a support case to Splunk Cloud requesting access using the Splunk Support Portal. You can read more about this here. # Page Title Square Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/15043706725659-Square-Integration ## Page Description Overview Torii integrates with your Square account and syncs the users' roles, statuses in the app, and licenses. Connect Square ## Details ### How can we help? ### Square Integration Torii integrates with your Square account and syncs the users' roles, statuses in the app, and licenses. #### Connect Square integration to Torii. # Page Title SSO Audit Report ## Page URL https://support.toriihq.com/hc/en-us/articles/26129050129179-SSO-Audit-Report ## Page Description The SSO Audit Report helps you pinpoint SSO misconfigurations, ensuring that all applications enforce SSO login as intended. What is the ## Details ### How can we help? ### SSO Audit Report The SSO Audit Report helps you pinpoint SSO misconfigurations, ensuring that all applications enforce SSO login as intended. #### What is the SSO Audit Report? The SSO Audit Report highlights instances where applications configured for SSO are accessed without using SSO. This can reveal misconfigurations, such as an app not enforcing SSO login, which can potentially compromise your security protocols. #### How to Use the SSO Audit Report #### Analyzing the Report When you encounter applications with unmanaged users, it is crucial to investigate further. Unmanaged users might indicate that there are individuals accessing the application without the SSO provider, suggesting a potential misconfiguration. #### Suggested Action For any application with unmanaged users: #### Limitations of the SSO Audit Report By regularly reviewing the SSO Audit Report, you can maintain robust security measures and ensure that all applications adhere to your SSO policies. This proactive approach helps prevent unauthorized access and secures your organizational data. # Page Title Stack Overflow for Teams Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5727991687963-Stack-Overflow-for-Teams-Integration ## Page Description Overview Torii integrates with Stack Overflow for Teams and syncs the users' list. Prerequisites Available on Basic, Business ## Details ### How can we help? ### Stack Overflow for Teams Integration Torii integrates with Stack Overflow for Teams and syncs the users' list. Available on Basic, Business & Enterprise plans, Not available on Free Admin Privileges Users are authenticated using SAML single sign-on Users are provisioned by an Identity Provider using SCIM To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Stack Overflow for Teams help center or their support. #### Integration Process To connect Stack Overflow for Teams to Torii, follow these steps: Go to Torii's Integrations page and click the Stack Overflow for Teams tile In the Connect window, note that Torii already identified and populated the Base URL and Authentication Method fields. In the Access token field, paste the access token. Once the integration is connected and synced, it will display a green checkbox. # Page Title Stopping a Workflow ## Page URL https://support.toriihq.com/hc/en-us/articles/32554389758107-Stopping-a-Workflow ## Page Description The "Stop Workflow" feature allows users to abort workflow executions that are currently "In Progress." This ## Details ### How can we help? ### Stopping a Workflow The "Stop Workflow" feature allows users to abort workflow executions that are currently "In Progress." This functionality ensures that no further actions are executed beyond the current step, providing users with better control over their workflow and app catalog policy executions. #### How to Stop a Workflow You can stop workflows manually from the following locations: Workflow / Policy Runs Page: Identify the workflow to stop and click the "Stop Workflow" icon. Execution Details Page: Navigate to the execution details of the workflow and click "Stop Workflow." #### Post-Confirmation When you confirm stopping the workflow: The workflow status updates to Stopped. #### Long-Running Actions For actions that cannot be interrupted (e.g., transferring Google Drive files), the workflow status changes to "Stopping" until the current action completes. Once completed, the workflow status updates to "Stopped". #### Offboarding Workflows Offboarding workflows cannot be stopped. #### Deleted Workflows If a running workflow is deleted: Its status changes to Stopped" The action that was "In Progress" at the time of deletion also updates to Stopped. # Page Title Streamline the Browser Extension Activation for Your Entire Organization ## Page URL https://support.toriihq.com/hc/en-us/articles/5146418720539-Streamline-the-Browser-Extension-Activation-for-Your-Entire-Organization ## Page Description Learn how to deploy and activate the Torii browser extension for your entire organization After deploying the Torii browser extension, ## Details ### How can we help? ### Streamline the Browser Extension Activation for Your Entire Organization Learn how to deploy and activate the Torii browser extension for your entire organization After deploying the Torii browser extension, employees will need to activate the extension by signing in to Torii. While this process is quick and simple, you have the option to make it even simpler by sending a Browser Activation Email. #### Browser Activation Email The Browser Activation Email contains a magic-link, that will sign the user into Torii and activate the extension with a single click: The email is fully customizable, including the subject and content. #### Sending the Browser Activation Email ##### To send the browser activation to new users Create a new workflow from the Workflows page, use a trigger that will run for each new user, and add the "Send browser activation email" to the workflow. You can then configure the fields: Send activation email to - who should get the email. Send request from - who should be displayed as the sender. Subject and Message - the contents of the email to send. Email address for questions - if the user does not have the extension installed, he will have the option to contact this email address. ##### To send the emails to all users who haven't activated the extension Go to the Extension status report page, and click on the banner to send an email to all users who haven't activated their extension within the last 30 days. The same email, as shown above, will be sent. The email is fully customizable. #### Browser extension modes Torii browser extension operates in 3 alternative modes. These modes affect how and which data is being sent from the extension to Torii. They do not have any effect on how the extension looks and behaves from the employee's perspective. The different modes are: Authenticated mode (recommended) - Torii collects data only from authenticated employees. This means that employees would need to log in to the extension in order for their usage data to be sent. Unauthenticated mode - Torii collects data from all users of the browser extension. Torii gathers data from every user of the browser extension, including both logged-in employees and those who haven't logged in and their identity can not be confirmed by authentication. Disabled - The Torii extension will not collect any usage data from any employee Please be mindful. Setting the extension mode to Unauthenticated mode opens the door for unauthenticated, less reliable data to be sent into Torii. We strongly recommend using the Secure mode. If you want to check what mode you're currently in or switch between extension modes go to the Settings page. # Page Title Subscription Management ## Page URL https://support.toriihq.com/hc/en-us/articles/22291596956955-Subscription-Management ## Page Description Torii offers a basic plan that is charged monthly or annually. Please note that the billing arrangements for customers on the ## Details ### How can we help? ### Subscription Management Torii offers a basic plan that is charged monthly or annually. Please note that the billing arrangements for customers on the Professional or Enterprise plans might vary from the information provided on this page. Below, you'll find answers to frequently asked questions about subscription management. Should you have any queries not covered here, our support team is readily available to assist you. #### How does Torii licensing work? Torii's licensing model is tied to the total count of your employees. The classification of users as employees depends on your HR management system's settings and/or your Identity Provider (IDP). These settings can be adjusted to accurately reflect your employee numbers. For detailed guidance on configuring the employee definition in Torii, please refer to this help article. If you haven't defined employee parameters in Torii yet, license counts will default to the number of users. This includes all users integrated from your Identity Provider and other sources, with each unique email address representing an individual user. Since the user count typically exceeds the number of employees, defining your employee parameters is crucial to prevent excess charges. To monitor your current count of employees or users, visit the Employees/Users widget located on the Insights page. #### Monthly Subscription Billing Overview For those on a monthly billing plan, charges are automatically calculated at each renewal date. The bill is based on the total count of either Employees or Users as recorded on the last day of the preceding billing period. Example: Consider a scenario where the billing date is set for the 15th of each month. On April 15, the employee count stands at 250. If there's an addition of 40 employees before the next billing cycle, the bill issued on May 15 would reflect charges for a total of 290 licenses. #### Annual Subscription Billing Overview Annual subscriptions are billed based on the total number of Employees or Users at the start of the subscription period. If additional employees are added during the billing cycle, these changes are captured and adjusted for at the end of each monthly billing cycle through a true-up process. Upon the annual renewal date, the billing for the next period is automatically determined by the total number of Employees or Users as of the last day of the previous billing cycle. Example: If your annual billing date is April 15, and there were 250 employees at that time, Torii will check for any additional employees beyond the allocated 250 at the next monthly cycle on May 15. If there are now 290 employees, this represents 40 employees beyond the initially purchased number. On May 15, you will be charged a true-up for the 40 additional employees at the non-discounted employee price. #### Invoice customers Customers on the Professional or Enterprise paying via invoice, please reach out to your account manager if you have any questions. #### Updating Your Email or Billing Address Your subscription invoices are dispatched to the email address provided as your billing address during the purchase. To modify this address after your subscription has been activated, simply navigate to the "Settings" section in the Torii Admin console. Here, select “Subscription” followed by “Manage billing”. You can then update the email address linked to your billing details, ensuring that all future invoices are sent to the newly specified address. #### Accessing Past Invoices To obtain copies of your previous invoices, start by going to the “Settings” tab in the Torii Admin console. From there, click on “Subscription” and then select “Manage billing”. This section will provide you with the option to download your past invoices in PDF format. #### Cancelling Your Subscription You can cancel your subscription from the Subscription page. # Page Title SurveyMonkey Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166892490779-SurveyMonkey-Integration ## Page Description Set up the SurveyMonkey integration and get all the insights in Torii's dashboard Overview Torii integrates with your SurveyMonkey ## Details ### How can we help? ### SurveyMonkey Integration Torii's current integration uses a private app in SurveyMonkey limited to 500 API calls per day, which limits Torii to retrieve up to 500 app users.If you want to increase this number, please contact SurveyMonkey support. You will need to provide Torii view permissions and get SurveyMonkey API to connect the integration. Click the Update Scopes button. Scroll up and copy the Access Token #### Connect SurveyMonkey integration to Torii Once the integration is connected and synced, it will display a green checkbox. # Page Title Switching Between Light and Dark Mode ## Page URL https://support.toriihq.com/hc/en-us/articles/38553753419675-Switching-Between-Light-and-Dark-Mode ## Page Description You can toggle between Light Mode and Dark Mode by clicking the moon or sun icon at the top right corner of the screen. If you're in ## Details ### How can we help? ### Switching Between Light and Dark Mode You can toggle between Light Mode and Dark Mode by clicking the moon or sun icon at the top right corner of the screen. This lets you customize the appearance of the interface to match your environment or preference. Your choice will stay active until you change it again. # Page Title Sync your Renewal Calendar with Google Calendar and Outlook ## Page URL https://support.toriihq.com/hc/en-us/articles/21588563337243-Sync-your-Renewal-Calendar-with-Google-Calendar-and-Outlook ## Page Description Learn how to share your Renewal Calendar with anyone in your organization by publishing an iCalendar feed and subscribing to it on Google ## Details ### How can we help? ### Sync your Renewal Calendar with Google Calendar and Outlook Learn how to share your Renewal Calendar with anyone in your organization by publishing an iCalendar feed and subscribing to it on Google Calendar and Outlook. The Renewal Calendar is a great way to view all upcoming renewals at a glance. You can find it on the Renewals page: Calendar clients such as Google Calendar and Outlook can subscribe to the Renewal Calendar and view it alongside your other business related calendars: This allows to extend the visibility of the renewal calendar outside of Torii, in addition to sharing it with non Torii users, so you will never be surprised by an upcoming renewal. #### Share the Renewal Calendar 3. Go to the Renewals page. 4. Find and click on the Sync to Calendar button located at the top-right corner of the Renewal Calendar: 5. Click the Copy button to copy the URL of the iCalendar feed to your clipboard: 6. Subscribe to this URL from Google Calendar or Outlook. Learn how to do this in the next section. ##### Adding the calendar to Google Calendar Full instructions can be found on Google Calendar's Support Center. Here are the main steps: Tip: It might take up to 24 hours for changes to show in your Google Calendar. ##### Adding the calendar to Outlook Full instructions can be found on Outlook's Support Center. Here are the main steps: Note: Whenever events change on an iCal, it can take more than 24 hours for Outlook on the web to update your calendar. #### Privacy and Sharing Each link is unique to the user who created it. The link is valid as long as that user is active in Torii and has Contract READ permissions. # Page Title Tableau Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5198824209179-Tableau-Integration ## Page Description Set up your Tableau integration and get all the insights in Torii's dashboard Overview Torii integrates with your Tableau installation ## Details ### How can we help? ### Tableau Integration Set up your Tableau integration and get all the insights in Torii's dashboard Torii integrates with your Tableau installation and syncs: Note, Torii can support multiple accounts ##### Prerequisites for Tableau Online To connect Tableau Online to Torii, you will be required to provide Torii: Tableau Server Address - Copy only the name (Tableau article) Tableau Site Name - Copy only the part that comes after /site/ ##### Prerequisites Tableau Server Tableau Server Address - Copy the http:// + your server name as seen below (Tableau article) #### Connect Tableau integration to Torii Username and Password - Add Username / Email & Password Personal Access Token - Enter the Personal Token name & the Token secret #### Get a token name and secret from Tableau Copy the token secret ##### Note about SAML The Tableau API does not support SAML. From their documentation: Please use the TableauID credentials if you have Tableau configured to use SAML. Q: I am unable to connect the integration. What should I do?A: Please follow the following steps: # Page Title Talkdesk Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/8599641883163-Talkdesk-Integration ## Page Description Overview Torii integrates with Talkdesk and syncs: User Fields License Types Users (emails) Talkdesk Status in app ## Details ### How can we help? ### Talkdesk Integration Torii integrates with Talkdesk and syncs: Torii can support multiple Talkdesk accounts ##### Accounts & permissions Make sure you have an Talkdesk account and admin user or a user with permissions to view users, access account data, and create an OAuth client. Torii requires the following scopes: #### Connect Talkdesk integration to Torii #### How to Generate a Client ID and Client Secret #### How to Find Your Subdomain To find your subdomain, follow these steps: # Page Title Task Manager Hub ## Page URL https://support.toriihq.com/hc/en-us/articles/37473406141339-Task-Manager-Hub ## Page Description A complete guide to understanding, managing, and completing tasks in Torii. Tasks help coordinate approvals, collect information, and ## Details ### How can we help? ### Task Manager Hub A complete guide to understanding, managing, and completing tasks in Torii. Tasks help coordinate approvals, collect information, and keep workflows moving seamlessly. ### What is a Task in Torii? In Torii, a task represents an action item assigned to a user as part of an operational process, typically within an automated workflow. Tasks ensure the right people complete the right steps at the right time, whether it's reviewing an access request or filling in application details. Each task contains key metadata that helps track its lifecycle, responsibility, and context. ##### Task Properties A unique identifier for each task, formatted as T- (e.g., T-123). Task IDs are generated sequentially and are useful for referencing tasks in audits, communications, and reporting. The timestamp when the task was generated, either manually or via automation. Indicates who created the task, either a specific user or an automated workflow. The user responsible for completing the task. Assignees receive notifications and can track the task status in their Torii workspace. The current state of the task. Possible values include: Defines the nature of the task. Current types include: Currently, tasks in Torii are automatically created as part of a workflow. There is no manual task creation outside the workflow builder. ##### How to Create a Task via Workflow To create a task, you must use one of the following workflow actions when building or editing a workflow: Create Task – Approval Request Use this action when you need someone to review and approve an access request, application change, or any other decision. Create Task – Fill Application Form This action generates a task requiring the assignee to complete an application-related form, such as entering missing information. Create Task – Fill Contract Form Use this to assign a task that prompts the assignee to fill in contract-related information, typically as part of procurement or vendor management. Each of these actions can be configured with custom instructions, assign a specific user, and be triggered based on defined conditions (e.g., a new app being onboarded, a contract nearing renewal, or a license threshold being exceeded). #### Understanding the Relationship Between Tasks and Workflows Tasks in Torii are tightly integrated with workflows and play a critical role in controlling workflow execution. Each time a workflow reaches a “Create task” action, it pauses execution and waits for the assigned user to complete the task before proceeding. ##### How Tasks Control Workflow Progress This mechanism ensures that human input or validation is obtained precisely when needed, without losing automation continuity. ##### What Happens If a Workflow is Stopped? If a running workflow is manually stopped, any open tasks that were generated by that workflow and are still waiting to be completed will be automatically canceled. This prevents orphaned tasks from lingering and ensures that users aren't left with unnecessary or invalid action items. Tasks in Torii are currently visible only to Torii admins, providing a centralized view of all task-related activity. This allows administrators to track progress, follow up with assignees, and manage workflows more effectively. ##### Navigating to the Tasks Page To access the task list: This will take you to the main Tasks page, where all tasks, regardless of their type or origin, are visible. ##### The Three Task Tabs The Tasks page is organized into three tabs: Each tab provides insights into task history and status, making it easy to monitor task lifecycle and identify bottlenecks. ##### Canceling a Task You can cancel an open task directly from its details page. To cancel a task: Navigate to the Open Tasks tab and click on the task you want to cancel. This will open the Task Details page. On the Task Details page, click Cancel Task. Confirm the action in the confirmation dialog. Once canceled, the task will move to the Canceled tab, where you can view all canceled tasks. This helps quickly locate specific tasks or narrow down the view to a subset of interest. From the Tasks page, admins can also access the Task Settings by clicking the dedicated button. This section allows configuration of global task-related settings, including notification preferences (which we’ll cover in a later section). #### Receiving Tasks When a task is assigned to a user in Torii, they are notified automatically so they can take action promptly. Notifications can be sent via Slack, email, or both, depending on the organization's configuration. ##### Notification Methods Torii admins can configure how task notifications are delivered in the Task Settings page. Notifications can be toggled on or off for: Admins must also select the appropriate Slack workspace for task delivery. You’ll find the Task Settings section linked directly from the Tasks page for easy access. ##### Slack Notifications When enabled, assignees receive a direct Slack message that includes: The user can complete the task directly from Slack without needing to open Torii. ##### Email Notifications Similarly, email notifications include: Just like Slack, users can complete the task directly from the email. #### Completing Tasks Tasks in Torii are designed to be easy for assignees to complete, with minimal friction. Based on the task type, users are presented with clear options to either take immediate action (via Slack/email) or complete a short form on the web. ##### Approval Request Tasks Approval tasks ask a user to make a decision, such as approving or rejecting access. These tasks include two action buttons in the notification. ##### Customizable Button Labels When creating an approval task in the workflow builder, admins can customize the button labels to match the context of the request. This allows for more natural language and better alignment with the intent of the workflow. You’ll find the button label fields when setting up the Create Task – Approval Request action in a workflow. ##### Fill Application Form / Fill Contract Form Tasks These tasks require users to fill out a short web form, typically used to collect information related to an app or contract. Assignees are notified via: Clicking the button in either channel opens a Torii-hosted web page where users can complete the form. ##### Title and Message Customization Every task created through a workflow includes: This allows admins to personalize tasks using relevant context (e.g., “Please fill in contract details for Hubspot”). : Title: Fill application form Message: I'd be happy if you could fill out a few details about it. #### Canceling Tasks (Stopping a Workflow) In Torii, tasks are not canceled manually or individually. Instead, cancellation occurs automatically when the parent workflow is stopped. ##### When Are Tasks Canceled? If a workflow that is currently running reaches a task creation step (e.g., approval or form task), it pauses and waits for the task to be completed. However, if an admin decides to stop the workflow before the task is completed, Torii will: This ensures workflows don’t hang indefinitely and keeps the task list clean of unresolved or obsolete tasks. #### Notification Settings Torii provides flexible notification options so that task assignees are immediately alerted when they are assigned a new task. These settings are configurable by Torii admins and can be adjusted to match your team’s communication preferences. ##### Accessing Notification Settings To configure how task assignees are notified: ##### Available Notification Channels When enabled, assignees receive a structured email showing the task title, message, and relevant action button(s). When enabled, Torii sends a direct Slack message to the assignee’s Slack account, including the task context and action buttons. Each method presents the task in a user-friendly format: You can enable one or both channels depending on what works best for your organization. #### Task Types in Torii When adding a task to a workflow, admins choose from a set of predefined task types, each designed for a specific type of action. These types determine what the assignee will be asked to do and how they’ll interact with the task. In the workflow builder, each task action is clearly labeled with its purpose and includes a short description: ##### Available Task Types Description: Asks the assignee to approve or deny access Use case: Common for app access requests or decision-based workflows. Interaction: Assignee chooses Approve or Decline directly from the Slack or email message. Description: Asks the assignee to fill a customizable application form Use case: Collect metadata, compliance details, or missing information for a SaaS application. Interaction: Assignee clicks Answer Form to open and complete the form on a web page. Description: Asks the assignee to fill a customizable contract form Use case: Collect contractual information from stakeholders as part of procurement or renewal workflows. Interaction: Similar to application forms, completed via a linked form from Slack or email. These options ensure you can build workflows that involve people when needed, without sacrificing automation. # Page Title TeamViewer Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5167437039259-TeamViewer-Integration ## Page Description Setup your TeamViewer integration and get the insights in Torii's dashboard Overview Torii integrates with your TeamViewer account and ## Details ### How can we help? ### TeamViewer Integration Torii integrates with your TeamViewer account and syncs the: list of users you can view how many users are connected and how many have a license Status - Active, Suspended last used date - last time the app was used License - View the license types Note: Torii supports multiple TeamViewer accounts In order to connect the integration - you are required to be a TeamViewer administrator #### Connect TeamViewer integration to Torii From the Integrations page select the TeamViewer tile You will be required to Connect to TeamViewer to approve the Torii integration The OAuth integration type will automatically connect the integration and a green check mark will be displayed after the first sync.Note: If not connected you will be required to enter your user name and password to TeamViewer. # Page Title Technical Issue: 1Password Business subscription is required and the "Provision Managers" group must exist. ## Page URL https://support.toriihq.com/hc/en-us/articles/22574656632475-Technical-Issue-1Password-Business-subscription-is-required-and-the-Provision-Managers-group-must-exist ## Page Description Issue: 1Password Business subscription is required and the "Provision Managers" group must exist Environment: This error is ## Details ### How can we help? ### Technical Issue: 1Password Business subscription is required and the "Provision Managers" group must exist. 1Password Business subscription is required and the "Provision Managers" group must exist This error is displayed after running one of the 1Passwords actions. The "Provision Managers" group has not been created in 1Password or the 1Password account does not have a Business subscription. The account type in 1Password is visible in 1Password Settings > Change Account Type Verify the "Provision Managers" group exists in 1Password in Groups. If it's not, it can be added by visiting https://start.1password.com/settings/provisioning/cli and turning on Turn On CLI Provisioning. https://developer.1password.com/docs/cli/provision-users/ # Page Title Technical Issue: After connecting our Slack integration, it was disabled and we received an email from Torii with "The Slack integration to Torii has been disabled" as the subject. ## Page URL https://support.toriihq.com/hc/en-us/articles/20012288772251-Technical-Issue-After-connecting-our-Slack-integration-it-was-disabled-and-we-received-an-email-from-Torii-with-The-Slack-integration-to-Torii-has-been-disabled-as-the-subject ## Page Description Issue: After connecting our Slack integration, it was disabled and we received an email from Torii with "The Slack integration to ## Details ### How can we help? ### Technical Issue: After connecting our Slack integration, it was disabled and we received an email from Torii with "The Slack integration to Torii has been disabled" as the subject. After connecting our Slack integration, it was disabled and we received an email from Torii with "The Slack integration to Torii has been disabled" as the subject. The body of the email is as follows:It is no longer allowing Torii access to your data - When using SCIM on an Enterprise Grid organization, the app must be installed on the organization, not individual workspaces. Using SCIM to provision users in Slack. The Torii app was installed at the Workspace level in Slack and not the Org level. # Page Title Technical Issue: After updating the Principal Name for a user in Azure, I get a "You cannot update or delete a read-only field" error message when provisioning via SCIM. ## Page URL https://support.toriihq.com/hc/en-us/articles/17658679488667-Technical-Issue-After-updating-the-Principal-Name-for-a-user-in-Azure-I-get-a-You-cannot-update-or-delete-a-read-only-field-error-message-when-provisioning-via-SCIM ## Page Description Issue: After updating the Principal Name for a user in Azure, I get a "You cannot update or delete a read-only field" error ## Details ### How can we help? ### Technical Issue: After updating the Principal Name for a user in Azure, I get a "You cannot update or delete a read-only field" error message when provisioning via SCIM. After updating the Principal Name for a user in Azure, I get a "You cannot update or delete a read-only field" error message when provisioning via SCIM. Azure SCIM using the default attribute mapping of userPrincipalName to userName. The userName field in Torii cannot be changed or deleted once created. Delete the affected user(s) using the https://api.toriihq.com/v1.0/scim/v2/Users/{user_id} endpoint then provision the user again. # Page Title Technical Issue: Duplicate Users in the same application. ## Page URL https://support.toriihq.com/hc/en-us/articles/17370593352603-Technical-Issue-Duplicate-Users-in-the-same-application ## Page Description Issue: Duplicate Users in the same application. Cause: Multiple integrations with the same app are connected. Resolution: Check if there ## Details ### How can we help? ### Technical Issue: Duplicate Users in the same application. Duplicate Users in the same application. Multiple integrations with the same app are connected. Check if there are two connections of the same integration. If so, check with the client if those integrations are connected to the same account, if so, they should disconnect one of the integrations. This will resolve the problem of user duplication. # Page Title Technical Issue: I've connected an integration to Torii and it's failing to sync data from the application. ## Page URL https://support.toriihq.com/hc/en-us/articles/5188788554267-Technical-Issue-I-ve-connected-an-integration-to-Torii-and-it-s-failing-to-sync-data-from-the-application ## Page Description Question/Issue: I've connected an integration to Torii and it's failing to sync data from the application. Resolution: Learn how to ## Details ### How can we help? ### Technical Issue: I've connected an integration to Torii and it's failing to sync data from the application. I've connected an integration to Torii and it's failing to sync data from the application. Learn how to handle failures to synchronize your data When you integrate an application with Torii, you grant limited access to your data. However, sometimes integrations fail to synchronize your data for various reasons. Here's an overview of the different errors and how to handle them: Insufficient permissionsThe user who integrated the application does not have the required permissions to access the needed data. Re-connect the integration with a user with the correct permissions (usually an admin / super-admin). Invalid credentialsThe supplied credentials were incorrect. Re-connect the integration and make sure the credentials are valid and can be used to login into the application you are connecting. Multi-Factor Authentication is not supportedThe application requires another factor of authentication, such as verifying via a text message sent to your mobile device, an email, or other two-step verification methods. If there's a different user with Multi-factor authentication not enforced, re-connect the service with that user. The user needs to log in manually and approve new conditionsThe integrated application requires the user to approve new terms of service or other conditions before allowing access to the account. Log in to the application and approve the new conditions. The last sync failed, a retry will be performedThere was a temporary problem connecting to the integrated application. The sync process will be re-tried after 24 hours. You can view the status of your integrations on the Integrations page. # Page Title Technical Issue: Users returned with No Email Address from HiBob ## Page URL https://support.toriihq.com/hc/en-us/articles/17364295427099-Technical-Issue-Users-returned-with-No-Email-Address-from-HiBob ## Page Description Issue: Users returned with No Email Address from HiBob, causing to a sync failure in the Hibob Integration. Zendesk Tickets for example: ## Details ### How can we help? ### Technical Issue: Users returned with No Email Address from HiBob Users returned with No Email Address from HiBob, causing to a sync failure in the Hibob Integration. Zendesk Tickets for example: https://toriihqsupport.zendesk.com/agent/tickets/14103 Missing permissions Enabled the below "People data" from Hibob Console: # Page Title Technical Issue: Why did the workflow not trigger even though the criteria matched the conditions? ## Page URL https://support.toriihq.com/hc/en-us/articles/4822994531483-Technical-Issue-Why-did-the-workflow-not-trigger-even-though-the-criteria-matched-the-conditions ## Page Description Question/Issue: Why did the workflow not trigger even though the criteria matched the conditions? Troubleshooting Steps: In order ## Details ### How can we help? ### Technical Issue: Why did the workflow not trigger even though the criteria matched the conditions? Question/Issue: Why did the workflow not trigger even though the criteria matched the conditions? # Page Title TestRail Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5199114119323-TestRail-Integration ## Page Description Setup your TestRail integration and get all the insights in Torii's dashboard Overview Torii integrates with your TestRail installation ## Details ### How can we help? ### TestRail Integration To connect the integration to Torii, you will need to provide Torii, TestRail organization URL, and User email. To generate an API Key: It will take about 15 - 20 minutes for the key to be activated. #### Integrate TestRail with Torii # Page Title New User Training #6: That One App No One Uses ## Page URL https://support.toriihq.com/hc/en-us/articles/8489186907419--New-User-Training-6-That-One-App-No-One-Uses ## Page Description This is video 6 out of 13 in the New User training series. Learn how to manage your SaaS Licenses, what the difference between an Active ## Details ### How can we help? ### New User Training #6: That One App No One Uses This is video 6 out of 13 in the New User training series. #### Questions for Implementation #### Continue Your Training Series Jordyn Still Has Access to That App?! #### Additional Resources Finding Wasted Licenses # Page Title New User Training #8: The Secret Life of Apps ## Page URL https://support.toriihq.com/hc/en-us/articles/8489285534747--New-User-Training-8-The-Secret-Life-of-Apps ## Page Description This is video 8 out of 13 in the New User training series. Learn what how Torii discovers SaaS use through expenses, how to manually ## Details ### How can we help? ### New User Training #8: The Secret Life of Apps This is video 8 out of 13 in the New User training series. #### Questions for Implementation #### Continue Your Training Series To Renew or Not to Renew #### Additional Resources Introduction to Expenses Expenses, Yearly Costs, and Contract Value How to Add Expenses Manually How to Delete Expenses # Page Title Ticketing System Integrations ## Page URL https://support.toriihq.com/hc/en-us/articles/9032150187035-Ticketing-System-Integrations ## Page Description Overview As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and ## Details ### How can we help? ### Ticketing System Integrations As an IT admin, you often delegate SaaS management tasks to other stakeholders. Using Torii's automated capabilities and relying on rich Torii data, you can create tickets or tasks in popular collaboration platforms whenever Torii identifies that a process needs to be initiated. This functionality simplifies collaboration with other team members and provides complete visibility into SaaS management processes. Here are a few examples of how Torii integration with ticketing systems can be applied: #### Open a ticket with the following applications # Page Title Time Zone in Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/4551092916635-Time-Zone-in-Torii ## Page Description What are the timezone settings in Torii and can I change them? Torii uses one time zone in its UI the UTC (Coordinated Universal Time) ## Details ### How can we help? ### Time Zone in Torii Torii uses one time zone in its UI the UTC (Coordinated Universal Time) the primary time standard by which the world regulates clocks and time. Question: Can I configure the time zone? Answer: No, timezone settings cannot be changed in Torii's product. # Page Title Timed Access Request ## Page URL https://support.toriihq.com/hc/en-us/articles/36879524060699-Timed-Access-Request ## Page Description Give employees access to the right tools—on their terms, for the right time. Timed Access Request enables employees to request specific ## Details ### How can we help? ### Timed Access Request Give employees access to the right tools—on their terms, for the right time. Timed Access Request enables employees to request specific app licenses—like Zoom Pro or Figma Developer—for a defined period or indefinitely. Whether an employee needs premium access for 30 days or a contractor requires licenses for a multi-month project, this feature brings precision and automation to SaaS access control. By incorporating Timed Access Request into your workflows, IT can: Reduce unused or forgotten licenses Improve compliance with internal and external policies Offer employees a smooth and flexible request experience Maintain full visibility and governance over temporary access Example: Marketing Contractor with a Defined End Date A freelance marketer joins for a 3-month campaign and needs Zoom Pro and Canva Pro. Using Timed Access Request, they request both licenses for exactly three months. Once approved, Torii automatically: Grants the licenses Tracks the access duration Revokes or downgrades access at the end of the term—without IT needing to remember to intervene #### Setting Up Timed Access Request Timed Access Request is powered by Access Request Policies and built into Torii’s automation workflows. Admins should configure policies that dynamically react to: The requested license The requested duration To do this effectively, leverage the following personalization tokens: ##### Token Reference Trigger.Requested-license — the license requested by the user (text) Trigger.Requested-duration-days — the number (in days) of the requested license duration (number) Trigger.Requested-duration — textual description of the requested license duration (e.g., 1 day, 3 months, No expiration). This is useful when you would like to send an email or Slack message with this information. To handle temporary licenses, you should also add an If/Else condition using the following: ##### Workflow Design: Key Steps Once the correct branch is selected, add an action to assign the requested license to the user. This step ensures the employee receives the appropriate level of access as soon as the request is approved. In each branch, add a Wait action and pass in: Be sure to set the duration units to "Days" when configuring the wait step.This ensures Torii waits exactly the requested period before executing the next action. After the wait, add an action to: Remove the assigned license, or Downgrade to a lower-tier license (e.g., from Zoom Pro to Zoom Basic) ##### Example workflow: # Page Title New User Training #9: To Renew or Not to Renew ## Page URL https://support.toriihq.com/hc/en-us/articles/8490605844763--New-User-Training-9-To-Renew-or-Not-to-Renew ## Page Description This is video 9 out of 13 in the New User training series. Learn how Torii can be a supplement to your contract management, where to ## Details ### How can we help? ### New User Training #9: To Renew or Not to Renew This is video 9 out of 13 in the New User training series. #### Questions for Implementation #### Continue Your Training Series Do I REALLY Have to Do This? #### Additional Resources Contracts and Procurement Management Importing Contracts Bulk Updates to Contract Details # Page Title Torii AI Slack Bot ## Page URL https://support.toriihq.com/hc/en-us/articles/19276595292315-Torii-AI-Slack-Bot ## Page Description Torii’s app for Slack lets you fetch information about your SaaS stack directly from a Slack channel, private group or direct message by ## Details ### How can we help? ### Torii AI Slack Bot Torii’s app for Slack lets you fetch information about your SaaS stack directly from a Slack channel, private group or direct message by answering questions like "Who's the app owner of Intercom?" Torii Slack app is available on all public channels once you integrate Slack. Follow these instructions to integrate Slack with Torii. The /torii command can be used in a private channel if added to it. Check the FAQ below to learn how to make it available in a private Slack channel. ##### Using the Slack Slash Command Use /torii ask [question] to fetch information directly from Torii by asking questions in natural language. /torii ask who is the app owner of Dropbox? /torii ask how much am I paying for Salesforce? /torii ask how many active Zoom licenses do we have? /torii ask what is the most expensive app with the tag Project Management? We recommend creating a dedicated Torii Slack channel to keep all of your data in one place. If the channel you create is private, ensure to add the Torii app to the channel, as detailed in the FAQ below. Torii AI Slack Bot is powered by AI. This feature enables seamless access to third-party AI tools and functionality, processing customer requests via chat. While the AI transforms customer requests into API calls without sending any customer data to the AI provider, note that the actual chat message is processed by the AI provider to generate the API call. Learn more about Torii's use of AI in this article. Learn more about how Torii uses AI in this article. ##### Why is the /torii command not available even though Slack is integrated with Torii? If Slack is already integrated but the /torii command is not available, then it probably means you are missing some permissions. Please reconnect Slack Integration to add the missing permissions. ##### How do I add the /torii command to a private channel? In order to have the /torii available in a private channel, you should follow these instructions in Slack to add the Torii app to the channel: ##### What data in Torii can the /torii Slack command access? The /torii command can access data in Torii based on the role of the user invoking the command. Data access is restricted to the permissions associated with that user's role. Therefore, the information retrieved will vary depending on the user's specific permissions within Torii. ##### Can the /torii Slack command modify, change data, or run workflows in Torii? No, the /torii Slack command is designed for querying and accessing data only. It cannot modify, change data, or execute workflows in Torii. Its primary function is to provide users with information based on their permissions without making alterations to the data or processes within Torii. # Page Title Torii AI ## Page URL https://support.toriihq.com/hc/en-us/articles/18661742876955-Torii-AI ## Page Description Torii AI features use artificial intelligence (AI) to match data to apps, categorize, or otherwise analyze data and/or content to help ## Details ### How can we help? Torii AI features use artificial intelligence (AI) to match data to apps, categorize, or otherwise analyze data and/or content to help users in your organization with SaaS management tasks. Torii AI refers to two sets of features: Which Torii features use AI? Powered by Torii AI Powered by AI Partners Does Torii use a public or private model? Torii uses a public model. Which 3rd party AI Model providers are in use? Torii currently uses models from OpenAI, Anthropic and Amazon Nova. Does Torii allow AI to train models using my input or output? We do not use your input or output to train machine-learning models, and we do not authorize others to either. Does Torii allow AI models to store customer data? AI Partners may retain data for up to 30 days, but can not use it to train or improve their models. Can AI features be disabled? Yes. AI features can be individually disabled from Settings → AI Settings. This control is only available to admins with the Settings scope, as defined by Torii’s roles and permissions (RBAC). Disabling a feature immediately stops its AI functionality without affecting other features. # Page Title Torii API ## Page URL https://support.toriihq.com/hc/en-us/articles/5201866360219-Torii-API ## Page Description Torii API Documentation can be found here Generate Torii API key Go to the Settings page >> API Access Click on Generate API Key ## Details ### How can we help? Torii API Documentation can be found here ### Generate Torii API key Click on Generate API Key Set an Expiration date: For security purposes, we recommend setting an expiration date when generating a new API key. - The key will become invalid on the chosen expiration date. - Torii will send an email reminder a month prior to the expiration date reminding you to generate a new API Key. Read the API Documentation (requires to be logged in to Torii) #### API Key Rotation Token expiration can not be changed after its creation. The recommended way to rotate the API key is to: # Page Title Torii Data Q&A ## Page URL https://support.toriihq.com/hc/en-us/articles/6029503350555-Torii-Data-Q-A ## Page Description Licenses Why do I have more users than licenses?Torii detects users even if they are not in the integrated ("managed") ## Details ### How can we help? Why do I have more users than licenses?Torii detects users even if they are not in the integrated ("managed") account. This includes users who have signed up for free accounts using their company email addresses. You can visit the app’s “Users” page to see which users have licenses (and which don’t). Why do I have more licenses than users?Many apps allow multiple licenses for each user. For instance, one Atlassian user may have licenses for Jira, Confluence, and BitBucket. It’s also possible to have purchased more licenses than you have users. Why are there so many inactive licenses for this app? Why doesn't this integration show all my license types?Torii can only get license data via direct integration, so if some license types don’t appear, this is a limitation of the integrated app's API. Please note that some direct integrations don’t provide license data at all. We know not all licenses are in use. Why does Torii show no inactive licenses for this app?Torii might not have a data source for the app that reports the Last Used Date. You can deploy the Torii browser extension to provide a last-used date. Why do some apps show no usage?These apps do not have data sources that report usage. Relatively few integrations provide this data, so the most reliable source of usage information comes from the Torii browser extension. Why does an app with 500 users only show 100 users in Torii?The app is not integrated. For non-integrated apps, Torii might have partial data sources that can only identify users when they log in. If there is an integration available, please consider using it for a more accurate picture of the app’s users. Why does Torii show apps that no one has ever used?When users sign up for mailing lists or register for events via a form on a website, the browser extension might report this as creating an app account. Why isn't an app I know in use appearing in Torii? Users are logging in via unique credentials instead of SSO. If possible, consider enforcing SSO login for that app. The browser extension is not deployed. Deploy the browser extension to identify more apps in your environment. The app is not in Torii's app database (more common for internal and on-premises apps). For an on-premises or internal app, you can create a custom app and add users to it via a custom integration. For a SaaS app, please contact our support team to get it added to Torii’s app database. Why does Torii show no active users for an app with mostly active users?If the data sources for that app do not include usage, Torii will show no active users. You can deploy the Torii browser extension to provide usage data. Why does Torii show 1,000 users when we only have 700 employees?In Torii, a user is not an employee but a unique email address with access to at least one app. It is normal to have more users than employees because of shared and service accounts and contractors. When viewing the user list in the app, we see an email instead of a name; However, when viewing the users on their own, it displays correctly.Why does it happen? This is the correct behavior: Why does Torii show our total expenses as too high?This is likely because of your expense app's integration configuration. Configurations that might cause expenses to be too high in Torii include syncing expenses from too many accounts and including both main items and line items when only main items should be included. Please reach out to our support team for help configuring your integrated expense app. Why does Torii show our total expenses as too low? Why does an app with $25,000 in expenses show none in Torii?You most likely need to create or update a matching rule to associate these expenses with the correct app. Why are some key fields in my integrated HRMS/SSO/IdP app not appearing in Torii?Most fields are not synced by default. If you would like to sync a specific field (for workflow criteria, for instance), you can request it by contacting our support team. #### Browser Extension I deployed the browser extension to all users via Chrome. Why do only a few users show activity?The browser extension is likely in Authenticated mode but users have not signed in to allow it to report activity. You can use Torii to send an email to all non-reporting users to encourage them to authenticate the extension. Why is the overall offboarding marked as completed by a user (john smith) when every offboarding method is automatic and should be marked as removed by us? Offboarding will be marked as done if the user manually marks it from the user page Or automatically if the last app to be offboarded was done automatically by Torii.In the above example, the user marked the offboarding process as done, then one or more actions were automatically triggered by Torii. An offboarding mismatch between a user's number of Apps and the offboarding appsBefore starting a user offboarding process, the user had two associated applications (Jira and Attalisan).However, when the Account manager pressed the "start Offboarding" button, the user had three apps (Jira, Attalisan, and Looker). Why the inconsistency? In the "Active" user page we show only the apps with "active" status(and not deleted). On the offboarding page and in the " start offboarding" popup process, we show all apps (active + deleted status). Why does it work that way?When we offboard users, we want to ensure they are removed from the specific app, for example, Asana. They might stop using it via Google, but still be an active user in Asana, and log in via user_password.Therefore on the offboarding page, we present all apps associated with these users, active or not. # Page Title Torii Integrations and Use Cases ## Page URL https://support.toriihq.com/hc/en-us/articles/5188796536731-Torii-Integrations-and-Use-Cases ## Page Description The different insights and capabilities you gain by integrating the different types of applications Torii's rich library of 100+ ## Details ### How can we help? ### Torii Integrations and Use Cases Torii's rich library of 100+ direct integrations provide powerful capabilities to manage your SaaS stack. Each and every application you integrate with Torii enriches your data and insights and gives you better management capabilities. This article lists the different insights and capabilities you gain by integrating the different types of applications. Those insights and capabilities are grouped into these categories: Application discovery Application usage Security and compliance visibility Seat based license utilization User Provisioning Discover all the users in your organization that are using SaaS applications. Configuration effort Discovery scope Google Workspace (G-Suite) SSO (Okta, Onelogin, JumpCloud) HRIS (Bob, Bamboo, Namely) Browser Extension Medium - requires deployment Medium - doesn’t discover user attributes (titles, departments, …) #### Application Discovery List all applications that are being used by the employees. High - all apps connected to Google Workspace Low - there are usually not many apps connected to Azure Medium - discovers just the known apps (apps already connected to the SSO) Expenses (NetSuite, Oracle, Expensify, Quickbooks, file upload) Medium - requires some fine-tuning with finance Medium - doesn't uncover users Very high - the best tool for shadow-IT discovery #### Application Usage Show application usage metrics: User activity in the current month Average days of use in the current month SSO (Okta, Google Workspace, Onelogin, Azure-AD, JumpCloud) High - very accurate but limited to login events of the connected apps ### Security and Compliance Visibility Make sure past employees are no longer have an account. 100+ direct integrations Very powerful when combined with IdP and HRMS data to view the department of the employees. #### Seat Based License Utilization Analyze seat-based license utilization. 90+ Direct Integrations High-license data can only be achieved automatically via direct integrations Automatic user onboarding and offboarding 20+ direct integrations Limited to the set of APIs that are provided by the vendor # Page Title Torii Labs - Beta Testing ## Page URL https://support.toriihq.com/hc/en-us/articles/12252678048411-Torii-Labs-Beta-Testing ## Page Description Interested in testing out our newest advances? You can now opt-in to test Torii's upcoming features: Each Labs feature has a ## Details ### How can we help? ### Torii Labs - Beta Testing Interested in testing out our newest advances? You can now opt-in to test Torii's upcoming features: Depending on customer feedback, Labs features may be added to the product for everyone, or removed entirely. In both cases, it will no longer be available in Labs. Where can you provide feedback? We would love to hear your feedback if you are trying a Labs feature.Please submit a feedback item at https://feedback.toriihq.com/ # Page Title Torii Notifications Overview ## Page URL https://support.toriihq.com/hc/en-us/articles/6889869544347-Torii-Notifications-Overview ## Page Description Overview Torii provides several out-of-the-box notifications to help admins stay informed about activities such as new apps discovered, ## Details ### How can we help? ### Torii Notifications Overview Torii provides several out-of-the-box notifications to help admins stay informed about activities such as new apps discovered, upcoming contract renewals, user offboarding status, and more. These notifications will be sent only to users with the Admin role, and can be opted in/out of, to make sure you receive updates on what matters to you. #### Managing Your Notifications #### Notification descriptions This notification will be sent periodically, recapping how many contracts have been imported into Torii that have not been successfully matched to an app. #### Additional Notifications In addition to the notifications that appear in the Notification Settings page, you can find two more notifications which you can control in the Workflow settings page. You can find this by going to Workflows -> Workflow Settings. In this page, there are two more notifications you can control: # Page Title Torii “Read-Only” Integration with Google Workspace Tenant ## Page URL https://support.toriihq.com/hc/en-us/articles/13847215973915-Torii-Read-Only-Integration-with-Google-Workspace-Tenant ## Page Description Overview To create a Torii “Read-only” integration with your Google Workspace tenant, create a custom admin role in Google Workspace ## Details ### How can we help? ### Torii “Read-Only” Integration with Google Workspace Tenant To create a Torii “Read-only” integration with your Google Workspace tenant, create a custom admin role in Google Workspace with minimal privileges and assign this role to the service account used for Torii integration. Creating a custom admin role with these privileges limits access to very specific capabilities.This approach does NOT require using the Google Workspace Super Admin role. #### Create the custom role. #### Connect via Torii’s Integrations page NOTE: If you receive an error message connecting to Google via Torii’s Integrations page, please do the following: For additional documentation, please see the Google Workspace Integration Documentation. # Page Title Torii's SCIM Setup with Okta ## Page URL https://support.toriihq.com/hc/en-us/articles/12362411335835-Torii-s-SCIM-Setup-with-Okta ## Page Description Features Torii Supports the following features: Create Users Update User Attributes Deactivate Users Generate Torii SCIM From the ## Details ### How can we help? ### Torii's SCIM Setup with Okta Torii Supports the following features: #### Generate Torii SCIM Click on Generate API Key to generate a new SCIM Set an Expiration date: For security purposes, we recommend setting an expiration date when generating a new key. - The key will become invalid on the chosen expiration date. - Torii will send an email reminder a month before the expiration date reminding you to generate a new Key. ____________________ #### Okta configuration #### API/SCIM Key Rotation Token expiration can not be changed after its creation. The recommended way to rotate the key is to: #### Troubleshooting & Tips # Page Title Torii's SCIM User Provisioning ## Page URL https://support.toriihq.com/hc/en-us/articles/9183460072347-Torii-s-SCIM-User-Provisioning ## Page Description Generate SCIM API key From the Settings page >> Security, enable the SCIM toggle Go to the API Access tab; From here, you can ## Details ### How can we help? ### Torii's SCIM User Provisioning ### Generate SCIM API key Click on Generate API Key to generate a new SCIM Set an Expiration date: For security purposes, we recommend setting an expiration date when generating a new key. - The key will become invalid on the chosen expiration date. - Torii will send an email reminder a month before the expiration date reminding you to generate a new Key. Use the Authorization header in the following format: Authorization: Bearer API_KEY * Read the API Documentation (requires to be logged in to Torii) Provides details about our SCIM configuration Provides the available resource types in the SCIM API Provides the available resource types schemas with attributes information(as described in the attributes table This endpoint will retrieve all the active users in Torii. All user fields can sort the results. Returns the user associated with the user's ID Users cannot be deleted if they are the last admin in the org. If SCIM is enabled for the org, SAML auto-provisioning will be disabled “givenName”: “First” ”familyName”: “Last” emails: [{ ”primary”: true “value”: “user@toriihq.com” }] #### API/SCIM Key Rotation Token expiration can not be changed after its creation. The recommended way to rotate the key is to: # Page Title Torii Users' Roles, Scopes and Access Level ## Page URL https://support.toriihq.com/hc/en-us/articles/4682064479003-Torii-Users-Roles-Scopes-and-Access-Level ## Page Description Understand Torii roles and permission scopes Recommended prerequisite We recommend reading the Introduction to Roles-Based Access Control ## Details ### How can we help? ### Torii Users' Roles, Scopes and Access Level #### Recommended prerequisite Torii users with an Admin role can customize the permissions for new and existing users in their Torii account. This article will review and explain Torii's roles & scopes. How they are defined, built, and how to use them. A role defines each scope's access level (full access, read-only, or none) and consists of the following: #### Scopes Description The following section will help you understand the scopes and access levels available for every scope.Note that when providing a role with the "Take Action" permission level this role will also include "read-only" permissions. Access, explore, edit and manage access permissions for all Torii dashboards.Note: Selecting this access level will mandate at minimum a Read-only access level for other scopes in Torii. Access and explore all Torii dashboards. No inherent access to Torii dashboards. _____________ View and act on Applications data and configuration View only Application data and configuration View user information and application usage Is not exposed to user information Can configure workflows and run them, Configure Offboarding and App Catalog automatic policies. Is not exposed to workflow data configuration or logs. Configure offboarding methods and take actions on offboarding users View offboarding user information and configuration, including offboarded and offboarding badges. is not exposed to offboarding data or configuration Configure and take action over integrations View integration capabilities and status Configure the following tabs in settings: These settings include:Company name, Displayed currency, User lifecycle, Inactivity period, Extension mode, Generate API Key, hide Geolocation data. View setting configurations Torii Admin only Part of the Applications scope Part of the Contracts scope Create and edit public views.These views will be shared with all Torii users in applications and contract pages. View public views Users with this permission are not exposed to the public view configuration. Configure App catalog access and specific App request policies Note that in order to create and edit automated policies the user requires a Workflows take action scope in addition to this scope. View Application Catalog settings and policies. Launch, conduct and submit user access reviews Is not exposed to the Access Reviews page, and cannot access single access reviews #### _____________ Access to view and edit (scheduling or recipients, but not content) of all scheduled reports by any user Access to view all scheduled reports by any user Access to view only scheduled reports that you've scheduled #### Financial Scopes Configure and take action over license costs and chargebacks. Can review and edit financial information related to expenses. View Expense data and matching rules Review and create contracts Review contracts and renewal pages including related reports. # Page Title Twingate Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/33379921233307-Twingate-Integration ## Page Description Overview Torii integrates with Twingate and syncs the following: User Fields License Types Email Twingate Role Status ## Details ### How can we help? ### Twingate Integration Torii integrates with Twingate and syncs the following: ##### Accounts & Permissions To connect this integration, you must provide: #### How to Generate the Required Values ##### Finding the Subdomain ##### Generating the API Key ##### How to Connect the Integration Q: Can I add or remove users from the "Everyone" group in Twingate using Torii? A: No. The Everyone group is a built-in group that automatically includes all users. Twingate's API does not support modifying this group. For any further questions, please contact Torii Support. # Page Title Udemy Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5728262259099-Udemy-Integration ## Page Description Overview Torii integrates with Udemy and syncs the users' list. Prerequisites SCIM is available for the following plans ## Details ### How can we help? ### Udemy Integration Torii integrates with Udemy and syncs the users' list. SCIM is available for the following plans Users are authenticated using SAML single sign-on Users are provisioned by an Identity Provider using SCIM To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Udemy help center, or their support. #### Integration Process To connect Udemy to Torii, follow these steps: Go to Torii's Integrations page and click the Udemy tile In the Connect Udemy window, note that Torii already identified and populated the Base URL and Authentication Method fields. In the Access token field, paste the access token Once the integration is connected and synced, it will display a green checkbox # Page Title UKG Pro Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/7617025950107-UKG-Pro-Integration ## Page Description Set up UKG Pro integration and get all the insights in Torii's dashboard Overview Torii integrates with your UKG Pro account and syncs ## Details ### How can we help? ### UKG Pro Integration Torii integrates with your UKG Pro account and syncs the Users': Names, IDs, emails, roles, and statuses #### Get the Service account Account User Name and Password Enter a user name; we recommend using Torii as the user name to be recognizable by others Enter an emailNote that the password will be auto-generated upon clicking the Save button. Save the generated password, as you will need it when connecting UKG Pro integration to Torii #### Connect UKG Pro integration to Torii Report Path (optional) – If provided, the integration will sync data from the specified report using UKG’s Reports-as-a-Service API. If left empty, Torii will use the standard API. #### Syncing Data from Reports Torii enables syncing user data from custom reports using the Reports-as-a-Service API. To use this option, you must create a report in UKG Pro that includes the following required fields, exactly as they appear in parentheses: In the Torii integration setup, you will find a Report Path field. If you enter a report path, the integration will sync data from the specified report. If left empty, the integration will use the standard UKG API. To locate your Report Path, follow the instructions provided in the UKG Reports-as-a-Service documentation: How to Find the Report Path #### Update the User Lifecycle settings To ensure you get the user lifecycle information in Torii, define the UKG Pro as your Human resource management system. # Page Title Understanding Torii Widgets ## Page URL https://support.toriihq.com/hc/en-us/articles/34177154329627-Understanding-Torii-Widgets ## Page Description Overview Widgets are the building blocks of your dashboards in Torii, allowing you to display and interact with key data in a highly ## Details ### How can we help? ### Understanding Torii Widgets Widgets are the building blocks of your dashboards in Torii, allowing you to display and interact with key data in a highly customizable way. Each widget serves a specific function, helping you monitor important metrics, visualize trends, and create action items —all from a single dashboard view. This guide will walk you the different widget types available, how you can customize them, and how to make the most of their capabilities. #### Common Capabilities #### Types of Widgets Torii currently supports the following widget types: Purpose: Display key performance metrics in a simple, easy-to-read format. Purpose: Displaying data as proportional segments of a circle to quickly understand the relative sizes of different categories in a dataset. Purpose: Displaying discrete categories and making direct comparisons between them. Purpose: Displaying detailed data for metrics that require more than a number or image to convey. # Page Title Upcoming Changes in Torii: Introducing the New Tasks Hub ## Page URL https://support.toriihq.com/hc/en-us/articles/37473282216219-Upcoming-Changes-in-Torii-Introducing-the-New-Tasks-Hub ## Page Description We’re excited to announce a major enhancement to Torii’s automation capabilities with the launch of the Tasks Hub—a centralized system ## Details ### How can we help? ### Upcoming Changes in Torii: Introducing the New Tasks Hub We’re excited to announce a major enhancement to Torii’s automation capabilities with the launch of the Tasks Hub—a centralized system for creating, managing, and tracking tasks across your workflows. This update introduces tasks as a first-class entity in Torii, expands workflow flexibility, and simplifies notifications. Below is everything you need to know about what’s changing, how your current setup will be upgraded, and what actions (if any) you need to take. Read the full Tasks Hub Help Article ##### 1. Tasks Now Have Their Own Page With this release, Tasks are now a standalone entity within Torii. You’ll find a new “Tasks” page in the left-hand navigation of the Torii admin console. From this page, admins can: View all tasks across all workflows Filter and search by type, assignee, status, or date Access task settings, including global notification preferences Monitor open, completed, or canceled tasks with ease This gives your team a centralized command center for operational actions. #### Migration of Existing Workflow Actions To unify how tasks are created and tracked, we’ve upgraded your existing workflow actions. Here's how your legacy actions will be transformed: Each new action type supports advanced configuration, visibility in the Tasks page, and seamless integration with task lifecycle tracking. #### How Action Fields Are Being Converted To preserve your existing workflows during the upgrade, we’ve mapped the fields from the old actions to their equivalents in the new task format. Below is a breakdown of how these fields are translated: ##### Email-Based Actions ##### Slack-Based Actions These mappings ensure a smooth transition, with no action needed on your part for the conversion to take effect. #### Global Task Notification Settings Another key change: Notification settings are no longer controlled per workflow action. Instead, notifications for task assignments are now configured in one central place—the Task Settings page, accessible via the top-right of the new Tasks hub. Admins can now define global preferences for: Slack notifications Email notifications This centralized approach reduces redundancy and ensures a consistent communication experience across all workflows. #### Important: Dual Notifications for Slack Users As part of the new global task notification settings, both Slack and email notifications are enabled by default. This means that if your organization currently uses Slack for task delivery, your assignees will now also receive email notifications for the same tasks after the upgrade. This ensures tasks are not missed—but it also means users may receive both Slack and email notifications unless changed. ##### How to Adjust Notification Preferences If you prefer to limit task notifications to Slack only, you can update this in the Task Settings: Go to the Tasks page in the Torii admin console Click the “Task Settings” button in the top-right corner In the Notifications section, disable “Send email notifications” This ensures that task alerts are delivered only via your preferred channel. #### Deprecation of Certain Notification Options With this streamlined model, a few legacy options are being retired: ##### Email CC Field in Forms Old form actions (application/contract) sent via email previously allowed for CC-ing additional addresses. This is no longer supported. If you'd like someone to be notified on task creation, please use the "Notify this email on task creation" field instead. ##### Slack Channel Assignment Previously, approval requests could be sent to Slack channels. With the new system, every task must be assigned to a user (or multiple users) to promote accountability and clearer ownership. If you'd still like notifications to appear in Slack channels, you can use the new "Notify this Slack account on task creation" option alongside direct assignments. #### Why These Changes Matter Improved visibility: Tasks are now easily trackable and auditable across the platform. Clearer ownership: Required assignments help drive task completion and accountability. Simplified configuration: Centralized task settings remove ambiguity and make task setup more efficient. Seamless automation: Workflows now pause and resume based on task completion, ensuring the right steps are taken at the right time. #### No Action Required (But You Can Customize) All your existing workflows using the legacy actions will be automatically migrated to the new task system. That said, you may want to: Review your global task notification settings Customize task messages and titles for clarity Explore the new Tasks page to get familiar with its features #### Questions or Feedback? If you have questions about how your workflows are affected or need help configuring tasks, feel free to reach out to our support team or your Torii Customer Success Manager. # Page Title Update application and contract details ## Page URL https://support.toriihq.com/hc/en-us/articles/17387790187163-Update-application-and-contract-details ## Page Description Introduction Torii empowers you to create and populate custom fields for both applications and contracts, keeping all the important data ## Details ### How can we help? ### Update application and contract details Torii empowers you to create and populate custom fields for both applications and contracts, keeping all the important data in one place. What's more, you can set up automatic updates for these fields based on various events that Torii monitors. The following workflow actions facilitate this seamless data enrichment process: 1. Change application state 2. Update application field 3. Update contract field. Let's delve into a few practical examples to illustrate these capabilities. ##### Automate InfoSec approval process for new apps When a new app is discovered, you can instantly change the state of this new app to "In review" and proceed to send an approval request to your Information Security (InfoSec) team. Once InfoSec gives their approval, the app's state can automatically transition to "Sanctioned," signifying its approval. For added granularity, you have the flexibility to define that only applications posing a high-security risk should undergo a security review. In such cases, you can capture the data pertaining to Security reviews in a dedicated app custom field named "Reviewed by security team." As soon as the application gets the green light from InfoSec, you can automatically update this custom field to "Yes," indicating that the app has successfully passed the security review process. ##### Add reasons for application state changes Keeping the details about the reasons for changing application states in Torii is important, especially when you decide to close an app. To achieve this, define a custom application field "Reason for closing the app" and create values such as "Not used for 90 days", "Not renewed", "Free app with a single user" and more. Then you can automatically close apps while populating the "Reason for closing the app" custom field with the appropriate explanation. For instance, consider a scenario where a free app remains unused for 6 months and has only one user. In this case, the workflow will trigger the closure of the app and simultaneously update the "Reason for closing the app" field with the reason "Free app with a single user." In this way, you maintain a comprehensive record of the rationale behind application state changes, empowering your team with valuable insights for informed decision-making and app management through Torii. ##### Manage renewals When contract renewal is getting close, you can open a renewal task for the contract owner and update the contract status in Torii to "In review". Another use case would be updating the next renewal date automatically. You can read more about it in this article. # Page Title Update Slack user ## Page URL https://support.toriihq.com/hc/en-us/articles/29477028612379-Update-Slack-user ## Page Description Introduction With Torii automation, you can seamlessly update user attributes in Slack, simplifying employee management during key ## Details ### How can we help? ### Update Slack user With Torii automation, you can seamlessly update user attributes in Slack, simplifying employee management during key mid-lifecycle events such as promotions, departmental transfers, or name changes. Automating these updates reduces manual work and ensures your critical platforms remain consistently in sync. #### Prerequisites for updating user title Before setting up this automation, ensure that the the title field in Slack is configured to use SCIM. To verify this: 1. Open your Slack Admin environment. 2. Go to "Configure profile". 3. Click "Edit" next to "Title". A popup will open. 4. Ensure the Data source is set to SCIM. 5. If not, change it to SCIM, save the changes, and then click "Publish changes". #### How to update Slack user 1. Create a workflow. Start by creating a workflow using the "User attribute changed" trigger. Define the parameter you’d like to monitor for changes to update it in Slack. For instance, let's walk through updating a user’s title. Torii will monitor title changes in Google Workspace and automatically propagate these updates to Slack. 2. Select the "Update Slack user" action. Choose the "Update Slack User" action to proceed. 3. Populate the field. Use the personalization token [Trigger.User.Attribute-Changes.New-Google-Workspace-Job-Title] to populate the title field in Slack.. 4. Activate the workflow. Once everything is set, activate your workflow. From now on, whenever a title change is detected in Google Workspace, Torii will automatically update the employee's title in Slack. # Page Title Updating Personal Email Notifications ## Page URL https://support.toriihq.com/hc/en-us/articles/5132316986523-Updating-Personal-Email-Notifications ## Page Description How to Change Your Admin Torii Email Alerts An admin's email alert settings can be found in the Notifications settings. On this page, ## Details ### How can we help? ### Updating Personal Email Notifications An admin's email alert settings can be found in the Notifications settings. On this page, you will see your current settings for each alert. You will be able to adjust the timing or disable each alert from here. # Page Title Uploading Contracts Via Email ## Page URL https://support.toriihq.com/hc/en-us/articles/21597568139291-Uploading-Contracts-Via-Email ## Page Description Overview Ensuring that all your managed apps have active contracts and renewal dates is crucial for efficient renewal management. The ## Details ### How can we help? ### Uploading Contracts Via Email Ensuring that all your managed apps have active contracts and renewal dates is crucial for efficient renewal management. The significance lies in receiving timely notifications before the next renewal and having instant access to all commercial data when needed. However, remembering this amidst a myriad of tasks can be challenging. With Email to Contract, you can simply forward the signed contract from your vendor to Torii, and our AI based Magic Auto-Fill will automatically parse your PDF and create a new contract. It's a straightforward solution to simplify your tasks and ensure hassle-free contract management. #### How to email a contract Sending a contract to Torii is a straightforward process: Email to Contract is supported for Professional and Enterprise plans only. ##### Supported file formats This feature relies on extracting text directly from the PDF. Therefor it only supports PDFs with live text. Image based PDFs are not supported. ##### Q: Who can send contracts via email? A: Any individual within your organization can send a contract PDF to contracts@toriihq.com, irrespective of whether they are Torii users or their designated role. However, it's essential to note that for qualification, the sender's email address must belong to one of your organization's domains. ##### Q: What should I do if Torii matches my contract to the wrong app? A: In the event that your contract is erroneously matched to the wrong app, you can easily rectify this by navigating to Torii. From the Renewals/Contracts tab, you have the option to edit the contract and select the correct app from the dropdown menu. It's important to note that this correction can only be made within the Renewals/Contracts tab; the Application/Contracts tab doesn't permit app selection and is disabled for this purpose. ##### Q: Can I attach multiple PDFs to the same email? A: Absolutely! You have the flexibility to attach up to 10 PDFs in a single email. Each file you attach will generate a separate reply within the same email thread, ensuring a clear and organized correspondence for each document. ##### Q: Is there a file size limit for the attached PDFs? A: Yes there is. Attached files should not exceed 40MB in total. # Page Title User Access Reviews ## Page URL https://support.toriihq.com/hc/en-us/articles/36977632645531-User-Access-Reviews ## Page Description Overview Regular user access reviews are an essential part of SaaS management. They help organizations ensure that only the right people ## Details ### How can we help? ### User Access Reviews Regular user access reviews are an essential part of SaaS management. They help organizations ensure that only the right people have access to the right applications—reducing security risk, minimizing excessive permissions, and meeting compliance requirements such as SOC 2, ISO 27001, and HIPAA. Torii supports easy end-to-end management of user access reviews by representing the process in a centralized, intuitive way. Whether you're managing dozens or hundreds of apps, Torii helps you assign reviewers, track decisions, and document results in a consistent, audit-friendly format. Instead of managing reviews in disconnected spreadsheets, teams can collaborate directly in Torii to streamline operations and ensure complete visibility. Available for customers on the Enterprise plan. Streamlined & Auditable: Replace manual spreadsheets with a built-in, end-to-end access review process. Data-Backed Decisions: Leverage usage insights, SSO, and HRMS data, as well as Torii recommendations, to inform reviewer actions. Integrated & Flexible: Launch reviews across integrated and non-integrated apps, covering all user accounts. Collaborative: Assign multiple reviewers to each app, decentralizing the process to app or account owners. Audit-Ready & Shareable: Submit and export reviews as shareable reports, perfect for compliance. Torii’s access reviews are designed to support both IT administrators and app owners with distinct, user-friendly capabilities. Launch and assign access reviews from the Security > Access Reviews tab Monitor review progress across multiple applications Download and distribute completed access review reports for compliance purposes For App Owners and Reviewers: Receive email notifications when assigned to a review Conduct the review directly in Torii using a clear, guided interface Leverage app usage insights and Torii-generated recommendations to make informed decisions Add comments to explain your decisions or flag additional context Submit the review when all users have been evaluated This structured approach helps distribute responsibility while ensuring a consistent, trackable process across your organization. Fresh user data. Connect integrations for apps you need to review. or upload user files to populate the user list for non-integrated apps. Please note that for non-integrated apps that are fully managed by app owners or other stakeholders, Torii will guide the reviewer to upload a user file first. Permissions. In case you want to assign reviewers who are not app owners, ensure they have the "Access Reviews - Take Action" scope. Please note that users with the Take Action scope will have access to all reviews, no matter if they have been assigned as a reviewer or not. For app owners, the access will be limited to their owned apps only. #### How to Launch an Access Review As an IT admin, you can initiate access reviews for one or more applications directly from the Torii platform. Follow these steps to get started: Go to the Access Reviews tab Navigate to the Security page and open the Access Reviews tab. Click “Launch Access Review” Select the applications you want to review and assign one or more reviewers. You can assign specific users or use a dynamic field such as App Owner. Note: If an application already has an active review in “To Do” or “In Progress” status, it cannot be selected again until the current review is completed. Reviewers are notified Once the review is launched, reviewers receive an email notification for each assigned app. These are sent separately per application. Monitor progress After launching, you can track the progress of all reviews from the Access Reviews page. You’ll see which reviews have been started, their status, and completion timestamps. Tip: You can launch reviews for multiple apps in one go by selecting them together in the “Launch” popup. Each access review will be created as a separate record and managed individually. #### How to Conduct a Review ##### Starting a Review App owners and reviewers with the appropriate permission scope can start an access review in one of the following ways: By clicking the “Start review” button in the email notification By clicking the link in the notification banner that appears at the top of the application page Directly from the Access Reviews tab (available to users with the “Access Reviews – Take Action” permission scope) ##### Step 1 – Preview the User List Before proceeding to the main review page, Torii automatically checks the quality and freshness of the app’s user data. This step ensures that decisions are based on reliable information. To pass the check, the data must: Originate from a connected integration or be uploaded via a user file Be synced or uploaded recently If the data is outdated or incomplete, Torii will display an error message and disable the “Continue” button until the issue is resolved. Tip: Even if the system marks the data as valid (green), verify the user count matches your expectations. If needed, re-sync the integration or upload a fresh user file. Keep in mind—once you proceed, the user list becomes fixed and cannot be updated during the review. ##### Step 2 – Review Users Once the data passes the check, reviewers can proceed to the main user review page. Here, they can: View and customize the user listThe user list reflects a fixed snapshot from the date the review was started. You can add additional columns to display user attributes relevant to your review, such as department or license type. Offboarded users are flagged with badges for quick identification. Tip: Add the “Is past user” column to easily spot users whose status in the employee source of truth system indicates they’ve left the company. These are strong candidates for access revocation. Approve or reject access for individual users or groups You can make decisions on a per-user basis using the dropdown in the Review Status column to mark each user as Approved or Rejected. For quicker bulk actions, use the Approve All in View or Reject All in View buttons located above the table. These buttons will apply your selected action to all users currently visible in the filtered view. Tip: Use filters to efficiently review and take action on specific user segments.For example, when reviewing access to the Salesforce app, you may decide to approve only users in the Sales department: Apply the Department = Sales filter. Click Approve All in View to approve all Sales users. Remove the filter and manually reject remaining users, or Change the filter to Department ≠ Sales and click Reject All in View to reject the rest in bulk. This approach saves time and ensures your reviews are both accurate and audit-friendly. Leverage Torii recommendationsTorii will suggest if to approve or reject user access, based on inactivity or HR signals to help you make informed, consistent decisions. Add comments for documentationUse the Comment field to explain decisions or document manual actions. Tip: If you manually revoke a user’s access in the app’s admin console, make sure to note this in the comment field for audit purposes. Track review progressA progress bar at the bottom of the screen helps you track how many users have been reviewed. ##### Step 3 – Submit the Review After all users have been reviewed: Click Submit to finalize the review Once submitted, the review status will update to Completed in the Access Reviews tab A downloadable CSV report will be created and saved for reference or sharing. You can also easily share it with other stakeholders via email or Slack by clicking the "Share" button. To get the most value from Torii's Access Reviews feature, consider implementing the following best practices: Conduct reviews regularlyRun access reviews at least quarterly for high-risk, high-cost, or sensitive applications. Delegate to app ownersUse custom fields (e.g., App Owner) to assign reviews to the most knowledgeable stakeholders and decentralize responsibility. Establish clear ownershipIdentify and assign the right app owners or department leads early in the review process to avoid delays. Prepare reviewers in advanceBrief reviewers on expectations and data interpretation guidelines to ensure a smooth and consistent review process. Ensure data accuracy before launchSync integrations or upload updated user files to ensure reviewers are working with the most complete and current data. Encourage context in commentsWhen rejecting access, reviewers should document their rationale in the comment field to support future audits. Log manual removalsIf access is revoked directly in the app, reviewers should record the action in the comments field for traceability. Monitor review progressUse the Access Reviews tab to track which reviews are in progress, completed, or pending, and follow up as needed. Standardize your review cadenceDocument your review schedule (e.g., quarterly or before compliance audits) and align it with internal security and audit workflows. Q: Can I launch reviews for apps with multiple accounts?A: Yes. Torii includes users from all integrated accounts in one consolidated review. Q: Can I launch reviews for non-integrated apps?A: Yes. Reviewers will be prompted to upload a current user list before proceeding. Q: Can I assign different reviewers to different accounts within the same app?A: Not yet. However, you can assign multiple reviewers to the same app and ask each to focus on specific accounts. Q: Can I cancel a review after it’s been launched?A: Yes. Admins can delete a review from the Access Reviews page. Note that if a review is deleted, all the data will be lost. Q: Will Torii automatically revoke rejected access?A: Not yet. Today, removal must be done manually in the app and documented in the comments. Automation is planned to be supported later. Q: What happens if integrations break or user lists change mid-review?A: The review will be marked as Error and cannot be completed. A new review should be launched. Q: Can reviewers access reports later?A: Yes. Completed reviews remain available in the Access Reviews tab and can be exported anytime. Q: Do reviewers need to complete a review in one-shot? A: No. Reviewers can start a review, close it at any time, and return later to resume where they left off. All progress is automatically saved. # Page Title User Categorization - User, Employee and External User Definitions ## Page URL https://support.toriihq.com/hc/en-us/articles/37011692403995-User-Categorization-User-Employee-and-External-User-Definitions ## Page Description Overview Torii provides categorizations for discovered users, to help monitor and manage them and their app access via Torii. A user can ## Details ### How can we help? ### User Categorization - User, Employee and External User Definitions Torii provides categorizations for discovered users, to help monitor and manage them and their app access via Torii. A user can be categorized as either an Employee, an External user, or have no categorization at all. This article summarizes the different categories a user can belong in Torii, how these are defined and how they affect what is displayed in Torii. #### User Categories Not all users identified by Torii are actually company employees. For example, some of them are contractors, service accounts, or test/integration accounts. Torii provides the option to categories your actual employees, to separate them from the rest of the users Torii discovers, take separate action on them, and more. These are often also the users you are most interested in tracking. Classifying users as employees can be done based on your HR management system and/or based on your IDP, and you can filter these configurations to fine-tune your employee count. You can read more about Employees, how to set up the definition for them in Torii, and they are represented in Torii here. Torii considers users whose email domain does not match your account’s domain(s) as external users. Examples of these users include contractors, providers of professional services, or employees logging into a system with their personal emails. Categorizing these users has several benefits: To make sure Torii is categorizing these users correctly, company domains can be added to your account by contacting the support team. The External users tab in the Users page only lists active external users which return from at least one app. If an external user has been offboarded from all your systems, they will no longer show in this tab (but you can search for them using the global search functionality). ##### Users (no categorization) Users not categorized as Employees or External Users fall into the default Users category. In the Users tab in the Users page, you can also find Employees, but not External users. This is to remove clutter from your users tab. # Page Title User Lifecycle - Source Of Truth (SOT) in Torii ## Page URL https://support.toriihq.com/hc/en-us/articles/10363357601307-User-Lifecycle-Source-Of-Truth-SOT-in-Torii ## Page Description Overview Learn what User Lifecycle configuration means in Torii and why it is important to set up. Learn how to configure and change the ## Details ### How can we help? ### User Lifecycle - Source Of Truth (SOT) in Torii Learn what User Lifecycle configuration means in Torii and why it is important to set up. Learn how to configure and change the User Lifecycle (SOT) in Torii and employee best practices. User lifecycle in Torii refers to determining whether a user in the Torii platform is marked as 'current' (currently active), or 'past' (previous/terminated employee, removed service account etc.). This status is determined by the User Lifecycle SOT system(s) you define. By default, Torii relies on user status in Google Workspace (G Suite) or Azure Active Directory - but you should update this selection to match the way you manage you users internally today. #### Benefits of configuring User Lifecycle Torii will use your configuration of User Lifecycle to mark users as current or past, trigger workflows, suggest to off-board users, and more. If you are interested in managing user lifecycle, you will greatly benefit from setting this up. #### How to define User Lifecycle settings in Torii To define the User Lifecycle in Torii: #### Changing User Lifecycle Source Of Truth (SOT) Your User Lifecycle should be set up to accurately represent user status (And the systems governing it) in your organization. If this is not the case (such as due to due to a change in systems used), Editing the SOT is possible and recommended. However, note that can affect the user representation in Torii, as well as trigger various workflows who rely on this information. Therefore, we recommend emailing the full changes report and reviewing it when previewing the changes before applying them. #### What does updating User Lifecycle SOT affect? The following might occur when the User Lifecycle is edited: You will be able to see the updates to users on the Users page immediately after updating your configuration. The workflows will trigger (if relevant) according to the regular schedule on the next evaluation of the trigger criteria. Q: How is a user determined to be 'current' or 'past' when multiple SOT systems are selected? A: A user will be considered 'past' if they: With multiple SOT systems, a user must be considered 'past' in all relevant systems to be marked as 'past' in Torii. The user's lifecycle status is determined only be systems that they were discovered in (currently or previously). Systems selected as part of the configuration where they were never discovered will not be taken into consideration when determining user status. Read more about this here. Q: What happens if I change the User Lifecycle SOT and there are users who left the org in the past and and do not appear in a new system(s)? A: There are two possible outcomes in this scenario # Page Title User Provisioning With Azure ## Page URL https://support.toriihq.com/hc/en-us/articles/13605469815323-User-Provisioning-With-Azure ## Page Description In Azure's "Tutorial: Configure Torii for automatic user provisioning" article, you will find the process describing how to ## Details ### How can we help? ### User Provisioning With Azure In Azure's "Tutorial: Configure Torii for automatic user provisioning" article, you will find the process describing how to configure automatic user provisioning both in Torii and Azure Active Directory (Azure AD). # Page Title User State - Current & Past Users Definitions ## Page URL https://support.toriihq.com/hc/en-us/articles/5129476000411-User-State-Current-Past-Users-Definitions ## Page Description Overview Torii provides an activity state for each discovered user, to help monitor, manage and automate your users’ lifecycle via . ## Details ### How can we help? ### User State - Current & Past Users Definitions Current Users refer to users which Torii recognizes as active. A user is considered a “current user” if: By default, these applications are Google Workspace and Microsoft Entra ID. You can learn how to customize the user lifecycle definition for your organization here. Past Users refer to users which Torii recognizes as inactive. A user is considered a “past user” if: Torii has an application-specific login tailored to each system to make sure we capture the correct user state. Read more about current and past user definitions for each system here. #### Customizing the user lifecycle definition in Torii To be able to differentiate between current users and past users, Torii requires information provided by at least one user lifecycle source. By default, these are set to be: You can customize which apps are used to categorize users in the Settings -> Users & Employees page, under “User Lifecycle”. You can also read more about this here. #### Past user definition per app As a reminder, if the user returned previously from any of these sources (with any status), and later stopped returning, Torii will also consider them a past user. Status in app aligned with past user status Azure Active Directory Google Workspace (G Suite) suspended or archived deprovisioned (deactivated in the admin console) terminated, and the current date is past the termination date terminated or garden leave Any status except active #### Breakdown of user categorization logic in Torii: Torii created the following logic to accurately determine whether a user should be considered a current or a past user. #### Multiple lifecycle SOT systems In the user lifecycle setting, you can configure more than one system to be your user lifecycle source of truth (SOT). In this case, all systems must be aligned for a user to be considered a past user - A user must be considered 'past' in all relevant systems to be marked as a past user in Torii (otherwise they’ll be considered a current user). The user's lifecycle status is determined only by systems that: For multiple lifecycle SOTs, Torii will fall back to the previously known user status only if: Q: In the Users page, the number of “All Users” is greater than the sum of “Current Users” and “Past Users” combined. Why is this? A: This is because Torii excludes from the Current Users table users which return from 0 apps. This is to prevent clutter from irrelevant users found from the different discovery sources. You can still find these users in the “All Users” tab. # Page Title Users Filters ## Page URL https://support.toriihq.com/hc/en-us/articles/5128372685467-Users-Filters ## Page Description Overview Users filter can help you get a detailed user view and perform actions on selected users. From the ״Applications״ page, select ## Details ### How can we help? Users filter can help you get a detailed user view and perform actions on selected users. From the ״Applications״ page, select a specific application, and go to its Users tab. In the Users tab, you will find a few filters that will help you target your users' information. #### Drop-down filter We will break the users' Torii displayed into two: #### Users in Integrated apps For integrated applications, Torii will make sure to highlight the application's User and Usage data provided by the integration. The following integration methods will are supported : Single Application Screen #### Users in Non-Integrated apps For non-integrated apps, only the following are available: Enabling you to filter users according to user role, license type, number of days a user used the app recently, and more ##### When and how to use filters Filters can help you find and perform quick actions on single or multiple users.In the below example, you can see how to use the "past employee" filter to find and block past users from accessing office 365. From the filter, select the filter topic, in this case, Azure Department From the list, select the department name, in this case, past users Once filtered, select the employees you want to block Click the Run action button In this example, select - Block Office 365 user sign-in Click on Run action ##### Users Filters from the Users page From the Users page, you can view all users in your org. You can filter and view all users, but no actions can be made from the page Note that Torii added default views (filters) at the top of the page, from which you can view users' lists according to - Current, Past, and External lists.Click here to read more about users' definition On the Users page, you can find a "Groups filter" for selected applications, as well as the option to show this column. Use the filters to show only users which belong to a specific group(s). You can also display the application's Groups column and see all the groups your users are part of. Additional articles # Page Title Users Map and Location Insights ## Page URL https://support.toriihq.com/hc/en-us/articles/5129393732123-Users-Map-and-Location-Insights ## Page Description Torii provides location insights showing where users connect to applications from around the globe. The Insights page features a Users ## Details ### How can we help? ### Users Map and Location Insights Torii provides location insights showing where users connect to applications from around the globe. The Insights page features a Users Map showing usage locations from the last 30 days. Each country is shown with the number of users who have connected from that country in the last 30 days. Countries with more users are shown in darker shades of blue. You can click on any country to display the list of users or click See all on the top right to see the list of all users and their locations. The list of users is shown with the last seen date and the source of the location on the right. ##### How is country location information gathered? Torii aggregates location usage information from multiple sources: SSO logins, direct application integrations, usage in Torii, and the browser extension. The country is looked up by an IP Address geo-lookup. The user's last used location is shown on the map. If a user connected from multiple locations in a period of 30 days, just one country will be shown for that user — the last country the user connected from. Usage of corporate VPN or proxies will show the user connecting from a country where the VPN/proxy is located. # Page Title Using and Customizing Torii Dashboards ## Page URL https://support.toriihq.com/hc/en-us/articles/33191277432859-Using-and-Customizing-Torii-Dashboards ## Page Description Overview Torii's customizable dashboards provide you with unparalleled clarity and control over your SaaS stack. With this feature, you ## Details ### How can we help? ### Using and Customizing Torii Dashboards Torii's customizable dashboards provide you with unparalleled clarity and control over your SaaS stack. With this feature, you can view insightful, use-case-centric dashboards and tailor them to suit your unique needs. These insights can help reduce manual work, highlight potential concerns that need addressing, and help with routine monitoring so you can make the most of your SaaS management at a glance.You can learn about the different widgets Torii offers and their capabilities here. With Customizable Torii Dashboards, you can: Streamline SaaS Management: View actionable insights in one central location, reducing time spent navigating through data. Demonstrate Value: Highlight the impact of SaaS management efforts and showcase key accomplishments to stakeholders. #### Using Customizable Dashboards ##### Dashboard-based access ##### Default Dashboards When you enable the feature, you'll have access to several Out-of-the-Box (OOTB) Dashboard: SaaS Inventory Dashboard: This dashboard provides an overview of your SaaS applications, as well as key metrics and breakdowns regarding them such as usage, source, potential risk and more. You can further personalize these dashboards to suit your needs by customizing widgets and the dashboard layout. Hovering over each widget in the dashboard will show a "View data" button, which will open the data source behind the widget. This allows you to drill down into the data, and also accommodates downloading it for further analysis. You can also create brand new dashboards, tailored to your (or a stakeholder's) needs by selecting "Create new dashboard" in the Dashboard navigation menu. You can also remove irrelevant or unwanted dashboards while in edit mode by clicking on the menu icon -> Delete.Note: Not all dashboard functionality is available for all plan tiers. ##### Editing Dashboards Please note - Torii dashboards are shared. This means that any changes made to the dashboard will reflect and show for all users who can access it. Enter Edit Mode: To make changes, click the "Edit Dashboard" button. Customize Widgets & Layout: You can edit any widget by clicking on it, or on the widget menu in the top right of each widget. Edit - Clicking on this (or anywhere on the widget except the menu) will open a drawer on the right edge of the screen, presenting you with all the option available to customize this widget. This usually includes: Apply/change filters to show specific subsets of data. Adjust aggregation (Count, Sum, Average, Max, Min) to tailor how data is calculated and on which field. Group data by fields like category, tag, or app. Rename widgets to clarify their purpose. Once satisfied with your updates, click "Apply Changes" to save. If you leave the page or click "Cancel," changes will not be saved. Q: Why are the links in my table widget not clickable? A: Links in table widgets are deactivated in Edit mode. This is to prevent accidental navigation during configuration of your dashboard. In View mode, these links work as intended. # Page Title Using Relative Dates Filters ## Page URL https://support.toriihq.com/hc/en-us/articles/4701077705627-Using-Relative-Dates-Filters ## Page Description How to use the different date filter operators Torii includes powerful filtering capabilities for dates. These filters can be used on any ## Details ### How can we help? ### Using Relative Dates Filters Torii includes powerful filtering capabilities for dates. These filters can be used on any date attribute when filtering tables or defining workflow criteria. Using the correct date operator might be confusing at first, and this help article provides clear guidance on when to use each date operator. #### Future dates vs. past dates In order to choose the right date filter, you should first ask yourself whether you are referring to a date that will happen in the future, happen today, or a date that has passed: Future - use the from now operatore.g. Employee start date is coming in less than 7 days from now Today - use the is today operatore.g. Application security review date is today Past - use the ago operatore.g. A contract renewal date is more than 30 days ago The diagram below can help you use the right operator: Review the following examples for the various use case in which the date filter operators are used. ##### Workflow - Contract Meets Criteria Examples: Send a reminder to the contract owner 60 days prior to renewal Send a reminder to a contract owner, a week after the renewal to remind them to upload a new contract to Torii Notify the team on the day of the renewal ##### Workflow - User Meets Criteria Examples: Remind the hiring manager that their employee is joining in a week from now Send a welcome email to the new employee on the day they join Terminate employee's Salesforce account, 30 days after they have left the company ##### Contracts Table: Show all contracts that were signed less than 6 months ago Show all users where the start date is over 1 year # Page Title View Workflow Edit History ## Page URL https://support.toriihq.com/hc/en-us/articles/12686912634651-View-Workflow-Edit-History ## Page Description The following feature is currently available under Labs The Workflow View edit history feature allows you to view the history of the ## Details ### How can we help? ### View Workflow Edit History The following feature is currently available under Labs The Workflow View edit history feature allows you to view the history of the configured workflow and understand why the workflow ran for a specific configuration. This includes the state of the workflow at a specific date and time, who changed it, what the update was, and more. In order to see the "Workflow edit history," you must enable it from Settings >> Labs. # Page Title Vimeo Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5728188990875-Vimeo-Integration ## Page Description Overview Torii integrates with Vimeo and syncs the users' list. Prerequisites Your Vimeo account should have an Enterprise ## Details ### How can we help? ### Vimeo Integration Torii integrates with Vimeo and syncs the users' list. Your Vimeo account should have an Enterprise membership, and SSO enabled. SSO should be configured and enabled on the IdP side. IdP must support SCIM version 2; Vimeo does not support SCIM version 1. To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, the Vimeo help center, or their support. #### Integration Process To connect Vimeo to Torii, follow these steps: Go to Torii's Integrations page and click the Vimeo tile In the Connect Vimeo window, enter the Base URL In the Authentication Method dropdown, select Token In the Access token field, paste the access token Once the integration is connected and synced, it will display a green checkbox # Page Title Vonage Contact Center Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/28036076895771-Vonage-Contact-Center-Integration ## Page Description Overview Torii integrates with your Vonage Contact Center account and syncs the following information: User Fields License Types ## Details ### How can we help? ### Vonage Contact Center Integration Torii integrates with your Vonage Contact Center account and syncs the following information: #### Connect Vonage Contact Center Integration Go to the Integrations page and click on the Vonage Contact Center tile Click on Connect. Enter your Vonage Contact Center client id, client secret and base URL, then click Connect. Once the integration is connected and synced, a green checkbox will be displayed. # Page Title Wait action ## Page URL https://support.toriihq.com/hc/en-us/articles/24614759994907-Wait-action ## Page Description Introduction Many organizational processes involve step-by-step advancement, requiring intentional waiting periods between each step. ## Details ### How can we help? Many organizational processes involve step-by-step advancement, requiring intentional waiting periods between each step. Below are examples illustrating such scenarios: Upon an employee's departure, their Google user account is immediately suspended. Subsequently, access to various applications is revoked, and their files are transferred to their manager. Following this, the IT department waits for 30 days to ensure all user-related tasks are completed and then deletes the Google account. User accounts on essential platforms such as Okta, Google, and Slack are established 5 days prior to an employee's start. However, the welcome email is dispatched to employees only on their designated start date. IT provisions access to certain applications for a limited period of time and then revokes it. Torii's "Wait" action allows setting precise timing intervals between workflow actions, making the management of gradual processes simple. #### How to configure the Wait action Let's set up a workflow to automate the gradual offboarding process. 1. Begin by selecting the "User left" trigger. 2. Choose actions to take immediately upon user departure. For instance, add the "Suspend Okta user" action. 3. Add a "Wait" action. 4. Specify the duration of the wait time between actions. You can create delays in terms of minutes, hours or days. Let's set it to "30 days". Please note that the countdown starts from the exact time the "Wait" action is initiated, rather than according to the calendar day. 5. Add actions that should occur after the 30-day pause. For example, add the "Delete Okta user" action. Note that during the "Wait" action, you'll be able to track when the workflow will continue on the Actions log page. # Page Title New User Training #1: Welcome to Torii! ## Page URL https://support.toriihq.com/hc/en-us/articles/8175928403995--New-User-Training-1-Welcome-to-Torii ## Page Description This is video 1 out of 13 in the New User training series. Quick introduction to your New User training series! Learn how to get the ## Details ### How can we help? ### New User Training #1: Welcome to Torii! This is video 1 out of 13 in the New User training series. Quick introduction to your New User training series! Learn how to get the most out of this series. #### Questions for Implementation #### Continue Your Training Series Where Does Torii Get Its Data? # Page Title What are Matching Rules and How to Use Them ## Page URL https://support.toriihq.com/hc/en-us/articles/5130348563355-What-are-Matching-Rules-and-How-to-Use-Them ## Page Description This article describes Expense matching rules and how to create them. Overview Torii provides you with an advanced view to follow up on ## Details ### How can we help? ### What are Matching Rules and How to Use Them This article describes Expense matching rules and how to create them. Torii provides you with an advanced view to follow up on your company's SaaS expenses, track how much you're actually paying for each app, and even discover new apps you were not aware of. You can also watch "How to Use Matching Rules" to get a short review of this powerful feature There are three ways to get expenses into Torii: Torii has a sophisticated matching algorithm that automatically matches transactions to apps. As with any algorithm, you might want to tweak the matching to better suit your needs; this is where matching rules come into play. So, how does it work? #### Add a "Match to" custom rule #### Add an "Ignore transaction" custom rule Go to Expenses >> select the Matching rules tab and click Add rule Enter the rule parameters and select Ignore transaction Click Apply Rule The Ignore transaction rule is added #### Custom matching - logic & order The order in which you organize the rules is essential. Torii follows the order of the rules from first to last. Any new Ignore rule will be placed first, and the Match rule last by default. When you have two rules containing the same word, arrange them thoughtfully.For instance, here are 2 rules for Linkedin:1. When transaction contains >> Linkedin Sales >> match to >> Linkedin Sales Navigator2. When transaction contains >> Linkedin >> match to >> Linkedin Ads.Place the "LinkedIn ads" rule after the "Sales Navigator" rule, otherwise, it will override the Sales navigator matching Make sure to Apply changes # Page Title What are the IP Addresses Used By Torii? ## Page URL https://support.toriihq.com/hc/en-us/articles/5201846084123-What-are-the-IP-Addresses-Used-By-Torii ## Page Description The IPs delivering Torii traffic are: 44.227.44.92 35.155.113.183 (Since March 2023) 44.225.231.68 (Since March 2023) ## Details ### How can we help? ### What are the IP Addresses Used By Torii? The IPs delivering Torii traffic are: # Page Title What Is My Organization ID? ## Page URL https://support.toriihq.com/hc/en-us/articles/5132279983131-What-Is-My-Organization-ID ## Page Description Each account has its own Organization ID that uniquely identifies it in the Torii system. You might be asked for your Organization ID at ## Details ### How can we help? ### What Is My Organization ID? Each account has its own Organization ID that uniquely identifies it in the Torii system. You might be asked for your Organization ID at times, for example when connecting Torii to an SSO provider. Your Organization ID is clearly displayed on the Settings -> General page: In this example, the Organization ID is 12345 # Page Title What Type of Integrations are Supported by Torii? ## Page URL https://support.toriihq.com/hc/en-us/articles/5164594302619-What-Type-of-Integrations-are-Supported-by-Torii ## Page Description Torii integrates with 100+ applications and can integrate with any application We've built a unique technology that allows Torii to ## Details ### How can we help? ### What Type of Integrations are Supported by Torii? We've built a unique technology that allows Torii to integrate with any SaaS application. That's one of the reasons why Torii has more integrations than any other SaaS management platform on the market.There are currently three types of integrations: Identity Providers - These applications are usually used by your entire workforce and may facilitate login to other SaaS applications. Integrate with these applications in order to map and discover what applications are being used in your organization. Examples include Google Workspace (G-Suite), Azure Active Directory, Okta, OneLogin, and more. Expense Software - These applications provide financial data and Torii is able to analyze transactions and match their expense to the correct SaaS application. Examples include NetSuite, QuickBooks, Expensify, and Bill.com. Direct Integrations - These applications are integrated directly to Torii. Integrate with these applications to get the user list, wasted licenses, and usage data directly from the SaaS provider. Examples include Salesforce, Zoom, Slack, and over 100 others. Multiple accounts of the same application are supported, and data from all accounts is normalized and presented across the dashboard. See more information in Automatic Actions with Integrated Apps Our team is actively adding integrations every day. If you'd like to request an integration, drop us a note at support@toriihq.com. # Page Title Q&A: Why we are getting the error "The usage location should be a two letter country code (ISO standard 3166)" when provisioning user within Office 365? ## Page URL https://support.toriihq.com/hc/en-us/articles/17549947575835-Q-A-Why-we-are-getting-the-error-The-usage-location-should-be-a-two-letter-country-code-ISO-standard-3166-when-provisioning-user-within-Office-365 ## Page Description Question/Issue: Why we are getting the error "The usage location should be a two-letter country code (ISO standard 3166)" when ## Details ### How can we help? ### Q&A: Why we are getting the error "The usage location should be a two letter country code (ISO standard 3166)" when provisioning user within Office 365? Question/Issue: Why we are getting the error "The usage location should be a two-letter country code (ISO standard 3166)" when provisioning a user within Office 365? A wrong value was set in the Usage location field. Go to the Workflows settings, and change the Usage location to a two-letter country code. For example, for the United Kingdom - change it to UK. # Page Title Where Can I Download Torii's Browser Extension? ## Page URL https://support.toriihq.com/hc/en-us/articles/5146176596635-Where-Can-I-Download-Torii-s-Browser-Extension ## Page Description Learn where you can download Torii's browser extension manually using a direct link for Chrome, Firefox, and Edge browsers Torii's ## Details ### How can we help? ### Where Can I Download Torii's Browser Extension? Learn where you can download Torii's browser extension manually using a direct link for Chrome, Firefox, and Edge browsers Torii's browser extension can be installed for various browsers: Chrome - Install from the Chrome Web Store: Torii for Chrome. Firefox - Install by opening this link using Firefox: Torii for Firefox. Edge - Install from the Microsoft Edge Addons page Torii for Edge. Legacy Edge - Edge versions before version 77 are no longer supported. If you'd like to roll out Torii's extension to the entire organization, you can do that directly from your Google Workspace (G Suite) admin. Check this article for further instructions. Rolling out an extension to the entire organization can be sensitive. We highly recommend you speak to our support about the best practices to communicate the extension roll-out to the organization. # Page Title New User Training #2: Where Does Torii Get Its Data? ## Page URL https://support.toriihq.com/hc/en-us/articles/8175968987931--New-User-Training-2-Where-Does-Torii-Get-Its-Data ## Page Description This is video 2 out of 13 in the New User Training Series. Learn what data sources Torii uses, how to integrate your tech stack, and why ## Details ### How can we help? ### New User Training #2: Where Does Torii Get Its Data? This is video 2 out of 13 in the New User Training Series. #### Questions for Implementation These questions are designed to help you and your team decide how Torii should be implemented in your organization based on the information shared in the above training video. #### Continue Your Training Series Next Video: Setting Up Your Account #### Additional Resources Discover Your SaaS Stack Types of Integrations Torii Supports Torii Integration Use Cases Browser Extension Torii's Browser Extension Whitepaper Introduction to Torii's Browser Extension Where to Download Torii's Browser Extension # Page Title Which Currencies are Supported? ## Page URL https://support.toriihq.com/hc/en-us/articles/5130361788187-Which-Currencies-are-Supported ## Page Description Torii supports all currencies. Amounts are stored in their original currency, alongside a conversion to your selected account currency. ## Details ### How can we help? ### Which Currencies are Supported? Torii supports all currencies. Amounts are stored in their original currency, alongside a conversion to your selected account currency. ##### Choose displayed currency An account can have one configured currency which applies to all admins. All amounts are displayed in this currency, and all other currencies will be converted automatically. Select your displayed currency by following the steps: Go to the Settings page -> General tab. Select the displayed currency from the dropdown: ##### Manual entry of amounts Amounts entered manually, such as "Contract value", should be entered using the selected displayed currency and are not converted. ##### Currency exchange rates Conversion to the displayed currency is based on European Central Bank. Amounts are converted based on the exchange rate of the day of the transaction. # Page Title WordPress.org Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5199346776091-WordPress-org-Integration ## Page Description Set up your self hosted WordPress integration and get all the insights in Torii's dashboard Torii integrates with your Self Hosted ## Details ### How can we help? ### WordPress.org Integration Torii integrates with your Self Hosted WordPress.org installation and syncs the list of users and their roles. For the integration, you will need to provide your WordPress URL, username and Application Password. To generate an Application Password: Login to your WordPress admin dashboard [Only required for WordPress versions before 5.6] Go to Plugins → Add New [Only required for WordPress versions before 5.6] Search and install the Application Passwords plugin Click Users in your WordPress dashboard Click on the user that you want to make an application password for, this user should be an Admin. Scroll down until you see the Application Passwords section. Within the input field, type "Torii" to set the name of the application password, then click Add New and your new application password will appear. Copy the Application Password as it will only be shown once. Connect WordPress.org from the Integrations page. Need help? You can always contact our support team for help at support@toriihq.com. Additional info: Sites hosted on WP Engine are supported. We recommend to connect the WP Engine Integration in addition to the individual WordPress websites hosted within WP Engine. # Page Title Workato Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/39858056640155-Workato-Integration ## Page Description OverviewTorii integrates with Workato and syncs: User Fields License Types Email Workato Status Last Visit Time Role (per ## Details ### How can we help? ### Workato Integration Torii integrates with Workato and syncs: ##### Accounts & Permissions #### How to Generate the Required Values Workspace details #### How to Connect the Integration #### Supported Actions No actions are supported at this time. For any further questions, please contact Torii Support. # Page Title Workday Financial Management Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/17787269696283-Workday-Financial-Management-Integration ## Page Description Workday Financial Management Report-as-a-Service (RaaS) is a feature that exposes reports as web services. Torii syncs the list of ## Details ### How can we help? ### Workday Financial Management Integration Workday Financial Management Report-as-a-Service (RaaS) is a feature that exposes reports as web services. Torii syncs the list of expenses from your Workday Financial Management configured report. Torii can sync multiple unique Workday Financial Management reports to the same account. Torii syncs transaction data up to one year prior to first connection date. To pull the spend data from Workday, Torii runs the report and fetches all the data exported in the report. Torii will not have access to any data that is not exposed in the report. #### Integration Walkthrough Step 1: Log in to the Workday tenant using an administrator account. Step 2: Identify the Workday fields to be used for Torii’s Expense template Torii needs the following data for each expense item: ##### Step 3: Identify the Spend categories that have items for Software Login to your Workday instance and see the list of all the categories for expenses. Find the ones that are software related. Keep this list handy for further steps. ##### Step 4: Create a Workday Custom Report Create a custom report in Workday with that contains all fields you have identified in Step 2. There are a few fields which will have values specific to your setup. These are the fields which should be adjusted to fit your organization’s needs: Follow these steps in the Workday to create the custom report: ##### Step 5: Create a Workday Integration System User This is an example of how to create an integration System User for Torii. ##### Step 6: Create a Security Group and assign the Security Group to the ISU This is an example of how to create a security group for Torii. ##### Step 7: Configuring domain security policy permissions In this step you'll activate the security policy changes for this group and user. ##### Step 8: Activate security policy changes ##### Step 9: Update the Custom Report Owner Update the owner of the Custom Report created in Step 4 to the Workday Integration System User created in Step 5. ##### Step 10: Identify the Custom Report URL To find the URL of the Custom Report created in Step 4, follow these steps: JSON endpoint example: ##### Step 11: Check your credentials and report ##### Step 12: Connect Workday HCM integration to Torii #### Integration Capabilities You can constantly be updated with application information, additional application fields, and actions from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. Q: I am interested in expense data that is older than what Torii brings in from this integration. Is there a way to get more than one year of data synced into Torii? A: While we we only sync a year of expense data upon connection of this integration in Torii by default, we can bring in data from any time point. If you are interested in getting data from an expanded time frame, please contact Torii's support team and we will be happy to help you with this. Please note, syncing data for a lengthy time period can bring back a lot of data, which can take a significant amount of time to sync (up to a several days, depending on the period of time back you are interested in). # Page Title Workday HCM Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166184444443-Workday-HCM-Integration ## Page Description Set up your Workday HCM integration and get all the insights in Torii's dashboard Workday HCM Report-as-a-Service (RaaS) is a feature ## Details ### How can we help? ### Workday HCM Integration Set up your Workday HCM integration and get all the insights in Torii's dashboard Workday HCM Report-as-a-Service (RaaS) is a feature that exposes reports as web services. Torii syncs the list of users from your Workday HCM configured report. Step 1: Log in to the Workday tenant using an administrator account. Step 2: Create an Integration System User (ISU) Step 3: Create a Security Group and assign the Security Group to the ISU. Step 4: Configuring domain security policy permissions. List of domains: Step 5: Activate security policy changes. Step 6: Create Custom Report. The report should include the following information. Note that fields must have the exact field name as shown in the following table: String - Example: "1560" Worker's (work) email address String containing a valid email address - Example: "steve@example.com" Attribute identifying whether the Worker is active Boolean number - Example: "1" or "0" Worker's first name String -Example: "Steve" Worker's last name String -Example: "Miller" Attribute identifying whether the Worker is currently retired Boolean number -Example: "1" or "0" Most recent hire date for the Worker Date (ISO 8601) -Example:"2022-05-26" EndEmploymentDate Worker's end of employment date String -Example: "CEO" Worker's department String -Example: "Marketing" Manageremailaddress Worker's manager primary email address String containing a valid email address -Example: "jess@example.com" Worker's location String -Example: "ES Barcelona" Worker's preferred name StringExample: "Steve Miller" Worker's worker type StringExample: "Worker" Worker's employee type StringExample: "Employee" Step 7: Add an authorized user. Step 8: Get the report URL. On the View URLs Web Service page, in the JSON section, right-click JSON, then select Copy URL. JSON endpoint example Step 9: Check your credentials and report. Make sure the copied report URL includes format=json. Test the report URL by pasting it into a new browser session. An alert box should pop up and ask for the ISU username/password credentials you have configured. If the file lists all users and values for all fields visible to the report user - you're all good. Otherwise, check if you entered incorrect credentials or if expected fields from Workday are not showing up in the report. You should probably check the report user (the ISU created in step 2) has appropriate permissions to read all included fields. #### Connect Workday HCM integration to Torii. #### Update the User Lifecycle settings Now, to ensure you get the user lifecycle information in Torii, define Workday HCM as your Human resource management system. #### Integration Capabilities You can constantly be updated with application information, additional application fields, and actions from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. # Page Title Workflow Examples ## Page URL https://support.toriihq.com/hc/en-us/articles/5693133992219-Workflow-Examples ## Page Description Processes Managing Monthly Renewals Request Approval Workflow Action New App Questionnaire: Video Walkthrough Alert IT When Important ## Details ### How can we help? ### Workflow Examples #### Workflows for applications #### Onboarding/ Offboarding #### Contract & Renewals # Page Title Workflow Flood Protection ## Page URL https://support.toriihq.com/hc/en-us/articles/33217851828635-Workflow-Flood-Protection ## Page Description What is Workflow Flood Protection? Workflow Flood Protection is a feature designed to prevent unintended workflow executions due to ## Details ### How can we help? ### Workflow Flood Protection ### What is Workflow Flood Protection? Workflow Flood Protection is a feature designed to prevent unintended workflow executions due to trigger misconfigurations or a sudden surge in events. When the system detects excessive executions, it automatically pauses (throttles) the workflow to protect against unintended consequences. When a workflow experiences excessive executions, it enters a Throttled state. Notifications are sent to all Torii Admins with the Workflow take action scope via email, providing details such as the workflow name and the reason for throttling. The workflows are also visually flagged with banners on the Workflows Page and the Workflow Details Page. Administrators can review pending executions directly from the Workflow Details Page by clicking Review Executions. Once the user clicks Review Executions, the following dialog box appears, allowing them to unthrottle the workflow after reviewing the pending records. Note that some types of triggers do not offer the ability to view pending records. When the user clicks Unthrottle, the workflow will run on those entities, and the user will be able to see the workflow executions as usual. The workflow will then return to its normal state. ### Managing Throttled Workflows Once notified, administrators have two options to manage throttled workflows: Unthrottle Workflow: Resume the workflow and process the pending executions by clicking the Unthrottle button in the review dialog. Disable/Delete Workflow: Clear the pending executions and stop further processing by disabling or deleting the workflow. All actions taken are logged in the audit trail, ensuring accountability and transparency. Logs include details such as who resumed the workflow and the actions performed. Q: What triggers Workflow Flood Protection? A: The feature is activated when a workflow experiences excessive executions. This can be due to misconfigured triggers or a sudden spike in events. Q: Can I customize the throttling threshold? A: Not at this time. The threshold is fixed per trigger type, meaning different trigger types have different thresholds, but each type has a predefined limit to maintain consistency and system stability. The limits are as follows: Q: Will I lose data if my workflow is throttled? A: Generally, no. Pending executions are held in the queue until you decide to process them or disable/delete the workflow. However, if the trigger has a date condition, some records may no longer meet the trigger criteria as time passes, potentially leading to data loss. Q: Who receives email notifications when a workflow is throttled? A: All Torii Admins with the Workflow take action scope will receive the notifications. # Page Title Workflow Triggers ## Page URL https://support.toriihq.com/hc/en-us/articles/4702472087835-Workflow-Triggers ## Page Description Overview When creating a workflow, you start by selecting a workflow trigger. Torii has 2 types of triggers: 1. State-based triggers ## Details ### How can we help? ### Workflow Triggers When creating a workflow, you start by selecting a workflow trigger. Torii has 2 types of triggers: 1. State-based triggers These triggers define criteria that will be evaluated against Torii the next time data is synced with external sources (integrations). If an entity meets the criteria, the workflow will trigger and run through its actions sequentially. The following state-based triggers are available: 2. Event-based triggers These triggers define 3d party app events which Torii continuously monitors. If an event happens in an integrated app, the workflow will trigger immediately and run through its actions sequentially. The following event-based trigger is available: See below for descriptions and examples for each workflow trigger. #### 1. User meets criteria Important to know - If your source of truth is Google or Okta, past user attributes will be updated in Torii in real-time, and workflows with "User left" trigger will be triggered within 1h after a user was suspended, archived or deleted in Google or Okta. For other sources of truth, past user attributes will be updated in Torii only after the app defined as a source of truth is fully synced. If your source of truth is Google or Okta, we recommend using App event trigger to initiate user offboarding in real time and without delays. #### 4. App meets criteria #### 5. New app discovered #### 6. Closed app in use #### 7. License not in use #### 8. User stopped using app #### 9. License Count Threshold #### 10. Contract meets criteria This trigger allows you to initiate workflows whenever a specific event happens in an integrated app. Torii currently supports: # Page Title Workflows Q&A and Troubleshooting ## Page URL https://support.toriihq.com/hc/en-us/articles/4823405918747-Workflows-Q-A-and-Troubleshooting ## Page Description Workflow errors, and errors notifications, Q&A Q: How can I get notified of workflow errors? A: Torii workflows are a powerful tool ## Details ### How can we help? ### Workflows Q&A and Troubleshooting #### Q: How can I get notified of workflow errors? A: Torii workflows are a powerful tool to get your routine manual tasks automated. But what if a workflow has failed? We believe that the best way to eliminate errors is to fix them right when they occur. This is where workflow notifications come into play. Workflow notifications trigger when a workflow fails or is completed with errors. The notifications include all necessary details for easy fixing, including workflow name, actions, and reasons for the error. They will be sent to your preferred Slack channel and/or directly to specific users. To subscribe, go to the Workflow Settings page. #### Q: My workflow is not running, and actions are not triggered. A: It might happen due to Torii "Spike (peak) protection", meaning, if we detect a spike in workflows (300 or more actions taken at the same time), our protection will halt the execution and will wait for your feedback to resume. What can you do? Contact us by our support email at support@toriihq.com. #### Q: How long does it take for workflow errors to populate in the 'Torii' slack channel? Is it immediate? A: Workflow errors settle in Slack immediately upon Torii encountering them. #### Q: If there are two recipients for action, and I put them in the body of the email action. Will both recipients see their own names? A: Yes. Two different emails are sent, so each one will see their own name #### Q: What order are workflow actions executed in? A: In a single workflow, actions will be executed one after another in order from top to bottom. This is why we suggest toggling on "Continue workflow on error." #### Q: Do different workflows run in parallel? Yes, if multiple workflows trigger at or around the same time, they will run simultaneously. #### Q: Will a user that is both app owner and contract owner receive one or two emails in case a workflow email action was configured to send a notification to both entities? A: If an email action in a workflow is set up to send to multiple dynamic Users at once (like ‘app owner’, ‘contract owner’, or any other custom fields like 'technical owner’) and the Users all happen to be the same person, that person will receive separate emails for each identity (app, contract, and technical owner = 3 emails). #### Q: If my workflow contains an email action to notify an app owner, but the app doesn't have an app owner assigned, will I be alerted that there is no app owner to receive the email? A: No, the email action will simply error out. If you have workflow error notifications set up in Slack, however, you will be notified of the error. # Page Title Workfront Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/10749009564571-Workfront-Integration ## Page Description Overview Torii integrates with Workfront and syncs the users' names, emails, and statuses. Prerequisites You are required to have a ## Details ### How can we help? ### Workfront Integration Torii integrates with Workfront and syncs the users' names, emails, and statuses. You are required to have a Workfront admin #### Connect Workfront to Torii To connect Workfront to Torii, follow the below steps: # Page Title Workspace One UEM Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/34820608522395-Workspace-One-UEM-Integration ## Page Description Overview Torii integrates with your Workspace One UEM account and syncs the user's data: User Fields License Types Email Workspace ## Details ### How can we help? ### Workspace One UEM Integration Torii integrates with your Workspace One UEM account and syncs the user's data: ##### Accounts & Permissions To connect this integration in read-only mode, you need to enable REST API Access, create a role with minimal required credentials, and create an admin account assigned to that role. If you wish to use actions in Torii, additional permissions are required. See the Actions section below. #### Enable REST API Access #### Create a Role with Minimal Required Credentials #### Create Admin Account with Role Torii supports the following Workspace One UEM actions: To perform these actions through Torii, ensure the role assigned to the admin user includes the following permissions: Note: You only need to enable the permissions relevant to the actions you plan to use. # Page Title WP Engine Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/16918109367579-WP-Engine-Integration ## Page Description Overview Torii integrates with your WP Engine account and syncs the user's data: ID, email, first & last name, role, and status. ## Details ### How can we help? ### WP Engine Integration Torii integrates with your WP Engine account and syncs the user's data: ID, email, first & last name, role, and status. Make sure you have a WP Engine account and an admin user. #### Connect WP Engine Integration #### Integration Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table. Q: Are multiple WP Engine accounts supported? A: If a single WP Engine account contains multiple accounts in it, Torii will sync the account that was selected during integration. If no account was provided, Torii will sync the first account. Q: Can I integrate the individual WordPress sites hosted on WP Engine to Torii? A: Yes. Use the WordPress.org Integration to connect the WordPress websites you host on WP Engine in addition to the WP Engine integration. # Page Title Wrike Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/14828591064091-Wrike-Integration ## Page Description Overview Torii integrates with your Wrike account and syncs the users' roles, statuses in the app, and licenses. Note that Torii can ## Details ### How can we help? ### Wrike Integration Torii integrates with your Wrike account and syncs the users' roles, statuses in the app, and licenses. Note that Torii can support multiple Wrike accounts. #### Connect Wrike integration to Torii. # Page Title Xero Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5166297724187-Xero-Integration ## Page Description Set up the Xero integration to get a complete overview of all SaaS expenses. Overview Torii integrates with Xero and analyzes SaaS ## Details ### How can we help? ### Xero Integration Torii integrates with Xero and analyzes SaaS expenses. Torii will automatically match transactions to the correct application, summarize expenses and provide insights. Torii syncs transaction data up to one year prior to first connection date. #### How to connect Xero integration to Torii To connect Xero to Torii, follow the below steps: Once the integration is connected and synced, it will display a green checkbox. Torii will begin syncing the last 12 months of transaction data from Xero, which may take up to 48 hours to appear. #### Integration Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >>Integration Capabilities table. Q: I am interested in expense data that is older than what Torii brings in from this integration. Is there a way to get more than one year of data synced into Torii? A: While we we only sync a year of expense data upon connection of this integration in Torii by default, we can bring in data from any time point. If you are interested in getting data from an expanded time frame, please contact Torii's support team and we will be happy to help you with this. Please note, syncing data for a lengthy time period can bring back a lot of data, which can take a significant amount of time to sync (up to a several days, depending on the period of time back you are interested in). # Page Title Zapier Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5729419978011-Zapier-Integration ## Page Description Overview Torii integrates with Zapier and syncs the users' list. Prerequisites Zapier's Enterprise plan Users are ## Details ### How can we help? ### Zapier Integration Torii integrates with Zapier and syncs the users' list. Zapier's Enterprise plan Users are authenticated using SAML single sign-on Users are provisioned by an Identity Provider using SCIM To ensure SCIM is set up correctly before integrating with Torii, please check with your IT team, Zapier's help center, or their support. #### Integration Process To connect Zapier to Torii, follow these steps: Go to Torii's Integrations page and click the Zapier tile In the Connect Zapier window, note that Torii already identified and populated the Base URL and Authentication Method fields. In the Access token field, paste the access token Once the integration is connected and synced, it will display a green checkbox. # Page Title Zendesk Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5199520645147-Zendesk-Integration ## Page Description Setup the Zendesk integration and get all the insights in Torii's dashboard Overview Torii integrates with your Zendesk account and syncs ## Details ### How can we help? ### Zendesk Integration Torii integrates with your Zendesk account and syncs the following attributes: With Torii, you can perform the following actions in Zendesk: Torii monitors Zendesk usage data daily. If Zendesk users complete at least one of the following actions on a given day, they will be considered active users: Logged into Zendesk (available for Zendesk Enterprise & Enterprise Plus plan only) Edited, created, or deleted one or more tickets Created one or more Help center articles Once connected, Torii will show Zendesk usage from the last 90 daysFirst-usage retrieval may take up to 72 hours to complete. Large organizations' ticket usage data might be synced for a shorter period. #### Actions required to enable usage view 1. Connect Torii to Zendesk with a Zendesk Admin Go to Zendesk Admin Center → People (1) → Team (2) select the user by which you want to connect Torii (3) Make sure that both support and guide are "Admin" (4) and the guide checkbox (5) is marked 2. Disable IP restrictions in Zendesk Under Account (6)→ Advanced (7) → IP Restrictions (8) Make sure the checkbox in IP restrictions in Zendesk is unchecked (9) #### Connect Zendesk Integration You can always be updated with application information and actions from our Integrations Page >> Integration Capabilities button (1) >> Integration Capabilities table. # Page Title Zeplin Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5199583810715-Zeplin-Integration ## Page Description Setup the Zeplin integration and get all the insights in Torii's dashboard Torii integrates with Zeplin and syncs the list of users and ## Details ### How can we help? ### Zeplin Integration Torii integrates with Zeplin and syncs the list of users and their roles. ##### Important: Requirements The integration requires a Zeplin team plan: "Organization" plan or higher. Go to Torii Integrations page and click on the Zeplin tile in order to connect. Follow the on-screen instructions and grant Torii access to Zeplin. # Page Title Zip integration ## Page URL https://support.toriihq.com/hc/en-us/articles/23540696831259-Zip-integration ## Page Description Easily synchronize all your signed contracts with Torii by configuring the Zip integration. Access renewal dates and contract specifics ## Details ### How can we help? ### Zip integration The Zip integration fetches contracts from completed Zip requests and syncs them into Torii. Contract integrations are available for customers on the Torii Enterprise plan. #### How to connect Zip integration to Torii To connect Zip to Torii, follow the below steps: #### How to update the category filter If, after the integration is connected, you wish to update the category filter and re-sync contracts, you can use the "Reconnect" action from the integration card action menu. Please note that contracts previously fetched will not be deleted as part of the reconnection. It is recommended to manually delete all contracts with a "Zip" contract source before reconnecting. #### How to disconnect In order to disconnect, simply select "Disconnect" from the integration card action menu. Please note that contracts already fetched will not be automatically deleted as part of the disconnect action. If you want to remove them, please manually delete them from the Contracts table. #### Custom configuration Want to fetch extra fields from Zip or tweak the default field mapping? No worries! We can handle this with a custom backend configuration. Just reach out to our support team with all the details, and we'll get it set up for you. #### Integration Capabilities You can always be updated with application information from our Integrations Page >> Integration Capabilities button >>Integration Capabilities table. Q: Does the integration allow mapping Zip fields to custom contract fields in Torii? A: Yes, but this requires custom configuration that can only be done by our support team. Please reach out to support with the details of your request and they will configure it for you. Q: Does the integration fetch users and usage? A: Currently not. The Zip integration only fetches contracts. # Page Title Zoom Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/5199686164891-Zoom-Integration ## Page Description Overview Torii integrates with your Zoom account with the following capabilities: User Fields License Types Actions User (email) ## Details ### How can we help? ### Zoom Integration Torii integrates with your Zoom account with the following capabilities: ##### Accounts & permissions Torii requires the following scopes: #### Connect Zoom integration to Torii To connect Zoom to Torii, follow these steps: #### How to Uninstall Torii From Zoom To uninstall Torii, go to the Installed apps page on Zoom (1), find Torii, and click "Uninstall" (2). Q: When deactivating a user in Zoom that has multiple license types (i.e. Zoom phone pro, basic, etc.), will Torii deactivate ALL of the licenses?A: Yes, it changes the user type to Basic and sets the status as inactive. Q: I want to approve Torii only for the integration user. How can I accomplish this?A: To approve Torii only for specific users, you will want to pre-approve Torii in the Zoom marketplace. Please follow the steps outlined in this help article or contact Zoom support for additional information. Q: I am seeing a "Licensed" Zoom meeting license instead of my specific plan type(s). Why doesn't Torii provide more detailed information?A: Torii provides a detailed breakdown of your Zoom licenses, including a detailed license breakdown of Zoom Meetings licenses. If you are not seeing this, this is because the Zoom user you connected the integration with does not have access to your billing plans information. Please make sure you are connecting Zoom with a master account. If you cannot, please verify the following: Ensure billing access: In the User Management section of Zoom's web portal, ensure the user account making the API request has the necessary permissions to access billing data. Admin roles with billing permissions should have full access to retrieve plan usage details. Ensure account management: Check the Account Management section in Zoom's web portal to confirm that the billing settings and plan usage data are enabled and accessible for the account you're querying. If billing is managed by a different entity or through a sub-account, you might need to reconnect with another user. Ensure correct sub-account: If you are part of an organization that utilizes sub-accounts, make sure you are connecting the integration with a user in the correct sub-account. API Dashboard in Zoom: You can use the API Dashboard in the Zoom App Marketplace to monitor the API usage and see whether the requests from Torii to Zoom are being properly processed. This can help identify if there are failed API calls or issues with rate limits. You can access this in the Zoom UI by going to the Manage section under the Admin App Management tab (Zoom). # Page Title ZoomInfo Integration ## Page URL https://support.toriihq.com/hc/en-us/articles/12539566685467-ZoomInfo-Integration ## Page Description Setup your ZoomInfo integration and get all the insights in Torii's dashboard Overview Torii integrates with your ZoomInfo account and ## Details ### How can we help? ### ZoomInfo Integration Torii integrates with your ZoomInfo account and syncs the list of users' information, emails, and statuses. This is a SCIM-based integration. The Zoominfo integration returns user data only for users who were provisioned via SCIM. #### Connect ZoomInfo to Torii #### Integration Capabilities You can constantly be updated with application information from our Integrations Page >> Integration Capabilities button >> Integration Capabilities table