Inventory user-granted OAuth scopes.
Inspect which third-party applications hold read or write scopes across Google Workspace, Microsoft Entra, and Dropbox Business.
Capability hub · OAuth & third-party apps
Govern third-party OAuth grants and Shadow IT.
Surface third-party OAuth tokens and linked applications granted by employees across Google Workspace, Microsoft 365, and Dropbox, compare browser-discovered SaaS against Okta assignments, and revoke unneeded grants.
3 connected sources expose OAuth/linked-app governance with direct revocation (Google Workspace, Microsoft 365, Dropbox), complemented by read-only Okta assignment sync and managed-browser Shadow IT discovery.
Capabilities
What this capability covers.
Compare real SaaS usage against Okta.
Spot applications used by five or more employees outside Okta assignments without treating unmanaged use as an automatic violation.
Revoke unneeded OAuth access.
Remove eligible user OAuth grants or linked Dropbox app sessions directly through the connected security source.
Detailed provider guides
OAuth and application governance guides.
Review how Elba connects to identity providers and cloud suites to inventory and revoke risky application grants.
Google Workspace integrationGoogle Workspace
Directory sync, third-party app grants, and Drive sharing permissions.
Microsoft 365 integrationMicrosoft 365
Directory sync, with separate connections for file sharing and Teams.
Dropbox integrationDropbox
Review team access, connected apps, and shared links without downloading files.
Okta integrationOkta
Directory sync, read-only Okta app assignments, and apps used outside Okta.
Verified catalog coverage
Connected OAuth governance sources.
Catalog connectors that inspect third-party OAuth tokens or linked application sessions directly.
Platform module
Explore this part of the platform.
Discuss your stack
Clean up risky OAuth grants across your workspace.
Review the exact permissions required to audit and revoke third-party OAuth tokens in your environment.