Organization Integrations

Porcia connects to your organization’s identity provider to build application and access visibility. A provider connection can add directory context, application access, activity, delegated OAuth access, and relevant vendor signals from organizational mailboxes. You connect a provider during onboarding or later from Settings → Integrations. The setup method and administrator role depend on the provider.

Choose a provider

Google Workspace
Microsoft Entra ID
Okta

Connection method: Google service account with domain-wide delegation.Required administrator: Google Workspace Super Admin.Porcia can use the connection to:

Associate applications and activity with Workspace users and groups.
Review third-party application authorization and OAuth activity.
Read supported audit activity for application authorization signals.
Identify relevant vendor signals in organizational mailboxes.

Connect Google Workspace

Follow the setup guide and review each requested access category.

What a provider connection helps Porcia understand

Access category	What it helps Porcia understand
Users and groups	Who belongs to the organization and how access should be attributed.
Applications and assignments	Which tools are connected, assigned, or available to users and groups.
Authentication activity	Which applications appear to be actively used rather than only provisioned.
OAuth and delegated access	Which third-party applications have access and what access may need review.
Vendor mailbox signals	Applications that may not appear in the provider catalog, such as tools referenced by invoices, renewals, or signup notices.

The exact data available depends on the provider, permissions granted, tenant licensing, and workspace configuration. Porcia presents application-level and organizational context; it does not need general page content or browsing history to build the inventory.

How setup works

Start in onboarding or Settings

Select the provider your organization uses. If you are not an administrator, invite the appropriate administrator or return to the setup later.

Approve or configure provider access

Follow the provider-specific flow. Google uses a service-account and domain-wide delegation setup; Microsoft uses administrator consent; Okta uses an administrator-created API token.

Verify the connection

Porcia verifies the connection and begins the initial synchronization.

Review the inventory

Applications and available access context appear in Assets → Apps, Assets → Accounts, and related governance views as synchronization progresses.

Privacy and control

Provider connections use administrator-approved access for the selected organization.
Porcia does not send email from connected customer mailboxes.
Discovery does not automatically modify users, assignments, or provider configuration.
Any supported administrative action, such as OAuth-grant revocation, requires the relevant permission and explicit confirmation.
Disconnecting stops new synchronization. To fully revoke provider access, also remove the authorization, service-account delegation, or API token in the provider’s administrator console.

Disconnect a provider

Go to Settings → Integrations.
Open the connected provider.
Choose Disconnect and confirm.
If needed, remove Porcia’s authorization or credential in the provider’s administrator console.

Historical application data may remain according to your workspace’s supported data-management process.

Next steps

Google Workspace

Connect Google Workspace and review access categories.

Microsoft Entra ID

Connect Microsoft Entra and review Graph permissions.

Okta

Connect Okta with an administrator API token.

Getting Started