How can we help?

Search

Introduction to Torii Browser Extension

Noga Tubi
Noga Tubi
  • Updated
How does the Torii browser extension work?

Overview

Torii utilizes multiple discovery sources to map your organization's SaaS stack.

Torii browser extension is a discovery source that can be deployed on the employee's browser as an additional discovery source.

Torii extension analyzes user behavior to detect logins to business applications.

The entire analysis is performed locally on the client-side, meaning that no cookies, login information nor browsing history information is sent to Torii servers

Once a SaaS application is detected the only information recorded - is the Torii user ID and the visit time in the app.

Overview Video

🎥 Browser Extension Overview

Why do you need it?

  • The extension assists application discovery, as well as usage discovery per user
  • It helps evaluate app usage and efficiency and comply with security certifications
  • The extension is the most powerful way to discover Shadow IT - unknown apps for the IT team
  • On top of that, the latest GDPR requires that companies have an up-to-date list of all SaaS being used
    mceclip0.png

Collecting Data

  • The extension analyzes cookies and visits reported by the browser to map the business applications being used
  • The entire analysis is performed locally on the client, meaning that no cookies nor login information ever leaves the browser
  • The only information being sent to Torii’s servers is the detected business applications and a unique identifier of the logged-in user
  • Note: Only logins to apps using a business email address are collected. Private usage is ignored

Browser extension modes

Torii browser extension operates in 3 alternative modes. These modes affect how and which data is being sent from the extension to Torii.

  1. Authenticated mode (recommended) - Torii collects data only from authenticated employees. This means that employees would need to log in to the extension in order for their usage data to be sent.
  2. Un-Authenticated mode - Torii collects data from all users of the browser extension. This means that usage data will be sent both to employees who have logged in to the extension and to those who have not.
  3. Disabled - The Torii extension will not collect any usage data from any employee

Where can you see the extension at work?

Usage sensed by the extension is reflected in a few areas of the Torii platform:

  • Application >> Review tab >> Sources column see which apps have been discovered through the extension

  • In any Application,>> app's overview page you can see overall App usage, and which users have logged in to the app.

    In this example, you can see that this app was discovered solely by the Torii extension uncovering what might be a shadow application.

    Note that the extension will collect and show usage for any app that is discovered, even for those discovered by other sources.

Filter extension discovery

By using filters, you can create an "Application view" that will help you see the new apps discovered by the Torii extension.

  • Go to Application >> Review tab and select filters that will help you spot the new applications that were discovered.

  • For example, where the source is “extension”

Q&A

  • Q: What data is being collected?
    A: Torii measures days used per month for each business application in order to provide usage and utilization information.

  • Q: Does the extension map applications with personal usage?
    A: No. Torii identifies and maps only business SaaS applications and will never analyze or store personal usage.
    Examples of apps that are mapped: SalesForce, HubSpot, New Relic, MailChimp, and any app that is used for business purposes.
    Examples of apps that are not mapped: are Facebook, LinkedIn, Twitter, Audible, and any other personal apps.
    Some applications may offer different versions of their service for personal business use, such as Facebook vs Facebook ads, LinkedIn vs LinkedIn Recruiter, and Twitter vs Twitter ads. Torii only maps the business usage.

  • Q: Why when testing the extension I have a login window before activating the extension?A: That’s the expected behavior. When the browser extension is installed and it doesn’t know who the user is, it asks the user to log in.
    Meanwhile, it will also try to identify the user. Once identified (based on the user signing in to Chrome by inspecting cookies and other data points), it will then start detecting the used apps.

  • Q: Does the Torii extension have any effect on the browser performance?
    A: No, the browser ext. doesn't slow down browser speeds or affect performance in any way

  • Q: How do we see user activity when deploying Torii's browser extension on more than one browser (Chrome, Firefox, and Edge)?
    A: The report shows the latest browser that reported for a user, but we capture data from all

  • Q: Why doesn't Torii's extension icon automatically appear in my browser after installation?
    A: Chrome, Edge, and Firefox browsers store your installed extensions under the puzzle peice icon in your browser. After clicking on the puzzle piece icon, you can pin Torii's browser extension to your browser.

  • Q: If my org uses a managed version of Chrome, how can I automatically pin Torii's browser extension in my users' browsers when deploying it across my org?
    A: If you want the extension icon to automatically appear in your users' browsers after deploying the extension, you can follow these instructions - https://support.google.com/chrome/a/answer/6306504?hl=en

  • Q: Why are there always non-reporting users in the Extension Status report?
    A: Torii assumes that all users should have the extension installed if it's enabled in your tenant. The non-reporting users listed are calculated as total active users minus active users with the extension active.

  • Q: If I switch from Authenticated Mode to Unauthenticated Mode, does the extension retain the "logged in" status of Users who previously logged into the extension?
    A:     Yes, and Users can also log into the extension when it's being used in Unauthenticated Mode if they want to.

  • Q: What data doesn't the extension pick up?
    A: The extension does not pick up data from other browser extensions
 

See the following "how-to" articles to deploy and communicate the Torii extension.

IT side

End-user side

Videos

White Paper

Was this article helpful?

1 out of 1 found this helpful

Have more questions? Submit a request