> ## Documentation Index
> Fetch the complete documentation index at: https://hc.saas-manager.biz.nuro.jp/llms.txt
> Use this file to discover all available pages before exploring further.

# 3-1. Check SaaS Integration Patterns (Integration Methods)

> Learn about the four methods for connecting to cloud services.

There are four ways to connect to a SaaS service.

1. [OAuth-based connection](#oauth-connection)
2. [API key-based connection](#api-connection)
3. [ID/Password-based connection](#id-password-connection)
4. [Syncing SSO app access permissions registered in Entra ID](#entra-id-sso-sync)

<h2 id="oauth-connection">
  OAuth-based connection
</h2>

This method obtains credentials (identity verification information) via OAuth. You connect by pressing **Connect** — no additional configuration required.

When you press **Connect**, you are redirected to the target service. On the screen that reads "Grant the following permissions", select **Allow** to complete the connection.

Before pressing **Allow**, confirm the following:

* The permission scope being requested
* That this service is requesting authorization (check the logo and service name)

<img src="https://mintcdn.com/admina-sbn/niA9KijZSm52jzoI/images/it-management/8iscw8ce8k/screen-shot-2022-01-30-at-21-23-43.png?fit=max&auto=format&n=niA9KijZSm52jzoI&q=85&s=49992fae2a29fa1dd5d606fb547f2205" alt="Screen showing OAuth-based connection" width="962" height="536" data-path="images/it-management/8iscw8ce8k/screen-shot-2022-01-30-at-21-23-43.png" />

<h2 id="api-connection">
  API key-based connection
</h2>

This method connects by registering an API key — no other setup required.

Generate an API key using each service's own procedure, then register it with this service to complete the connection.

<img src="https://mintcdn.com/admina-sbn/niA9KijZSm52jzoI/images/it-management/8iscw8ce8k/screen-shot-2022-01-30-at-21-24-20.png?fit=max&auto=format&n=niA9KijZSm52jzoI&q=85&s=548ae6a631fb5bce4cde9867f945a4e1" alt="Screen showing API key-based connection" width="948" height="938" data-path="images/it-management/8iscw8ce8k/screen-shot-2022-01-30-at-21-24-20.png" />

<h2 id="id-password-connection">
  ID/Password-based connection
</h2>

Services that do not support an API connect using an ID and password.

### Connecting with an employee's ID/Password

Register the login ID and password of an employee with this service to complete the connection. This is typically an account with SaaS admin privileges. You can also optionally register two-factor authentication credentials.

<Info>
  This method is not available in the following cases:

  * Login via another service (such as Google Login) or Single Sign-On (SSO) is enforced
  * Storing employee account credentials is not acceptable from a security standpoint
</Info>

If either applies, create a dedicated system integration account on the SaaS side. Use its credentials to log in and complete the connection.

<img src="https://mintcdn.com/admina-sbn/niA9KijZSm52jzoI/images/it-management/8iscw8ce8k/screen-shot-2022-01-27-at-20-38-45.png?fit=max&auto=format&n=niA9KijZSm52jzoI&q=85&s=9ea4c67e815724ee2066b4a9aaa8e435" alt="Screen showing ID/Password-based connection" width="914" height="1518" data-path="images/it-management/8iscw8ce8k/screen-shot-2022-01-27-at-20-38-45.png" />

<h2 id="entra-id-sso-sync">
  Syncing SSO app access permissions registered in Entra ID
</h2>

This feature uses Microsoft Entra ID (formerly Azure AD) as an identity provider (IdP). It syncs the application information registered there.

Linking synced apps to services lets you manage SaaS usage from a single place.

For details, see [Identity Provider Function (Microsoft Entra ID / Azure AD)](/en/integrations/4l37o2sowt-idp-entraid).

<Info>
  Currently, only Microsoft Entra ID (formerly Azure AD) is supported as an identity provider (IdP).
</Info>

## Unsupported integration methods

<Info>
  Integration is not supported for cloud services that match any of the following:

  * Login via Single Sign-On (SSO) is enforced
  * Login via an external identity provider (such as Google Login) is enforced
  * The above applies and the integration method with this service is ID/Password
</Info>

A SaaS in the "unsupported integration methods" category above may still connect in these cases:

* The SaaS allows admin accounts to bypass SSO and log in directly with an ID and password
* The SaaS uses an external identity provider but also allows direct login with an ID and password