Understanding GSuite SSO connection types
Identify shadow IT apps using Google social login
When enterprise admins have configured GSuite SSO as a single sign-on provider for target applications (using SAML, OIDC, or other SSO protocols), the Productiv GSuite SSO connector collects information about login activity for applications behind SSO. These applications appear as Managed apps in Productiv.
However, some applications allow users to sign in with a "Log in with Google" option, also known as Google social login. This login method is not necessarily managed by IT, so Productiv classifies these apps as Discovered apps to help you better identify shadow IT.