# The unmanaged stack: Governing SaaS apps and AI tools outside SSO

DevFeed: [The unmanaged stack: Governing SaaS apps and AI tools outside SSO](<https://devfeed.tech/articles/the-unmanaged-stack-governing-saas-apps-and-ai-tools-outside-sso-1967.md>)

Original publisher: [Read original article](<https://1password.com/blog/the-unmanaged-stack-governing-saas>)

Author: info@1password.com (Rachel Sudbeck)

Published: 2026-05-29T00:00:00Z

Content type: article

Language: en

Sources: [Blog on 1Password Blog](<https://devfeed.tech/sources/blog-on-1password-blog.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Software as a service](<https://devfeed.tech/topics/saas.md>), [Single sign-on (SSO)](<https://devfeed.tech/topics/sso.md>), [IAM](<https://devfeed.tech/topics/iam.md>), [Security](<https://devfeed.tech/topics/security.md>), [ChatGPT](<https://devfeed.tech/topics/chatgpt.md>), [Claude](<https://devfeed.tech/topics/claude.md>), [cursor](<https://devfeed.tech/topics/cursor.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-tools](<https://devfeed.tech/tags/ai-tools.md>), [chatgpt](<https://devfeed.tech/tags/chatgpt.md>), [claude](<https://devfeed.tech/tags/claude.md>), [cursor](<https://devfeed.tech/tags/cursor.md>), [enterprise](<https://devfeed.tech/tags/enterprise.md>), [iam](<https://devfeed.tech/tags/iam.md>), [saas](<https://devfeed.tech/tags/saas.md>), [saas-management](<https://devfeed.tech/tags/saas-management.md>), [security](<https://devfeed.tech/tags/security.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>)

## AI overview

This article recaps a 1Password webinar about governing SaaS applications and AI tools that operate outside traditional SSO and IAM controls. It describes the unmanaged stack, its governance and supply-chain risks, and 1Password integrations intended to help teams discover, review, and govern high-risk accounts and usage.

## Source excerpt

Note: This blog is a recap of 1Password's recent webinar, "The unmanaged stack: Governing SaaS apps and AI tools outside SSO." Head here to watch the complete webinar recording. In the constantly evolving world of enterprise tech, there's one thing that IT and security teams have always been able to count on: users won't follow policy if they think it's standing in the way of their productivity. Case in point: 1Password's most recent annual report found that 52% of employees have downloaded apps without IT approval. These shadow IT apps typically sit outside a company's SSO provider, and introduce both unmanaged risk and cost. That governance gap has become more pressing with the growing adoption of AI tools and agents, which introduce new and worsening threats. This issue was the focus of 1Password's recent webinar, "The unmanaged stack: Governing SaaS apps and AI tools outside SSO." What is the unmanaged stack? It refers to all of the SaaS apps and AI-based tools that can't be managed by traditional IAM tools, whether that's due to software constraints or the infamous "SSO tax." During the webinar, Evan Sandhu, 1Password Product Marketing Specialist, and Ethan Stoler, Senior Demo Engineer, explored how 1Password's solutions can help IT and security teams secure and govern these unapproved or unmanaged access points. Key takeaways from the webinar: SaaS and AI tools outside SSO create governance blind spots and can introduce supply chain risk. 1Password SaaS Manager helps discover unmanaged SaaS and AI usage, and help IT teams centralize provisioning, auditing, and lifecycle management. New integrations within 1Password support governance for ChatGPT, Claude, Cursor, and Gemini. Read on for an in-depth recap of the webinar's key themes. New integration features to manage high-risk SaaS and AI IT and security teams need solutions to manage those apps that fall outside the purview of SSO. Thankfully, new integrations between 1Password Enterprise Password Manager (EPM