Automated SaaS Sign-in IP Reporting
detail.loadingPreview
Gain immediate insights into your SaaS application's security posture by automatically gathering and reporting successful login IP addresses from various authentication events. This workflow consolidates data from different sources and delivers a deduplicated, actionable report.
About This Workflow
This n8n workflow is designed to provide a comprehensive view of successful user sign-ins across your SaaS environment. By leveraging the SaaS Alerts API, it fetches login events from multiple sources, including general successful logins, OAuth permissions granted, and Office 365 shell logins. The workflow then elegantly consolidates this disparate data, filters it to include only relevant IP information, removes any duplicate entries, and formats it into a clean CSV file. Finally, it securely sends this report as an email attachment to a designated recipient, ensuring timely and actionable security intelligence. This solution is ideal for organizations seeking to enhance their security monitoring and compliance efforts.
Key Features
- Comprehensive Data Aggregation: Gathers successful login events from diverse SaaS authentication methods.
- Automated IP Reporting: Consolidates and presents user IP addresses for security analysis.
- Data Deduplication: Ensures accuracy and avoids redundant information by removing duplicate IP entries.
- Customizable Reporting: Filters and formats data to include essential details like customer name, user, IP, and location.
- Secure Email Delivery: Automatically sends the generated report as an email attachment.
How To Use
- Configure API Access: Ensure you have the necessary API key for the SaaS Alerts API and SMTP2Go. Store these securely within n8n credentials.
- Set Up Date and Variables: In the 'Set Date and Form Variables' node, input your API key and the desired recipient's email and name.
- Define Event Types: The workflow is pre-configured to fetch 'login.success', 'oauth.granted.permission', and 'ms.shell.login.success' events. Adjust these in the respective 'GET Events' nodes if your needs differ.
- Filter and Format Data: The 'Filter IP Information' node specifies the fields to include in the report. Customize this to your reporting requirements.
- Process and Deduplicate: The 'Convert to CSV' node prepares the data, and 'Remove Duplicate IPs' ensures data integrity.
- Send Report: The 'Send Email Upon Completion' node uses SMTP2Go to deliver the generated CSV report to the specified email address.
Apps Used
Workflow JSON
{
"id": "eb578e57-3e8b-4fc3-8031-4fa04b0053fb",
"name": "Automated SaaS Sign-in IP Reporting",
"nodes": 20,
"category": "Operations",
"status": "active",
"version": "1.0.0"
}Note: This is a sample preview. The full workflow JSON contains node configurations, credentials placeholders, and execution logic.
Get This Workflow
ID: eb578e57-3e8b...
About the Author
DevOps_Master_X
Infrastructure Expert
Specializing in CI/CD pipelines, Docker, and Kubernetes automations.
Statistics
Related Workflows
Discover more workflows you might like
Universal CSV to JSON API Converter
Effortlessly transform CSV data into structured JSON with this versatile n8n workflow. Integrate it into any application as a custom API endpoint, supporting various input methods including file uploads and raw text.
Instant WooCommerce Order Notifications via Telegram
When a new order is placed on your WooCommerce store, instantly receive detailed notifications directly to your Telegram chat. Stay on top of your e-commerce operations with real-time alerts, including order specifics and a direct link to view the order.
On-Demand Microsoft SQL Query Execution
This workflow allows you to manually trigger and execute any SQL query against your Microsoft SQL Server database. Perfect for ad-hoc data lookups, administrative tasks, or quick tests, giving you direct control over your database operations.