Integration philosophy

Connect signals. Build context. Automate with control.

An integration should do more than move data between systems.

Solvantra uses integration signals to establish relationships between workforce identities, SaaS accounts, application access and lifecycle events. These relationships provide the context required for analysis and, where appropriate, controlled remediation and automation.

The objective is not to create another isolated identity database. It is to create a more useful operational view of the SaaS identity environment.

Available Integrations

Google Workspace

AVAILABLE

Solvantra connects to Google Workspace to discover OAuth app grants and revoke them on your behalf.

What Solvantra can currently do:

  • Discover OAuth app grants connected to Google Workspace accounts
  • Revoke OAuth app grants
  • Scan receipt emails for SaaS cost and licence-waste visibility

Limitations: The OAuth refresh token is currently provided manually by an administrator — there is no self-serve "Sign in with Google" consent flow yet. Discovery covers OAuth-connected applications, not password-only accounts. Revocation removes the OAuth grant, not the underlying Google user account. This integration has not yet been demonstrated against a live customer tenant.

Google Workspace OAuth app access in detail

Microsoft 365 (Entra ID)

AVAILABLE

Solvantra connects to Microsoft 365 (Entra ID) via Microsoft Graph to discover and revoke OAuth app grants.

What Solvantra can currently do:

  • Discover OAuth app grants via Microsoft Graph
  • Revoke OAuth app grants
  • Scan receipt emails via Microsoft Graph for cost and licence-waste visibility

Limitations: Authentication is refresh-token based. This is OAuth-grant governance, not full Entra ID directory or identity governance — there is no verified group, licence or Conditional Access management, and Solvantra does not replace Entra ID or act as an SSO provider. This integration has not yet been demonstrated against a live customer tenant.

Microsoft 365 and Entra OAuth app access in detail

Generic HRIS Webhook

AVAILABLE

Solvantra accepts a signed webhook from your HR system to trigger automatic access review on employee termination.

What Solvantra can currently do:

  • Receive a signed webhook, authenticated with HMAC-SHA256
  • Process employee termination events
  • Match terminated employees against flagged OAuth grants
  • Operate in Off, Dry-run or Live mode — Live mode can enqueue revocation jobs

Note: Solvantra provides the receiving, matching and revocation workflow. Your HR system must be configured to send the webhook.

Browser Automation (RPA)

IN DEVELOPMENT

Solvantra can locate the deactivation control on applications without an API integration. Automatic deactivation for these applications is not yet available.

What Solvantra can currently do:

  • Locate deactivation controls in third-party applications that have no API, using Playwright and AI-assisted visual navigation

Limitation: The current implementation is dry-run/simulation only. It does not perform real destructive clicks or actual account deactivation.

Solvantra does not currently provide connectors for Okta, Workday, BambooHR, Salesforce, GitHub, Slack or AWS IAM.

How integrations work

STEP 1: Connect

Connect supported identity, workforce or application sources to Solvantra.

STEP 2: Discover

Build an inventory of identities, accounts and access relationships associated with those sources.

STEP 3: Analyse

Identify relationships and lifecycle conditions that may require review or remediation.

STEP 4: Act

Apply appropriate governance actions through controlled workflows and supported automation.

STEP 5: Verify

Maintain visibility into governance activity and the resulting state of the environment.

Bring your SaaS identity environment into view.

Connect the systems that provide identity and lifecycle signals, then use Solvantra to understand and govern the downstream SaaS relationships those signals represent.

Start Free Assessment