Anomaly detection

An anomaly is an account found on a connected application that matches no known MIA user, typically an external, orphaned or undeclared account.

Why it's useful

• Spot orphaned accounts (former staff, departed contractors) that are still active.
• Detect unknown accounts (shared license, undeclared service account).
• Keep a reliable, up-to-date inventory.

How MIA detects anomalies

On each sync, MIA compares each remote account's email address to your domain name (the one set during getting started):

• if automatic creation is enabled and the email matches your domain, the account becomes a user (linked to an existing user or created automatically);
• otherwise (email outside the domain, automatic creation disabled, or account with no usable email), the account is flagged as an anomaly.

Automatic user creation is set in Configuration → Organization.

The Anomalies page lists them all, one line per account, with its application. Search for an account, or filter on an application; the accounts of one person on several applications follow each other. Each application's page also has its Anomalies tab, limited to its accounts.

Handling an anomaly

The menu of each line offers three actions:

• Link to a user: the account becomes an existing user's access to this application.
• Create a user: a new user is created from the account, which becomes their access. If a user already has the address typed, MIA refuses and invites you to link the account to that user.
• Delete the account: closes the remote account on the application; the person using it loses the access.

To link several accounts to the same user at once, select them on the Anomalies page, then Link to a user: one account per application at most.

WARNING

"Delete the account" acts on the service itself: the account is closed on the application side. On an application where MIA cannot delete accounts, the action is inactive and says why: remove the account directly on the application then.

Good to know

• Anomaly detection is included in the free plan.
• Automatic data-breach checking on these accounts is a Pro feature.