How to install Chrome extension via the Google admin console?
Here is a quick tutorial to help you get setup with Corma and deploy our extension to all your teams in just a few clicks through the Google Admin Console.
1. Go to the link
2. Follow the interactive tutorial
⛔ I don’t manage to install the extension. What do I do?
Please double-check here that you followed all the steps in the tutorial video above to successfully install the extension. If the issue persists, please reach out to contact@corma.io so we can help you.
How to install the browser extensions via Intunes?
Check out our in-depth article to guide you through the process:Microsoft Entra ID
I don’t manage to install the extension. What do I do?
Depending whether you use use Google or Microsoft, double-check here here that you followed all the steps to successfully install the extension:
If the issue persists, please reach out to contact@corma.io so we can help you.
Connecting the Identity Provider
Which IdP do we support?
Google SSO
Microsoft SSO
More coming soon
How to connect to Google SSO?
Check out this article to connect to the Google SSO: Google workspace
How to connect to Microsoft Azure AD?
Check out this article to connect to the Microsoft AD (Tenant):
How do I import my expense data?
Connecting your finance or accounting app
Importing via CSV
Adding manually
You can add manually any expense to Corma by going to the specific app page, then on the Expenses tab click on the + icon above the table to add an expense
Upload an invoice on our OCR
Corma also has an OCR capable of automatically extracting data from your PDF invoices to import them in our tool. You can easily import one or multiple invoices in Corma and the expense data will automatically be extracted and mapped to the relevant SaaS app.
Troubleshooting
App Integrations
For Atlassian, there is no data coming in from the direct integration
The Atlassian integration is more complicated than the other integrations. Do not hesitate to reach out in case you need help - we are happy to assist you!
There is an issue with deprovisioning Atlassian/Jira licenses
The Atlassian integration is more complicated than the other integrations. Do not hesitate to reach out in case you need help - we are happy to assist you!
I integrated Corma with Notion. What information can I see?
Corma currently fetches which users have paid live licenses. Soon, we'll add activity tracking and later also provisioning/deprovisioning via Notion's SCIM API (Enterprise plan required).
General Usage
I marked application as authorized, but the extension still shows them as unauthorized. Why?
The extension updates its list of authorized apps only when it starts. Changes in Corma are synced at next extension restart.
Can I connect a technical account to Corma to connect the integrations?
Yes, if this user is already part of your workspace, they should be able to log in to Corma. The user will need to login to Corma using that technical account, then go to the integrations page and connect the integrations.
A user changed their email address and can no longer log-in to Corma or is shown as deactivated. What do I do?
No problem, please provide the Corma team with the user’s new email so we can update our database. The user will be able to login again within 24 hours.
I do not see any data in my Dashboard. What do I do?
That means that you probably did not install or no longer have Corma’s browser extension. Please click here to learn how to install the extension: The browser extensions
I cannot log in. How can I get a new access?
Please make sure that you login with your work email address. You will not be able to login with a private email. Make sure you did not use an alias email. If the issue persists, please reach out to contact@corma.io to reset your login.
When will I start seeing data in Corma?
Once you have successfully installed Corma, the tool starts working right away. It will generate data as you use it, so the results will come in over time depending on your usage of SaaS tools.
A feature does not work. What do I do?
Sorry to hear that! Please reach out to contact@corma.io to let us know so we can fix it. Please add details and a screenshot to make us understand the issue.
I am getting an application error
Reach out to us immediately on contact@corma.io and we will get back to you within the day with a fix on the issue. Please provide the console logs if possible when contacting us.
Extension
The extension’s app search functionality does not work on a new tab in a Brave browser. Is this intentional?
About Corma
Who is behind Corma?
That’s us. We are Héloïse, Samuel and Nikolai, the founders of Corma. We are building Corma together since 2022 and delighted to provide you with our tool. If there is something, you can reach out to contact@corma.io and one of us (promise!) will read and respond to it.
Is Corma collecting personal data?
Corma is collecting different types of data which are necessary to provide our services. We are trying to limit the data collected to the minimum necessary and avoid collecting additional personal data.
Corma is committed to the GDPR and we have data privacy and security as a fundamental value. We reduce the data we collect to a minimum. To be specific, here is what we collect:
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. This typically means the email address.
If you choose to share any personal information (such as your email address) with us, we will not share this information with third parties without your explicit permission, except when required by law, subpoena or court order.
Website Data
Like most Web sites on the Internet, our servers record certain information they automatically receive from the browser, such as the requested page, Internet Protocol (IP) addresses, browser type, language preference, referring site and so on. For the nature of our Product, this includes Domains of websites visited, timestamps of visits and history. More specifically we collect the following:
URLs
Distinguished between professional SaaS and leisure SaaS
We aim to divide all the URLs together
GAIAs (Google Accounts and ID Administration), encrypted
Time stamp of sending
Statistical Information
By analysing the Web site usage as explained above, we may compile certain statistical information, such as most popular or most visited pages on our sites. This aggregated statistical data cannot be not linked to any personal information, and we may share such non-personal statistical information with partners or other third parties without expressed personal consent.
Can I get more information on Corma and what they are doing?
Does the Corma extension monitor all employee browsing? Is this privacy compliant?
No, Corma does not monitor all web browsing. It only tracks usage of professional SaaS applications (not personal apps like YouTube or Netflix) using a domain-based whitelist/blacklist.
It does not capture passwords, credentials, or take screenshot.
How do you ensure privacy compliance?
Can the Corma browser extension automatically authenticate employees?
Yes, if users are logged into their browser with their professional email. Otherwise, they will need to log into the extension manually with their professional email.
Can you provide a template message to inform employees about the adoption of Corma in the company?
“Hello {Insert user_name} ,
Why did we choose Corma?
Our licensing costs have been growing quickly, outpacing the growth of our team size. While adding users and extensions is simple, identifying unused accounts and features is harder. Corma helps us:
Identify and manage unused licenses.
Spot tool consolidation opportunities.
Streamline On & Offboarding processes.
Privacy and Security
Corma has been approved by {Security_reason} and only collects anonymized data related to professional software use. No personal or sensitive information is tracked. The data is managed securely in line with ISO 27001 standards and is protected by strong encryption.
What do you need to do?
Nothing! The browser extension will set itself up silently and you should not be disturbed in any way.
Thanks!”
Sometimes I use a personal account to log into an application. Can personal and professional use be separated?
Yes, with SSO and integrations, Corma can distinguish personal and professional accounts to maintain accurate statistics.
Security
Okta
These are the only 2 scopes that Corma currently requests for the Okta integration:
okta.users.read
okta.apps.read
All Okta credentials are stored and encrypted in Corma's database in France and can be revoked at any time by Corma or from Okta directly. Even if those credentials were to leak, without specific Okta client IDs and Secrets those credentials are not usable. Corma's client IDs and Secrets for Okta are hidden as environment variables on Corma's backend (separated from the database).
For each application, where does the risk scoring (like “High risk”) come from?
The risk score comes from Corma’s internal assessment based on four factors visible in the app. It measures the potential impact if data were leaked, not the current risk. Data sources include web scraping and security APIs.
Expenses
I connected Pennylane to Corma, but nothing is showing up in the expenses—only “estimated data.” Do I need to do anything else?
As long as the “Supplier invoices” scope is checked in Pennylane, there is nothing else you need to do. Our algorithm runs every 24 hours, so the data should appear by tomorrow.
The financial data from Qonto is not showing up in Corma.
Please make sure that the invoices are placed in the "Supplier invoice" section within Qonto.
I connected a finance tool to Corma. Will expense details upload automatically?
Yes, once integrated, expense data uploads automatically. Updates occur every 24 hours, so there may be a short delay before data appears.
Does Corma solely rely on the finance integration to track software expenses?
No, there are multiple ways to import expense data into Corma:
Direct integration with a finance/accounting tool
CSV import
Upload invoices and use OCR
Manual entry
Onboarding, Offboarding & Requests
How does Google account deprovisioning work via Corma?
Only Google Drive docs, future calendar events, and data from other connected Google apps are transferred (not full email history).
Email routing isn’t supported by API yet, but aliases should automatically redirect emails.
What is the timeline for deprovisioning accounts after offboarding?
Accounts are deprovisioned overnight.
How can I offboard a user without an HR tool integration?
On the Users page in Corma, click the “Offboard” button at the top right.
Can I see offboardings scheduled into the future? For how long?
Corma displays offboardings scheduled up to 30 days in advance.
Are licenses auto-provisioned, or is a notification sent for someone to add the license manually?
For integrated apps, provisioning/deprovisioning is automatic via SCIM or API.
For other apps, Corma sends Slack/email notifications and can create Jira tickets. Flows are customizable.
Can employees request access to new tools in Corma, and is there an approval flow?
Yes, they can request access. Admins see these requests, and a Custom Multi-Step Approval Flow feature (letting you specify approval chains) will be available in May 2025.
Can different tool owners approve access to different tools, with a final sign-off by an admin?
Yes. You can assign tool owners, and a multi-step approval process (coming May 2025) allows for specific approval chains.
Will Corma notify us about licenses to deactivate if users are inactive for 30+ days?
Automatic notifications for inactive licenses are planned for Q3 2025.
Bulk Actions & Groups
Is it possible to bulk create groups, e.g., add all users to a group for onboarding?
Currently, bulk adding users to groups isn’t available, but you can create a “standard apps” group and ensure all future users are added to it automatically during onboarding.
How do I invite other admins to Corma?
Go to Settings > Admins page in Corma.
Corma does not limit the amount of admins you add.
Managing Applications & Licenses
Can I assign owners to apps, including Shadow IT?
Owners can be assigned to “Authorized” apps (managed by IT) but not to “Tolerated”/”Unauthorized” apps; hence, no “Define owner” prompt appears for those.
Why does an application have a green plus symbol next to it?
This means that access to that app was detected in the last 24 hours.
How granular is the user activity data (e.g., last sign-in, sign-ins per week/month)?
Corma records each user's last activity on every app, updated daily. You can see sign-in counts per user over a month. Licenses are flagged “inactive” by default after 30 days of inactivity (customizable).
Corma vs. MDM Tools
How does Corma complement MDM tools like Rzilient or Everping?
Both support automatic offboarding for some licenses. For others (often 80% of your stack), Corma pings app owners (via Slack/email) to confirm access removal, with reminders if not completed—helping achieve 100% license coverage.
📣 I am still lost. How do I contact you? In case you have questions you can reach us at contact@corma.io or book a slot to figure out your bug with this: https://calendly.com/samuelbismut. You can also write us on Intercom. You will find the icon on the bottom right of your screen when you are in the Dashboard.
You can automatically import your expense data into Corma from your existing finance or accounting app such as Pennylane, Xero, Netsuite or more. Visit our section to learn more about those connectors.
You can import your expense data using the
Supplier name must be include in full letters the app name. For e.g. Google SAS will work to map Google but Google.com will not
This requires domain verification in Atlassian. . Check our for more information.
Full Atlassian <> Corma integration requires “Managed accounts” on Atlassian. Details are in . Be careful: activating "managed accounts" could grant paid licenses to users if groups/privileges are not set correctly. This enables accurate license tracking and on/offboarding in Corma.
Yes, Chromium extensions cannot open a popup on or a blank tab due to browser restrictions.
Of course! From Corma’s end, you can find our privacy policy . On top of that, please reach out to the owner of Corma in your company and they should be able to provide you with more material about Corma. As a last option, the door is always open to get in touch directly with contact@corma.io
Corma adheres to GDPR and ensures privacy of company and employee data. More details:
We will soon start rolling out , a tool designed to give us better visibility and control over our software usage. This will help us monitor SaaS access and licenses across all systems.
For more details, see the documentation or reach out to {insert contact_info}.
which states that Corma does not have any provisioning capacities and that Corma was reviewed and approved by Okta.
