Welcome to the Corma Helpdesk. Here you will find the information on how to solve common bugs and troubleshoot issues you might have.
Go to the link
Follow this interactive tutorial
Check out our in-depth article to guide you through the process: Microsoft Entra ID
Depending whether you use use Google or Microsoft, double-check here that you followed all the steps to successfully install the extension:
Please double-check here that you followed all the steps in the tutorial video above to successfully install the extension. If the issue persists, please reach out to [email protected] so we can help you.
Google SSO
Microsoft SSO
More coming soon
Check out this article to connect to the Google SSO
Check out this article to connect to the Microsoft AD (Tenant)
Check out this article to connect to Okta
You can automatically import your expense data into Corma from your existing finance or accounting app such as Pennylane, Xero, Netsuite or more. Visit our integrations section to learn more about those connectors.
You can import your expense data using this CSV template
⚠️ Supplier name must be include in full letters the app name. For e.g. Google SAS will work to map Google but Google.com will not.
You can add manually any expense to Corma by going to the specific app page, then on the Expenses tab click on the + icon above the table to add an expense.
Corma also has an OCR capable of automatically extracting data from your PDF invoices to import them in our tool. You can easily import one or multiple invoices in Corma and the expense data will automatically be extracted and mapped to the relevant SaaS app.
This requires domain verification in Atlassian. Here’s an explanation and tutorial. Check our Atlassian Integration doc for more information.
The Atlassian integration is more complicated than the other integrations. Do not hesitate to reach out in case you need help - we are happy to assist you!
Full Atlassian <> Corma integration requires “Managed accounts” on Atlassian. Details are in this page. Be careful: activating "managed accounts" could grant paid licenses to users if groups/privileges are not set correctly. This enables accurate license tracking and on/offboarding in Corma.
The Atlassian integration is more complicated than the other integrations. Do not hesitate to reach out in case you need help - we are happy to assist you!
Corma currently fetches which users have paid live licenses. Soon, we'll add activity tracking and later also provisioning/deprovisioning via Notion's SCIM API (Enterprise plan required).
You may encounter an error when attempting to connect the Microsoft integration, even when using credentials from a user who is a Global Admin and Application Admin.
Please follow these steps:
In settings, invite as admin the Microsoft admin account that will connect Corma to Entra.
Log out of Corma.
Log back in to Corma using Microsoft SSO. Make sure you sign in with the same Entra admin email that was invited.
Go to the connectors page in Corma.
Connect Microsoft. Ensure the connection is completed using the same Microsoft admin account.
The extension updates its list of authorized apps only when it starts. Changes in Corma are synced at next extension restart.
Yes, if this user is already part of your workspace, they should be able to log in to Corma. The user will need to login to Corma using that technical account, then go to the connectors page and connect the integrations.
No problem, please provide the Corma team with the user’s new email so we can update our database. The user will be able to login again within 24 hours.
That means that you probably did not install or no longer have Corma’s browser extension. Please click here to learn how to install the extension: The browser extensions
Please make sure that you login with your work email address. You will not be able to login with a private email. Make sure you did not use an alias email. If the issue persists, please reach out to [email protected] to reset your login.
Once you have successfully installed Corma, the tool starts working right away. It will generate data as you use it, so the results will come in over time depending on your usage of SaaS tools.
Sorry to hear that! Please reach out to [email protected] to let us know so we can fix it. Please add details and a screenshot to make us understand the issue.
Reach out to us immediately on [email protected] and we will get back to you within the day with a fix on the issue. Please provide the console logs if possible when contacting us.
Yes, Chromium extensions cannot open a popup on www.google.com or a blank tab due to browser restrictions.
That’s us. We are Héloïse, Samuel and Nikolai, the founders of Corma. We are building Corma together since 2022 and delighted to provide you with our tool. If there is something, you can reach out to [email protected] and one of us (promise!) will read and respond to it.
Corma is collecting different types of data which are necessary to provide our services. We are trying to limit the data collected to the minimum necessary and avoid collecting additional personal data.
Corma is committed to the GDPR and we have data privacy and security as a fundamental value. We reduce the data we collect to a minimum. To be specific, here is what we collect:
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. This typically means the email address.
If you choose to share any personal information (such as your email address) with us, we will not share this information with third parties without your explicit permission, except when required by law, subpoena or court order.
Website Data
Like most Web sites on the Internet, our servers record certain information they automatically receive from the browser, such as the requested page, Internet Protocol (IP) addresses, browser type, language preference, referring site and so on. For the nature of our Product, this includes Domains of websites visited, timestamps of visits and history. More specifically we collect the following:
URLs
Distinguished between professional SaaS and leisure SaaS
We aim to divide all the URLs together
GAIAs (Google Accounts and ID Administration), encrypted
Time stamp of sending
Statistical Information
By analyzing the Web site usage as explained above, we may compile certain statistical information, such as most popular or most visited pages on our sites. This aggregated statistical data cannot be not linked to any personal information, and we may share such non-personal statistical information with partners or other third parties without expressed personal consent.
Of course! From Corma’s end, you can find our privacy policy here. On top of that, please reach out to the owner of Corma in your company and they should be able to provide you with more material about Corma. As a last option, the door is always open to get in touch directly with [email protected]
No, Corma does not monitor all web browsing. It only tracks usage of professional SaaS applications (not personal apps like YouTube or Netflix) using a domain-based whitelist/blacklist.
It does not capture passwords, credentials, or take screenshot.
Corma adheres to GDPR and ensures privacy of company and employee data. More details: Security and Privacy documentation
Yes, if users are logged into their browser with their professional email. Otherwise, they will need to log into the extension manually with their professional email.
“Hello {Insert user_name} ,
We will soon start rolling out Corma, a tool designed to give us better visibility and control over our software usage. This will help us monitor SaaS access and licenses across all systems.
Why did we choose Corma?
Our licensing costs have been growing quickly, outpacing the growth of our team size. While adding users and extensions is simple, identifying unused accounts and features is harder. Corma helps us:
Identify and manage unused licenses.
Spot tool consolidation opportunities.
Streamline On & Offboarding processes.
Privacy and Security
Corma has been approved by {Security_reason} and only collects anonymized data related to professional software use. No personal or sensitive information is tracked. The data is managed securely in line with ISO 27001 standards and is protected by strong encryption.
What do you need to do?
Nothing! The browser extension will set itself up silently and you should not be disturbed in any way.
For more details, see the Corma Data Privacy documentation or reach out to {insert contact_info}.
Thanks!”
Yes, with SSO and integrations, Corma can distinguish personal and professional accounts to maintain accurate statistics.
Official page of Corma's integration on the Okta OIN manager which states that Corma does not have any provisioning capacities and that Corma was reviewed and approved by Okta.
These are the only 2 scopes that Corma currently requests for the Okta integration:
okta.users.read
okta.apps.read
All Okta credentials are stored and encrypted in Corma's database in France and can be revoked at any time by Corma or from Okta directly. Even if those credentials were to leak, without specific Okta client IDs and Secrets those credentials are not usable. Corma's client IDs and Secrets for Okta are hidden as environment variables on Corma's backend (separated from the database).
The risk score comes from Corma’s internal assessment based on four factors visible in the app. It measures the potential impact if data were leaked, not the current risk. Data sources include web scraping and security APIs.
As long as the “Supplier invoices” scope is checked in Pennylane, there is nothing else you need to do. Our algorithm runs every 24 hours, so the data should appear by tomorrow.
Please make sure that the invoices are placed in the "Supplier invoice" section within Qonto.
Yes, once integrated, expense data uploads automatically. Updates occur every 24 hours, so there may be a short delay before data appears.
No, there are multiple ways to import expense data into Corma:
Direct integration with a finance/accounting tool
CSV import
Upload invoices and use OCR
Manual entry
Only Google Drive docs, future calendar events, and data from other connected Google apps are transferred (not full email history).
Email routing isn’t supported by API yet, but aliases should automatically redirect emails.
Accounts are deprovisioned overnight.
On the Users page in Corma, click the “Offboard” button at the top right.
Corma displays offboardings scheduled up to 30 days in advance.
For integrated apps, provisioning/deprovisioning is automatic via SCIM or API.
For other apps, Corma sends Slack/email notifications and can create Jira tickets. Flows are customizable.
Yes, they can request access. Admins see these requests, and a Custom Multi-Step Approval Flow feature (letting you specify approval chains) is available on our platform.
Yes. You can assign tool owners, and a multi-step approval process allows for specific approval chains.
Automatic notifications for inactive licenses are planned for Q3 2025.
If the user is deleted (not suspended) the mail is deleted automatically by Google after 30 days
Currently, bulk adding users to groups isn’t available, but you can create a “standard apps” group and ensure all future users are added to it automatically during onboarding.
Go to Settings > Admins page in Corma.
Corma does not limit the amount of admins you add.
Owners can be assigned to “Authorized” apps (managed by IT) but not to “Tolerated”/”Unauthorized” apps; hence, no “Define owner” prompt appears for those.
This means that access to that app was detected in the last 24 hours.
Corma records each user's last activity on every app, updated daily. You can see sign-in counts per user over a month. Licenses are flagged “inactive” by default after 30 days of inactivity (customizable).
Both support automatic offboarding for some licenses. For others (often 80% of your stack), Corma pings app owners (via Slack/email) to confirm access removal, with reminders if not completed—helping achieve 100% license coverage.
To sync and revoke Microsoft OAuth grants, go to the Settings tab. In the filters, select Source and choose Microsoft. This will display all granted Microsoft scopes. You can review and revoke the grants directly from the same table.
By default, all monetary values in Corma are displayed in Euros (EUR). You can change this at any time by updating your main currency settings. To do so:
Go to Settings in the app, open the Main currency dropdown menu, ans select your preferred currency from the list of 166 available currencies
Once selected, the new currency will automatically apply to all pages and tabs in Corma, including costs, expenses, and financial totals. Currency conversions are based on daily-updated exchange rates, ensuring your data stays accurate.
📣 I am still lost. How do I contact you? In case you have questions you can reach us at [email protected] or book a slot to figure out your bug with this: https://calendly.com/samuelbismut. You can also write us on Intercom. You will find the icon on the bottom right of your screen when you are in the Dashboard.
