Monitor authentication IPs from SaaS alerts & email reports via SMTP2Go

Collect and Email Authentication IP Addresses from SaaS Alerts (Last 24 Hours)

Description This n8n workflow automates the process of collecting sign-in IP addresses from SaaS Alerts over the past 24 hours and emailing the results using SMTP2Go. Designed for security teams, IT administrators, and compliance officers, this workflow helps monitor user authentication activity, detect unusual sign-ins, and respond to potential security threats in real time.

By automating data collection and email alerts, organizations can proactively track login patterns, ensure compliance with security policies, and mitigate risks associated with unauthorized access.

Use Case This workflow is ideal for businesses and IT teams that need to: - Monitor user authentication activity across SaaS applications. - Identify login attempts from suspicious IPs. - Automate security reporting and compliance tracking. - Receive real-time alerts for unusual sign-in behaviors.

Pre-Conditions & Requirements Before using this workflow, ensure you have: - A SaaS Alerts account or another system that logs authentication IPs. - An SMTP2Go account for sending email notifications. - n8n set up with proper API credentials and database access (if applicable).

Setup Instructions 1. Configure SaaS Alerts API - Obtain API from the SaaS Alerts Platform under the Settings menu.

2. Set Up SMTP2Go for Email Alerts - Create an SMTP2Go account if you don’t have one. - Generate a SMTP2Go API key - Verify that your sending email address has been configured and verified. - Define recipient email addresses for security alerts.

3. Customize the Workflow - Modify filtering rules to track specific users, IP ranges, or flagged login attempts. - Adjust email content to include relevant details for your team.