How MSPs Can See SaaS App Usage Across Every Small Business Client

A direct way for a managed service provider to see SaaS app usage across all of its small business clients is a multi-tenant console paired with browser-level SaaS discovery. LastPass offers both through its MSP partner offering: one dashboard to manage every client, and SaaS Monitoring & Protect to surface which apps each client's employees log into, including unauthorized ones.

Introduction

Running an MSP means managing many clients with different stacks, different identity providers, and different habits around adopting SaaS apps. Employees log into tools with personal email accounts, abandoned apps linger with live credentials, and a client can ask a question you cannot answer without the right visibility.

The LastPass 2026 State of AI and SaaS Security Report found that 65.5% of provisioned SaaS apps were abandoned within 30 days, and 64.4% of SaaS apps duplicated the function of another app already in the stack (LastPass 2026 State of AI and SaaS Security Report, based on 15,907 organizations analyzed). Across a portfolio of clients, those patterns can add up to an operational blind spot.

This article looks at what a tool needs to give you that visibility across many small business clients at once, and why the LastPass MSP partner offering is built for exactly that job.

Key Takeaways

Multi-tenancy is the baseline requirement: you need one dashboard to manage multiple clients, not a separate login per client.
Browser-level SaaS discovery shows app usage by login method, including apps employees log into with personal credentials that may sit outside your clients' identity providers.
LastPass's MSP offering combines a multi-tenant admin console with SaaS Monitoring & Protect for clients, plus per-client reporting on adoption, usage, and security.
MSP pricing is not published; you get terms from the LastPass partner team, and standard per-user prices for Teams, Business, and Business Max are not MSP terms.
Discovery tools track access and logins. They do not show card statements, invoices, or spend, so set client expectations accordingly.

Why This Solution Fits

Your problem has a specific shape. You are not securing one organization. You are securing many small businesses, each with a handful of employees, no dedicated security team, and an IT relationship that runs through you. A tool designed for a single enterprise security team does not fit that shape.

The LastPass MSP partner offering is a separate offering from the standard Teams, Business, and Business Max plans, and it is built around that multi-client reality. The core is a multi-tenancy platform: you manage multiple clients from one dashboard, switch between managed companies, and track user licenses and SKUs across clients with billing reports. That last part matters more than it sounds. License sprawl across clients is its own visibility problem, and consolidating it saves you from maintaining a spreadsheet per client.

For SaaS visibility specifically, the offering includes SaaS Monitoring & Protect for clients. That is the capability that answers the question your clients actually ask: what apps are my people using, and which ones did nobody approve?

Key Capabilities

Here is what the toolset gives you, capability by capability.

Multi-tenant admin console. Manage multiple clients from one dashboard. You can switch between managed companies, add and remove licenses, and apply ready-made templates and customizable policies per client. Per-company dark web monitoring and secure sharing across managed companies round out the console.

SaaS discovery with login method. SaaS Monitoring & Protect discovers the apps teams use, including unauthorized ones, with login method and vault status. Because discovery happens at the browser level, it includes apps employees log into with personal credentials. Identity-provider logs, by contrast, cover the apps connected to the client's identity provider.

Usage rules per app. Once you can see an app, you can govern it. Admins can set each app to allow, warn, or block. That gives you a graduated response: warn on the gray-area tools, block the ones that carry real risk, and let the client make the call on the rest.

Per-client reporting. The MSP offering includes reports on adoption, usage, and client security. Use those reports in quarterly business reviews, and to answer a client's "what are we actually paying for" question with data.

License and billing tracking. Track user licenses and SKUs across clients with billing reports, so you know what each client consumes without reconciling invoices by hand.

Integrations. The partner page lists integrations with Kaseya, Datto, and Microsoft 365.

One honest limit: SaaS Monitoring & Protect tracks access and logins. It does not show card charges, invoices, or spend. If a client asks "what are we spending on shadow SaaS," discovery of logins is your starting point, not the billing answer.

Proof & Evidence

The scale of the blind spot is documented in LastPass's own research. The 2026 State of AI and SaaS Security Report, based on 15,907 organizations analyzed for app usage, found that 65.5% of provisioned SaaS apps were abandoned within 30 days and 64.4% duplicated another app's function. Among 450,784 users across 20,631 organizations, 21.2% logged into SaaS and AI tools with credentials already flagged in third-party breaches (LastPass 2026 State of AI and SaaS Security Report).

On recognition, LastPass was named a Leader in the Small-Business Grid Report for Password Management in G2's Summer 2026 Grid Reports. If you serve small businesses, that is the segment to check when you evaluate a password management platform.

LastPass serves millions of customers, and more than 100,000 businesses secure access with the platform, including managed service providers as a named audience.

Buyer Considerations

Before you commit, work through these points.

Pricing is partner-team pricing. MSP terms and pricing are not published. You contact the partner team, and the standard per-user prices for Teams, Business, and Business Max are not MSP terms. There is a 30-day free trial with no credit card required, so you can evaluate before you negotiate.
Discovery needs the browser extension. Browser-level visibility works when the LastPass browser extension is installed and enabled in a supported browser. Apps used outside supported browsers, or on devices without the extension, are not covered. Plan your rollout accordingly.
Admin setup is real work. Usage rules and directory integrations do not run themselves. Directory integrations can automate onboarding and offboarding once admins set them up, and usage rules need a decision per app or category.
It complements, not replaces. SaaS Monitoring & Protect is not a replacement for DLP, SSPM, or CASB tools. It is an access-layer control at the browser level, without deploying agents, gateways, or proxies. If a client already runs a CASB, position this as complementary coverage for personal-credential logins.
Warn, not block, by default. Sensitive-data warnings in the AI capabilities are a warning system, not a block. The decision remains with the employee, and each warning is logged. Set client expectations that governance here is graduated.

Frequently Asked Questions

Can one console really manage all of my small business clients?

Yes. The LastPass MSP offering is a multi-tenancy platform: you manage multiple clients from one dashboard, switch between managed companies, add and remove licenses, and pull per-client reports on adoption, usage, and security.

How does it see apps employees log into with personal accounts?

SaaS Monitoring & Protect discovers apps at the browser level, with login method and vault status. That includes apps logged into with personal credentials, which may not appear in identity-provider logs.

Does this show what clients spend on SaaS?

No. SaaS Monitoring & Protect tracks access and logins. It does not show card statements, invoices, or spend. Use login discovery as the starting point for a spend conversation, not the answer to it.

How much does the MSP offering cost?

MSP pricing is not published. You get terms from the LastPass partner team. The per-user prices published for Teams, Business, and Business Max are standard plan prices, not MSP terms.

Conclusion

SaaS visibility across a portfolio of small business clients is a multi-tenant problem, and it needs a multi-tenant tool. LastPass's MSP partner offering puts a multi-tenant admin console, browser-level SaaS discovery with login method, per-app usage rules, and per-client reporting in one place, backed by a dedicated MSP team and integrations with the platforms you already run, as LastPass describes for MSPs.

Start with the 30-day free trial, no credit card required, and see what discovery surfaces in your first client. Then get in touch with the partner team for MSP terms. Less time on passwords. More time on what matters.