A computer-implemented method performed by an identity management system, the method comprising: storing, for each of a plurality a third-party services, a single sign-on integration for the third-party service, the SSO integration comprising information enabling automated login to the third-party service including at least one of: a uniform resource locator of the login to the third party service; an identifier of a form field for specifying user credentials; detecting, for a first one of the third-party services and a corresponding first one of the SSO integrations, that the first SSO integration is broken such that at least one of: (a) the URL of the login, or (b) the form field identifier for specifying user credentials; of the SSO integration can no longer integrate with: (a) the URL of the login, or (b) the form field identifier for specifying user credentials of the third-party service's login process, thereby preventing automated login to the third party service; repairing the first SSO integration responsive to detecting that the first SSO integration is broken; determining that the first SSO integration has been successfully repaired by: receiving a request from a user to login to the first third-party service; using the repaired first SSO integration to attempt to log the user into the first third-party service; and either: analysing behaviour of the user after the attempted login using the repaired SSO integration or, comparing a login flow sequence of URLs resulting from the attempted login to a baseline login flow sequence of URLs corresponding to a successful login. storing, for each of a plurality a third-party services, a single sign-on integration for the third-party service, the SSO integration comprising information enabling automated login to the third-party service including at least one of: a uniform resource locator of the login to the third party service; an identifier of a form field for specifying user credentials; a uniform resource locator of the login to the third party service; an identifier of a form field for specifying user credentials; detecting, for a first one of the third-party services and a corresponding first one of the SSO integrations, that the first SSO integration is broken such that at least one of: (a) the URL of the login, or (b) the form field identifier for specifying user credentials; of the SSO integration can no longer integrate with: (a) the URL of the login, or (b) the form field identifier for specifying user credentials of the third-party service's login process, thereby preventing automated login to the third party service; (a) the URL of the login, or (b) the form field identifier for specifying user credentials; (a) the URL of the login, or (b) the form field identifier for specifying user credentials repairing the first SSO integration responsive to detecting that the first SSO integration is broken; determining that the first SSO integration has been successfully repaired by: receiving a request from a user to login to the first third-party service; using the repaired first SSO integration to attempt to log the user into the first third-party service; and either: analysing behaviour of the user after the attempted login using the repaired SSO integration or, comparing a login flow sequence of URLs resulting from the attempted login to a baseline login flow sequence of URLs corresponding to a successful login. receiving a request from a user to login to the first third-party service; using the repaired first SSO integration to attempt to log the user into the first third-party service; and either: analysing behaviour of the user after the attempted login using the repaired SSO integration or, comparing a login flow sequence of URLs resulting from the attempted login to a baseline login flow sequence of URLs corresponding to a successful login. analysing behaviour of the user after the attempted login using the repaired SSO integration or, comparing a login flow sequence of URLs resulting from the attempted login to a baseline login flow sequence of URLs corresponding to a successful login.