After re-linking Justworks, the administrator who re-linked it may receive periodic notifications from Justworks that their account had been logged in from a new device, which understandably may cause alarm.
This should be from an IP that Merge uses for fetching data for the integration and is a false alarm. However,since the account is in use by an actual human, and there is always a chance for compromise, we suggest administrators be diligent and always investigate these emails. If it is determined this is not an IP from Merge, please get in touch with Justworks using the details in the alert email.
If an administrator wishes to stop these periodic messages, the workaround would be to create a user in Justworks with the appropriate permissions and a strong password to connect to Vanta. Once this service account is created, they can reconnect the integration using it. We still suggest an administrator periodically inspect these messages if the password is compromised.
This would prevent the emails from alerting the administrator, but we also recommend the inbox be checked periodically in case a login that does not originate from Merge does occur.
Another workaround would be to leave everything as is since Merge only has so many unique IP Addresses that will log in to the user to fetch data. Eventually, they would stop receiving these new IP login emails as they would have already logged in before and rotate between the same ones.