Templates / Monitor authentication IPs from SaaS alerts & email reports via SMTP2Go

Monitor authentication IPs from SaaS alerts & email reports via SMTP2Go

Needs changes

by Benjamin Jones (SaaS Alerts) · 1,123 views · created 2025-03-10 · SecOps

Needs changes. This template uses 1 thing(s) that n8n 3.0 removes: Convert to/from binary data. 1 breaking item(s) found. Static check, last run 2026-10-19.

What this workflow does

This workflow has 11 nodes and runs when someone submits an n8n form (“Request Sign-In CSV”). It uses only n8n's built-in nodes. It also calls api.smtp2go.com over HTTP.

How it runs

Trigger: When someone submits an n8n form (“Request Sign-In CSV”).

  1. Set Date and Form Variables (Edit Fields (Set)): sets 4 fields: Last 24 Hours, API, Name…
  2. GET Events - Login Successful (HTTP Request): calls an HTTP API
  3. GET Events - OAuth Authentication (HTTP Request): calls an HTTP API
  4. GET Events - Office365 Shell WCSS (HTTP Request): calls an HTTP API
  5. Combine all Authentication Events (Merge): merges the data from its input branches
  6. Filter IP Information (Edit Fields (Set)): sets or maps fields
  7. Remove Duplicate IPs (Remove Duplicates): removes duplicate items
  8. Convert to CSV (Convert to File): converts data to a file
  9. Convert CSV to Base (Convert to/from binary data): uses Convert to/from binary data
  10. Send Email Upon Completion (SMTP2Go) (HTTP Request): calls api.smtp2go.com (POST)

HTTP calls to: api.smtp2go.com

Before you upgrade to n8n 3.0

1 thing in this workflow is removed in n8n 3.0. Fix it before you upgrade:

  • Convert to/from binary data in Convert CSV to Base64: replace with Convert to File or Extract from File.
Removed in 3.0Replace with
Convert to/from binary data
Convert CSV to Base64
Convert to File or Extract from File

Nodes used (7)

From the author

Collect and Email Authentication IP Addresses from SaaS Alerts (Last 24 Hours) Description This n8n workflow automates the process of collecting sign-in IP addresses from SaaS Alerts over the past 24 hours and emailing the results using SMTP2Go. Designed for…

Excerpt from Benjamin Jones (SaaS Alerts)'s description on n8n.io.

View the original on n8n.io → Check your own copy

Get the weekly “what broke” email

New templates, newly broken ones, and n8n release changes. One short email a week.

Form not loading? Subscribe here.