This is one of my biggest fears about companies constantly outsourcing easily deployed internal apps as SaaS and just using mycompany.saasprovider.com
Normal users stand no chance, especially when there are URLs that are sketchy because oops, saasprovider already has a customer with your requested url, so you end up with
mycompany0.saasprovider.com or mycompany-1.saasprovider.com
Its terrible practice all around and lazy systems and services administration