AzureADSignIn
Azure AD Sign-in based Shadow SaaS Discovery (APEX-11432)
What it does
Discovers Shadow SaaS applications via Entra ID sign-in logs (MS Graph auditLogs/signIns). Uses app-only auth (client_credentials grant) to enumerate all sign-in events for the configured date range and aggregates unique applications per user. Output files (static names, no timestamps): AzureADSignInApps.csv - Discovered apps with user counts AzureADSignInUsers.csv - User footprints with app counts AzureSignInSaaS.json - Full discovery result (JSON)
How the app exposes it
The module runs through the ACQI discovery orchestrator and writes its rows into a dedicated results view. From there, conflicts, dependencies, and readiness scores feed the deal-wide consolidation layer.
/discovered/azure-signin Outputs
Each module emits a normalised CSV keyed by entity ID with readiness and risk scores, evidence-source counts, and last-seen timestamps. The exact column set varies by module — the app's results view shows the live schema.