SaaSRationalisation
Discovers SaaS application portfolio via Azure AD sign-in log harvesting,
What it does
Combines three discovery sources to build a comprehensive SaaS portfolio view: 1. Azure AD sign-in logs -> apps users actually authenticate to (last 90 days) 2. Intune managed apps -> apps deployed via MDM/MAM 3. Browser extension inventory -> Chrome & Edge extension manifest files on endpoints Outputs: - SaaSPortfolio.csv : canonical SaaS app portfolio (primary output) - SaaSSigninLogHarvest.csv : raw sign-in log harvest - SaaSIntuneManagedApps.csv : raw Intune managed app inventory - SaaSBrowserExtensions.csv : browser extension inventory per profile SaaSPortfolio.csv columns: appName, publisher, userCount, lastSeen, discoverySource, isSanctioned (default false), monthlyActiveUsers discoverySource values: SignInLog | Intune | BrowserExtension isSanctioned is determined by presence in Intune managed apps (sanctioned=true) monthlyActiveUsers is derived from sign-in logs (last 30 days / 4 = weekly average)
How the app exposes it
The module runs through the ACQI discovery orchestrator and writes its rows into a dedicated results view. From there, conflicts, dependencies, and readiness scores feed the deal-wide consolidation layer.
/discovered/saa-srationalisation Outputs
Each module emits a normalised CSV keyed by entity ID with readiness and risk scores, evidence-source counts, and last-seen timestamps. The exact column set varies by module — the app's results view shows the live schema.