Entra ID Sign-Ins
Azure AD Sign-in based Shadow SaaS Discovery
What it does
Discovers Shadow SaaS applications via Entra ID sign-in logs (MS Graph auditLogs/signIns). Uses app-only auth (client_credentials grant) to enumerate all sign-in events for the configured date range and aggregates unique applications per user. Output files (static names, no timestamps): AzureADSignInApps.csv - Discovered apps with user counts AzureADSignInUsers.csv - User footprints with app counts AzureSignInSaaS.json - Full discovery result (JSON)
How the app exposes it
The module feeds into the ACQI app's dedicated results view. From there, conflicts, dependencies, and readiness scores roll up into the deal workspace.
/discovered/azure-signin Outputs
Each module produces a CSV with readiness and risk scores, evidence-source counts, and last-seen timestamps. The exact columns vary by module — the app's results view shows the live schema.