With recent updates, the term "Member" in the system is gradually being changed to "User." If you still see "Member" in this help documentation, please read it as "User." For more details on this change, please refer to this announcement.
With Josys, you can automatically detect the actual usage of internal users by leveraging Microsoft Entra ID audit logs. Visualizing actual app usage helps you identify inactive accounts and optimize license utilization. This page describes the Microsoft Entra ID audit logs.
Overview
This feature allows you to detect the services that employees have logged into using their corporate Microsoft Entra ID. Detection applies to logins made via the "Log in with Microsoft Entra ID" option on the login screens of SaaS and web services.
What You Can Do
- Detect services and SaaS that employees log into using their corporate Microsoft Entra ID. Logins via corporate Microsoft Entra ID can be detected regardless of whether they are performed on a browser, mobile app, or desktop.
- Services logged into using personal Microsoft Entra ID accounts cannot be detected.
- If users log into the target app using an email address and password, it will not be detected, even if the email address belongs to the company domain.
Eligible Users
- All companies that have integrated Microsoft 365 with Josys can use this feature.
Reference: Deleting/Re-integrating Integrated Apps - It is not required to set Microsoft 365 as the User Master.
Detection Period
- Data for the past month from the time this feature is enabled (on or after July 21, 2024) will be retrieved.
- Thereafter, data will be accumulated and updated daily.
Feature Details
When a user performs a single sign-on login to an external SaaS tool or app using Entra ID, the information is accumulated in the Microsoft Entra admin center under Monitoring & health > Sign-in logs. The contents of that page will be reflected in Josys under the "Apps > Discovered Apps" menu. Reference: Discovered Apps Screen Description
Frequently Asked Questions
When are the logs updated?
They are updated early in the morning of every business day.
Why does the usage count seem low?
For access logs from Microsoft 365, the usage count represents the number of times login authorization was granted to the destination app. (It does not necessarily represent the total number of times the user logged in using their Microsoft 365 account.)
I have integrated multiple Microsoft 365 tenants. Will audit logs be retrieved from all integrated Microsoft 365 tenants?
Yes, logs will be retrieved from all integrated Microsoft 365 tenants.
Which licenses are required to use audit logs?
A Microsoft Entra ID P1 or P2 license is required.
Q. If there are multiple different tenants for the same application, can we distinguish and detect access for each? For example, what happens if our company uses two different Asana tenants?
A. The audit logs used for this feature only contain data on "who logged into what app and when via Entra ID," so it is not possible to distinguish between different tenants.