Cleaning up unused enterprise apps in Entra ID

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

solvingmicrosoft365.com

1 / 4

Cleaning up unused enterprise apps in Entra ID

How to find unused service principals in Entra ID — sign-in activity, credentials, assignments — remove them without breaking year-end integrations.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-unused-enterprise-apps-cleanup

Slide 1Download PNG

solvingmicrosoft365.com

2 / 4

How do I find enterprise apps nobody uses?

Use the sign-in activity report per service principal (Entra → Enterprise applications → Usage & insights, or the servicePrincipalSignInActivities Graph endpoint) to find apps with no sign-in in 90 days, then check cred…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-unused-enterprise-apps-cleanup

Slide 2Download PNG

solvingmicrosoft365.com

3 / 4

Is it safe to delete an unused enterprise application?

Usually, if it has no sign-ins for a long period, no active credentials, and an owner who agrees — but some integrations run quarterly or yearly. Disable it first (users can't sign in), wait a cycle, then delete. Delete…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-unused-enterprise-apps-cleanup

Slide 3Download PNG

solvingmicrosoft365.com

4 / 4

What is the difference between disabling and deleting an enterprise app?

Disabling (Enabled for users to sign in: No) blocks tokens being issued to it while keeping the object, consents, and assignments intact. Deleting removes the object and its grants; it is soft-deleted for 30 days and ca…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/entra-id-unused-enterprise-apps-cleanup

Slide 4Download PNG

Auto-generated from Cleaning up unused enterprise apps in Entra ID. This page is not indexed and isn't part of the guide itself.