The apps your people actually sign in to
Zonitix reads sign-in activity from the identity provider you already connected and shows which SaaS apps are in use, by whom, and which accounts have gone quiet. With Finance, included from Advanced, the same counts are set against your invoices to show what the idle seats cost.
Who uses what, and who stopped.
One table of every app your connected identity provider has seen a sign-in for in the last 30 days.
- Per app: how many people have it, how many were active, how many accounts are dormant, and when it was last used.
- Open a row to see the people behind the numbers, each marked active or dormant.
- Usage by someone who is not in your directory is flagged and sorted to the top — the usual sign of an app adopted outside IT.
- An app seen by both providers is marked as confirmed by two sources.
- Dormant accounts come from Okta, which knows who is assigned an app but has not signed in. Google Workspace reports sign-ins only, so everyone it reports is active.
On this plan you see counts and people, not money.
Access Governance
SaaS Discovery
Apps discovered
5
2 sources
Apps with unmatched accounts
2
not in your directory
Dormant accounts
29
no sign-in in 30 days
Active users
110
seen in the last 30 days
Discovered applications
5 apps · Okta + Google Workspace
What the idle seats cost, where an invoice says so.
Finance already reads your invoices. When one carries a seat count, it can be set against the people actually using the app.
- Per app: spend, seats, cost per seat, active users and utilisation, annual budget and renewal date.
- Idle seats are flagged on the row, with the estimated spend they represent.
- A total by owning department shows where the idle spend sits.
- Give each app an owner (one at a time or in bulk), a renewal date and an annual budget.
- It reports; it does not cancel anything. Removing a licence happens in the app itself.
The figure is an estimate from the invoices you have uploaded, not a quote from the vendor.
Finance
SaaS Spend
SaaS Spend
$3,355
4 active apps
Over budget
0
apps over annual budget
Renewing ≤30 days
0
$0 at risk
Unused apps (90d+)
0
no recent invoice
Reclaimable by department · $696 total
Estimated spend on idle licences, grouped by the owning department. Reporting only.
Four steps, two of them automatic.
1 · Connect
Connect Okta or Google Workspace under Identity Hooks and grant the usage-read permission. Those are the two sources discovery reads today.
2 · It runs itself
After each directory sync, discovery reads the last 30 days of sign-ins from that provider and replaces its picture of your apps. There is nothing to schedule.
3 · See usage
Access Governance → SaaS Discovery lists every app those sign-ins reveal, with who uses it, who has stopped, and when it was last used.
4 · See the money
With Finance, upload that vendor’s invoice. Where it carries a seat count, Finance → SaaS Spend sets paid seats against active users and prices the idle ones.
What it will not tell you, so you are not surprised.
Four limits worth knowing before you rely on it.
Only what your IdP sees
An app nobody signs in to through Okta or Google Workspace will not appear. It is not a network scanner, a browser extension or an endpoint agent, and it does not claim to find every app.
Read-only
Discovery shows; it does not act. It never creates or changes a directory user, revokes an account or cancels a licence — you do that in the app itself or through an offboarding workflow. It has its own view-only permission.
Money needs a match
A reclaimable figure appears only for an app that has both an invoice with a seat count and discovered usage, under a vendor name the two agree on. Without all three the cell stays empty rather than guessing.
What “Unmatched accounts” means
The product marks an app “Unmatched accounts” when at least one account in it is not a user in your directory: a contractor, a personal address or someone who has left. It is something to look at, not a verdict on the app. Nobody approves or rejects an app on this page.
Discovery rides the same directory connection as the AlignSync engine, and is part of that entitlement rather than a separate add-on. The invoice side is described on the Finance page.
See it running on a live instance.
A 30-minute walkthrough on a live Zonitix instance — no slides, no commitment.
In the walkthrough
The usage table
Every app seen in the last 30 days: who has it, who was active, who went quiet.
The people behind a row
Each marked active or dormant.
Apps adopted outside IT
Usage by someone who is not in your directory, sorted to the top.
What idle seats cost
With Finance, an estimate from the invoices you have uploaded.