I want to remove inactive applications from Azure AD

Question

I am working to cleanup all inactive applications from our Azure AD tenant. I found multiple applications registered as display name "Workflow" with NO sign-in logs (Interactive /non-interactive/ Service Principal /Managed Identity) and no API permissions. Seems it is registered automatically.

How these apps are getting registered and what is the purpose of these apps. Is it safe to remove these apps.

Any help on this would be highly appreciated.

Thank you.

Answer 1

Hi @Anonymous ,

Thanks for reaching out.

There are multiple ways to register the application automatically in Azure Active Directory. There might be certain workflow, logic apps or automation tools that were used in your organization. These tools may have registered these applications to help automate certain tasks and integrate with other systems.

You can check the audit logs in Azure active directory to filter 'Workflow' application in target field to check from where the request got initiated to register the application and if there is any action on that application in past few days.

If there is no action on those applications in the last few days, then you can delete them. Make sure to check those applications are not needed for any critical business processes.

When you delete the application, it can be restored along with its properties within 30 days. After deleting it, you can monitor any potential impact on your organization and if required you can restore those applications.

Reference: https://learn.microsoft.com/en-us/azure/active-directory/develop/howto-restore-app

Hope this will help.

Thanks,

Shweta

---

Please remember to "Accept Answer" if answer helped you.