How is the Enterprise Application List in Azure created? I notice a number of apps on my devcies do not appear

Question

I am looking at the Enterprise Applications report in Azure and a number of applications that are installed on devices do not appear, why is that and how do I get them to?

Answer 1

Hello Simon Mair,

Thanks for posting your question in the Microsoft Q&A forum

If you notice that some applications installed on your devices do not appear in the Enterprise Applications report, it is likely because:

• Those apps are not registered or integrated as enterprise applications in your Azure AD tenant.
• Some apps may be hidden from users if the app visibility is set to "No," meaning they won't show up in portals or reports unless explicitly assigned or queried with specific parameters
• Apps without user assignments might not be listed in certain filtered reports.
• Some apps might be registered in other tenants or are personal apps not managed by your Azure AD tenant

---

Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful

Answer 2

Hello @Simon Mair,

In the Entra ID Enterprise Applications report, only applications that are integrated with Azure AD for authentication and have been accessed by users through Entra ID will normally appear. Locally installed applications on devices—such as desktop apps or legacy software that do not use Entra ID for authentication will not be listed. The Enterprise Applications section specifically displays apps that have an active service principal in your tenant, typically created when an app is added from the Entra ID App Gallery or registered manually, and becomes visible only after a user signs in via Entra ID. If it is only installed on devices without Entra ID integration, it will not appear in this report.

Additionally, default filters in the portal may hide certain applications, such as Microsoft apps or inactive ones, unless the filter settings are adjusted to display all applications. To ensure an application appears, it must authenticate through Entra ID, be registered or integrated in the tenant, and have user sign-in activity. If you're trying to track what software is installed on devices rather than cloud-based access, that information can be retrieved from Intune or Microsoft Defender for Endpoint.

Enterprise Applications focuses on identity-aware cloud access, not device-level software inventory, and the appearance of an app in this list depends on Entra ID authentication and activity.

If you have any further question or query, please do let us know.