Flexera One’s SaaS Management includes new insights in the Users tab (SaaS > Managed SaaS Applications > Users) for analyzing Microsoft 365 cost analysis and downgrading Microsoft 365 user licenses. These insights are further described in the following table.
Important: Consider the following:
- For existing Microsoft 365 integrations with SaaS Management, you need to reauthorize the integration by granting the additional UserAuthenticationMethod.Read.All permission to retrieve the multifactor authentication details for the Users tab.
- When the AuditLog.Read.All permission is not granted for SaaS Management’s Microsoft 365 Certificate Based Authentication and Microsoft 365 Client Credentials integrations:
- The Application Roster integration task will not fail, rather it will skip the Sign in to M365 Domain and retrieve the remaining Application Roster fields.
- The Application Access integration task will not fail, rather it will skip the activities for the Dynamics 365, Power BI, Project, and Visio applications and retrieve the activities for the remaining Microsoft 365 applications.
| Microsoft 365 Users Tab Insight |
Description |
Block Credentials
|
Determines whether users’ Microsoft 365 credentials are blocked are not.
Users with blocked credentials cannot access their Microsoft 365 account, which limits their account activity. Limited account activity due to blocked credentials may inaccurately reflect license downgrading or license reclamation opportunities.
|
| Sign in to M365 Domain |
Displays a timestamp for the last time users signed in to their Microsoft 365 account and reports the last activity within user accounts.
Infrequent user sign ins may provide license downgrading or license reclamation opportunities.
|
| Last Used M365 Application |
Indicates the Microsoft 365 application that was last used by the user. This application is based on the user activities retrieved by the Microsoft 365 integration with SaaS Management.
If users are not using a more expensive application within a Microsoft 365 license, there may be opportunities to downgrade user licenses.
|
|
Is MFA Turned On |
Confirms whether users have turned on multifactor authentication for their Microsoft 365 account.
Previously, SaaS Management considered users signing in with multifactor authentication as never active and potential candidates for having their Microsoft 365 licenses reclaimed.
Users signing in to their Microsoft 365 account with multifactor authentication or single sign-on (SSO) should not have their licenses reclaimed.
|
Flexera One Help Resources
For related Flexera One SaaS Management integration instructions, see:
