u/Ill_Noticevernita805

We have a few internal apps stuck in identity governance onboarding for months. Docs are incomplete, app owners are busy, and every review turns into another round of questions about auth flows and permissions.

I've been looking at whether Orchid can help discover that stuff before it gets pushed into IAM or IGA. Anyone used it during onboarding? This process is getting exhausting. :/

We found a few active accounts in apps that arent tied to our IdP or HR offboarding flow. Some are old vendor tools, some are custom internal apps, and nobody seems sure who owns the data anymore.

Our IAM team is doing exports and spreadsheets right now, which is getting painful fast. I know we need an inventory of the disconnected apps and some way to keep checking for accounts with no active owner, but curious how other teams handle this in practice. Any hints?

Our identity governance setup is only showing applications that are connected to the IdP, so we have a pretty clean dashboard that doesnt match reality.

People are using tools through direct logins, OAuth connections, browser sign ups, and a few apps paid for by departments. Those accounts dont show up in access reviews, and offboarding them is mostly someone remembering to check a spreadsheet.

I guess the main issue is that governance starts after an app is onboarded, but we have no good way to discover the apps before that point. We have IdP logs and finance data, but neither gives us the full picture. Has anyone found a sensible way to bring unmanaged applications into IAM without making every team fill out another inventory form?