Why this record counts
Every consent click creates this record, whether IT approved the app or not. That makes it the fastest free AI inventory a security team can pull. Most teams watch laptops and browsers for shadow AI. Almost nobody checks the identity provider, and that screen is already paid for.
Where teams get it wrong
Two mistakes show up again and again. The first is trusting the list too much. A tool that connects straight into a SaaS login screen leaves no trace in the identity provider. The second is revoking grants without telling anyone. Tell the person first, so a blunt prune turns into a real filter.
One example
Todd Inskeep, an IANS Faculty member, described a company that counted 150 AI agents on its own list. CrowdStrike's services team found more than 500 actually running. The consent grant screen is where that difference starts to close.