This article provides instructions for identifying and exporting applications in Okta Identity Security Posture Management (ISPM) that have not had any activity in the last 3 months. This helps in maintaining a clean security posture by identifying potentially unnecessary access points.

• Reporting
• Identity Security Posture Management (ISPM) 
• Identifying Unused Applications
• Okta Classic Engine
• Okta Identity Engine (OIE)

Use one of the following methods to identify inactive applications:

Export and Filter Bulk App Access Data

Use this method if a comprehensive list of all inactive applications is needed for reporting or auditing.

1. Navigate to Inventory > Applications & Resources > App access.
   • NOTE: This was recently moved from the legacy Inventory > Apps path.
2. Click the Export CSV button to download the full access report.
3. Open the CSV file in the preferred spreadsheet tool (for example, Excel, Google Sheets) and filter the Last activity column to isolate entries older than 90 days.

Review Specific Applications

To verify a handful of specific apps, use the manual lookup:

1. Navigate to Inventory > Applications & Resources > Apps.
2. Select the specific application from the list.
3. Review the Last activity field in the application details view.

Automated "Unused Workload" Detections

ISPM includes built-in automation to flag long-term inactivity:

• Threshold: If an OAuth token, Service Principal, or custom integration remains unused for 6 months, ISPM triggers a detection.
• Action: These will appear as Unused Workloads Apps issues under the Issues tab for immediate remediation.