Looking for advice on how to accomplish the following:

• Identify all SaaS Apps that our users are logging into, and identify the user groups (departments, OUs, etc.) that are logging in for each SaaS App
• Key information that we are looking for on the App is the following:
  • App Name
  • URL
  • URL Category
  • CCI Available - Is the application in CCI?

Here is what I tried that was inefficient, lack of quality data, etc.:

• I tried querying web_tx for URI containing /Login/
• I then queried App Names against CCI via API
• Lastly, I manually looked up Apps in CCI to try and find users with traffic associated to the app (the issue here is that a browse to the site would show up and not indicative of a user login)

Any advice and/or direction would be appreciated.

(Was not sure the appropriate category to put this question into - thus chose Additional Discussions)