With the primary admin account you are able to see the list of all Server Authentication Apps created in your environment and authorize them. There should be a way to see a list of all collaborators for that app to allow for proper user access audits.

There should also be a way to view ALL custom applications (server and user) within your environment so the admin team can properly track and audit these.