A session monitoring decision system (114, 208, 818) comprising: at least one memory configured to store program logic for application access and monitoring; and at least one processor configured to access the memory and to execute the program logic, the program logic comprising: communication logic configured to: receive first information from an identity provider (108, 608, 816), IdP, that is within an identity and access management, IAM, system (104, 814), the first information including (a) a response to an authentication request that was sent to the IdP on behalf of a user who is attempting to access an application, the response granting access to the application for the user, and (b) data related to one or more of the user, a user device via which the user is attempting to establish a session of the application, or the application; session monitoring decision logic configured to: determine, based at least on the data, whether a session that is requested to be established between the user device and the application on behalf of the user should be monitored; and in response to determining that the session should be monitored, provide second information through the communication logic to a proxy application service (106, 402) via which the session that is established between the user device and the application is carried out, the proxy application service being configured to monitor the session, the second information comprising at least the response to the authentication request. at least one memory configured to store program logic for application access and monitoring; and at least one processor configured to access the memory and to execute the program logic, the program logic comprising: communication logic configured to: receive first information from an identity provider (108, 608, 816), IdP, that is within an identity and access management, IAM, system (104, 814), the first information including (a) a response to an authentication request that was sent to the IdP on behalf of a user who is attempting to access an application, the response granting access to the application for the user, and (b) data related to one or more of the user, a user device via which the user is attempting to establish a session of the application, or the application; session monitoring decision logic configured to: determine, based at least on the data, whether a session that is requested to be established between the user device and the application on behalf of the user should be monitored; and in response to determining that the session should be monitored, provide second information through the communication logic to a proxy application service (106, 402) via which the session that is established between the user device and the application is carried out, the proxy application service being configured to monitor the session, the second information comprising at least the response to the authentication request. communication logic configured to: receive first information from an identity provider (108, 608, 816), IdP, that is within an identity and access management, IAM, system (104, 814), the first information including (a) a response to an authentication request that was sent to the IdP on behalf of a user who is attempting to access an application, the response granting access to the application for the user, and (b) data related to one or more of the user, a user device via which the user is attempting to establish a session of the application, or the application; session monitoring decision logic configured to: determine, based at least on the data, whether a session that is requested to be established between the user device and the application on behalf of the user should be monitored; and in response to determining that the session should be monitored, provide second information through the communication logic to a proxy application service (106, 402) via which the session that is established between the user device and the application is carried out, the proxy application service being configured to monitor the session, the second information comprising at least the response to the authentication request. determine, based at least on the data, whether a session that is requested to be established between the user device and the application on behalf of the user should be monitored; and in response to determining that the session should be monitored, provide second information through the communication logic to a proxy application service (106, 402) via which the session that is established between the user device and the application is carried out, the proxy application service being configured to monitor the session, the second information comprising at least the response to the authentication request.