Expresiv application in Salesforce user login history
cleaning up our integration user, and found a large number of logins from a mysterious application named “Expresiv” with an AWS IP address.
a few posts on salesforce forums over the years, mostly very old
i had a hunch, that turned out to be correct, that in my case these came from old formassembly forms that were connected via basic auth (un / pwd / token) instead of the new (c 2014) oauth option.
so now i gotta track these down and update them bc basic auth is no bueno.