TP: If you can verify that the OAuth application is delivered from an unknown source, and redirects to a suspicious URL, then a true beneficial is indicated. FP: If just after investigation, you'll be able to affirm the app contains a respectable enterprise use within the Corporation.