identity · severity info

Identity federation

Among domains with a Microsoft Entra tenant, the share federating sign-in to an external identity provider rather than using cloud-managed identity.

Measured every Saturday · last updated

How it is measured

NameSpaceType from the same cached lookup. Denominator: domains with a tenant.

Why it matters

Federation is a design choice, not a defect, but it changes where the real security controls live — and it is the population for the next metric.

The base rate

Two independent populations. The global, domain-anchored figure is unbiased; the company-anchored figures are built by matching company names to domains and skew toward more digitally-mature firms. Both are published, so the gap is visible.

Global (all domains) n=437
cloud-managed: 93.82%federated: 6.18%
France companies n=321
cloud-managed: 95.33%federated: 4.67%
UK companies n=904
cloud-managed: 89.27%federated: 10.73%
Norway companies n=600
cloud-managed: 96.5%federated: 3.5%
cloud-managed · 96.5%federated · 3.5%

By company size band

Company-anchored cuts (national registries with a size proxy), split by size band. Right-hand figure is the number measured.

UK
smalln=318
cloud-managed: 89.94%federated: 10.06%
318
medium/largen=452
cloud-managed: 94.03%federated: 5.97%
452
Norway
micron=129
cloud-managed: 97.67%federated: 2.33%
129
smalln=156
cloud-managed: 97.44%federated: 2.56%
156
mediumn=189
cloud-managed: 97.35%federated: 2.65%
189
largen=126
cloud-managed: 92.86%federated: 7.14%
126

Every segment

Pick one to see the citable answer for a company like yours, with its trend and methodology.

Slices below 100 measured members are withheld rather than shown with a wide interval — an absent country or issuer means too little data, not zero failures. Licensed CC BY 4.0. Machine-readable data per segment: append .json or .csv to its URL.