identity · severity info
Identity federation
Among domains with a Microsoft Entra tenant, the share federating sign-in to an external identity provider rather than using cloud-managed identity.
Measured every Saturday · last updated
How it is measured
NameSpaceType from the same cached lookup. Denominator: domains with a tenant.
Why it matters
Federation is a design choice, not a defect, but it changes where the real security controls live — and it is the population for the next metric.
The base rate
Two independent populations. The global, domain-anchored figure is unbiased; the company-anchored figures are built by matching company names to domains and skew toward more digitally-mature firms. Both are published, so the gap is visible.
By company size band
Company-anchored cuts (national registries with a size proxy), split by size band. Right-hand figure is the number measured.
Every segment
Pick one to see the citable answer for a company like yours, with its trend and methodology.
Slices below 100 measured members are withheld rather than shown with a wide interval — an absent country or issuer means too little data, not zero failures. Licensed CC BY 4.0. Machine-readable data per segment: append .json or .csv to its URL.