Report by FIDO Alliance & HID
The State of Physical and Digital Identity in the Enterprise
Key Findings
58% of enterprises say managing digital identity has become more complex over the past two years.
65% of organizations report high or expert technical familiarity with passkeys.
35% of organizations experience delays or failures revoking physical or logical access within 24 hours when an employee leaves, with such events occurring in the past two years.
48% of enterprises have consolidated budget control for physical and digital identity.
13% of organizations have deployed passkeys at scale.
59% of enterprises manage three or more distinct credential and authentication systems.
43% of Public Sector organizations experience access revocation failures.
94% of organizations claim they can revoke all physical and logical access within 24 hours of an employee leaving.
70% of organizations experience at least one identity-related security incident.
34% of Finance organizations operate fully separate reporting structures for physical and digital identity despite stringent regulatory access-control obligations.
45% of organizations cite reducing phishing and credential-based breach risk as the leading driver for moving to passwordless authentication.
50% of enterprises have unified reporting ownership for physical and digital identity.
20% of Public Sector credential revocations are performed manually, which is more than double the manual revocation rate in the IT/Technology sector.
93% of organizations are at some stage of passkey adoption.
44% of organizations cite reducing IT costs from password resets and help desk load as a key driver for moving to passwordless authentication.