Topic starter
10/06/2026 11:57 pm
TL;DR: Unused SaaS licenses are framed as both budget waste and access risk in 1Password’s analysis, which argues that decentralised app buying, black-box usage data, and manual renewal checks leave IT unable to validate who still needs access. The real issue is that license governance and deprovisioning are now the same control problem, not separate finance and security tasks.
Editorial analysis by NHI Mgmt Group, based on content published by 1Password: “Why SaaS license waste is a cost and security problem”.
Key questions
Q: What breaks when SaaS renewals are handled without access recertification?
A: Renewal decisions become guesses instead of governance checks.
Q: Why do unused SaaS licences create identity risk as well as cost waste?
A: Unused licences often indicate that apps are still licensed after the people or teams that justified them have changed.
Q: How can teams tell whether SaaS governance is actually working?
A: Look for evidence that discovered applications can be assigned an owner, tied to an access policy, and removed through an enforced workflow.
Practitioner guidance
- Map SaaS discovery to identity records Create a single inventory that ties discovered applications to identity provider accounts, last-login evidence, and entitlement ownership so dormant access is visible before renewal decisions.
- Tie renewal reviews to access recertification Require business owners to confirm both license need and account need at renewal time, so contracts are not renewed on stale utilisation assumptions.
- Automate license reclamation on leaver events Trigger removal or downgrade workflows when a user leaves, changes role, or stops using a tool, and verify that the account state matches the entitlement state.
Bottom line: Unused SaaS licenses expose a governance failure that combines wasted spend with lingering account access.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 1 day ago by NHI Mgmt Group
12/06/2026 6:25 am
License waste is really entitlement drift: Once an organisation cannot prove whether a user still needs an application, the renewal problem and the access problem collapse into the same governance failure. The article is describing a state where the financial record and the identity record have diverged. Practitioners should treat that divergence as a lifecycle control issue, not an optimisation exercise.
A few things that frame the scale:
- Only 5.7% of organisations have full visibility into their service accounts, according to the Ultimate Guide to NHIs.
A question worth separating out:
Q: What is the difference between license reclamation and deprovisioning?
A: Deprovisioning removes or reduces a user’s access to an application, while license reclamation removes the paid seat from active use or makes it available for reassignment. Both need to be linked. If they are handled separately, organisations can still pay for access that no longer has a business need.
👉 Read our full editorial: SaaS license waste exposes unmanaged access and renewal blind spots
This post was modified 1 day ago by NHI Mgmt Group