TL;DR: CFO-focused SaaS spend optimisation often depends on discovery, renewal, and usage visibility, because hidden subscriptions and duplicate tools can drain budgets and obscure who actually has access, according to Zluri. The identity lesson is that software spend management and access governance are now inseparable across human, NHI, and workload estates.
Editorial analysis by NHI Mgmt Group, based on content published by Zluri: “3 Strategies For CFOs To Optimize Software Spend”.
Key questions
Q: How should teams prevent SaaS renewals from turning into access drift?
A: Build renewal review into the identity lifecycle so every subscription is checked for active users, business ownership, and current entitlement scope before it rolls forward.
Q: Why does SaaS spend visibility matter to IAM teams?
A: Because the same lack of visibility that hides duplicate or unused subscriptions also hides stale access, orphaned app accounts, and unmanaged integrations.
Q: What breaks when organisations rely on manual SaaS spend tracking?
A: Manual tracking usually misses hidden subscriptions, stale renewals, and underused licenses, which means finance sees cost only after the control problem has already spread.
Practitioner guidance
- Map SaaS renewals to access reviews Require every material subscription renewal to include an entitlement check, so business owners confirm whether the app still supports active users, active departments, and current access scope.
- Inventory shadow IT through identity and finance signals Combine SSO, identity provider, finance, and expense data to surface applications that are paid for but outside the approved application inventory.
- Right-size licenses using observed usage patterns Use feature-level and department-level usage data to downgrade, reassign, or retire licenses that no longer match actual work patterns.
Bottom line: SaaS optimisation is no longer isolated from identity governance because hidden apps and unused licenses can indicate stale access as well as wasted spend.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
SaaS spend visibility has become a proxy for identity governance maturity: when an organisation cannot explain what it is paying for, it usually cannot explain who has access either. Hidden subscriptions, duplicate apps, and unused licenses are not just procurement inefficiencies. They are signals that entitlement ownership, review cadence, and offboarding discipline are fragmented.
A question worth separating out:
Q: How do finance and identity teams share accountability for SaaS control?
A: Finance owns the spend outcome, but identity teams own the access decision behind each subscription. The practical model is shared governance: finance validates cost, application owners validate need, and identity teams validate whether the associated access should continue, shrink, or be removed.
👉 Read our full editorial: SaaS spend control exposes hidden identity and access risk