Executive Summary
Regulated, complex, and dynamic organizations must be able to effectively ensure their human and nonhuman identities have appropriate access to necessary data. In upgrading their legacy identity management setups, they seek a flexible, secure, and comprehensive solution that governs every identity, human, agent, or machine, and enforces access in real time.1 Omada’s Identity Cloud is an identity security platform that can enable security and identity teams to decide and control what each one can do, and prove it, on infrastructure they choose. It can increase identity visibility, accelerate employee onboarding, deliver IT efficiencies, and improve internal controls, while potentially reducing the risk of compromised credentials and audit failures.
Omada Identity Cloud provides an enterprise-grade, mature SaaS offering with a comprehensive set of identity governance and administration (IGA) features. The solution is configurable and enables the support of specific requirements as well as legacy systems and interfaces. This ensures backward compatibility and an upgrade path for ease of maintenance and operation.
Omada commissioned Forrester Consulting to conduct a Total Economic Impact™ (TEI) study and examine the potential return on investment (ROI) enterprises may realize by deploying its Cloud Identity solution.2 The purpose of this study is to provide readers with a framework to evaluate the potential financial impact of Omada’s cloud-based IGA solution on their organizations.
To better understand the benefits, costs, and risks associated with this investment, Forrester interviewed four decision-makers with experience using Omada Identity Cloud. For the purposes of this study, Forrester aggregated the experiences of the interviewees and combined the results into a single composite organization, which is a global organization with 10,000 employees and $8 billion in annual revenue.
Interviewees said that before using Omada Identity Cloud, their organizations had complex identity structures that could not be modeled on legacy systems. They were either manually managing identity and access governance or using a combination of on-premises and homegrown tools that required some custom coding and were therefore costly to maintain. A lack of governance and transparency with respect to roles and assignments resulted in significant risk exposure. Furthermore, these legacy systems lacked automation capabilities, resulting in high error rates and additional manual work.
After the investment in Omada Identity Cloud, the interviewees gained significant efficiencies by automating identity and access governance workflows. Key results from the investment include accelerated new employee onboarding and efficiency improvements such as employee onboarding and offboarding, account and identity management, application access monitoring, and auditing and compliance. Interviewees also reported reduced compliance and access risks, improved identity and access governance, and increased potential for AI agent access management.
Key Findings
Quantified benefits. Three-year, risk-adjusted present value (PV) quantified benefits for the composite organization include:
-
Faster employee onboarding. Before the Omada investment, it took nine days on average for the composite to complete all onboarding formalities for newly hired employees or contractors, including the assignment of applications accesses, at an average of 40 per new employee. Following the investment, new employees and contractors are fully provisioned in less than two days. Assuming 600 employees or contractors are onboarded each year with an average annual salary of $85,000, the reduced onboarding time delivers value of $2.2 million over three years.
-
Efficiency gains through automation. In its previous environment, the composite lacked automation of the internal systems that managed all the processes for employees joining, moving, and leaving. This resulted not only in significant manual effort and process errors but also exposed the organization to security risks. Omada Cloud Identity’s automated and unified provisioning capabilities increase visibility of user access and activity and risk identification, and the composite can better manage the entire identity lifecycle, thereby freeing up administrator time while reducing the possibility of errors, breaches, and reputational risk. This resulted in a three-year benefit of $653,000.
-
Improved identity and account management efficiency. The composite’s identity administrators previously had to manage multiple user accounts and perform routine maintenance tasks such as account creation, role management, policy checking, active directory (AD) integration, and password resets. The solution enables the composite to improve account management efficiency and reduce its initial account setup effort by nearly 90%. This represents $530,000 in savings over three years.
-
Improved application access monitoring. The manual process of reviewing and reporting application user access privileges took each identity administrator at the composite an average of 25 hours each month to complete. Omada Identity Cloud enables it to automate review processes and self-service access requests. The resulting reduction in IT tickets and improved efficiency in application access management results in savings totaling $272,000.
-
Reduction in audit and compliance effort. Omada provides the composite with a comprehensive compliance overview across connected systems and applications. This, supported by automated cross-system reporting and analytics, helps teams save 90% effort in audit and compliance preparation and reporting. As a result, the composite organization saves more than $177,000 over three years.
Unquantified benefits. Benefits that provide value for the composite organization but are not quantified for this study include:
-
Improved security posture and reduced risks. A centralized identity governance platform helps the composite materially reduce its attack surface by ensuring users have only the access they need, promptly removing unnecessary and outdated permissions, and ensuring they are regularly checked and updated.
-
Secure and flexible access for temporary and mobile workers. Omada Identity Cloud enables the composite to change permissions temporarily in a time-sensitive environment, allowing just-in-time access to assigned permissions and providing greater operational flexibility while preserving the integrity of its security and governance model.
Costs. Three-year, risk-adjusted PV costs for the composite organization include:
-
Subscription cost. Subscription fees vary and depend on the number of users and licensed applications. Based on the size and structure of the composite, Forrester estimates an annual subscription fee of $300,000 for Omada’s cloud-based platform, resulting in a three-year, risk-adjusted cost of $783,000.
-
Implementation and maintenance effort. The implementation costs include a deployment package and six months of effort for a team of four internal FTEs. Ongoing costs include six FTEs who spend the equivalent of 10 days a year on training and maintenance, resulting in a three-year, risk-adjusted total of $505,000.
The financial analysis that is based on the interviews found that a composite organization experiences benefits of $3.8 million over three years versus costs of $1.3 million, adding up to a net present value (NPV) of $2.5 million and an ROI of 196%.
Reduction in time to onboard new employees
78%
Key Statistics
196%
Return on investment (ROI)
$3.8M
Benefits PV
$2.5M
Net present value (NPV)
<6 months
Payback
Benefits (Three-Year)
The Omada Identity Cloud Customer Journey
Drivers leading to the Omada Identity Cloud investment
Interviews
| Role | Industry | Headquarters | Total Employees |
|---|---|---|---|
| Head of IT foundational platforms | Manufacturing | Germany | 22,000 |
| Technical operations supervisor | Energy and utilities | The Netherlands | 5,500 |
| Service manager for identify and access management (IAM) | Retail | Sweden | 4,800 |
| Manager, security team | Insurance | Denmark | 2,050 |
Key Challenges
Before implementing Omada Identity Cloud, interviewees’ organizations typically relied on fragmented IAM processes supported by legacy on-premises systems, manual tasks, and internally developed tools. Core activities — including user provisioning, role assignment, employee onboarding, access reviews, and segregation of duties management — were typically performed manually or across multiple disconnected platforms.
This fragmented approach resulted in slow, labor-intensive processes that demanded significant administrative effort while increasing the likelihood of errors and inconsistencies. The lack of a unified identity governance system also limited visibility and control over user access, exposing organizations to heightened security (because access rights were not regularly checked), noncompliance malfeasance and insider risks, unsuccessful audit outcomes, and potential regulatory penalties.
Interviewees noted how their organizations struggled with common challenges, including:
-
Slow joiner, mover, and leaver (JML) processes. Employee lifecycle management relied heavily on manual processes that delayed the provisioning and removal of user access. New employees often waited extended periods before receiving the access and permissions required to perform their roles effectively; similarly, changes in responsibilities resulted in delayed updates to access rights. Employee departures required IT teams to manually revoke access across multiple systems, increasing the risk that dormant or orphaned accounts remained active after individuals had left the organization. These inefficient processes reduced workforce productivity, placed additional pressure on IT support teams, and increased organizations’ overall security exposure.
-
Lack of central identity management. The interviewees’ organizations operated a fragmented identity landscape where user accounts, roles, and entitlements were managed independently across multiple applications, directories, and legacy identity platforms. Employees frequently had multiple digital identities, inconsistent access rights, and duplicate accounts across different systems. IT teams had to maintain several disconnected tools and manually reconcile identity information, making it difficult to establish a single source of truth.
-
Compliance and regulatory challenges. Interviewees reported that their legacy identity management environment struggled to meet increasingly stringent regulatory and audit requirements. Demonstrating compliance required significant manual effort to collect evidence, produce reports, and coordinate activities across IT, security, and business teams. Access certifications, segregation of duties reviews, and audit requests became lengthy and resource-intensive exercises, while the lack of automated policy enforcement increased the likelihood of control failures and compliance violations.
-
Inefficient application provisioning and access reviews. Application provisioning and access governance were largely manual and depended on email requests, spreadsheets, and service desk tickets to process access changes. Multiple approval steps and manual workflows resulted in lengthy turnaround times. Periodic access reviews were similarly cumbersome, requiring managers to review extensive spreadsheets with limited business context, making it difficult to determine whether access remained justified. These inefficient processes created approval bottlenecks, reduced operational agility, and increased the likelihood that excessive or outdated access privileges remained in place.
Solution Requirements
The interviewees searched for a solution that could:
-
Provide a consolidated and effective identity and access governance solution.
-
Offer a cloud-based, configurable out-of-the-box solution to minimize the amount of customization required.
-
Streamline user access provisioning and the user access review process.
-
Manage the entire lifecycle of the identity management process, from the time an employee joins until they leave.
-
Implement separation of duties and policies and improve identity governance.
Composite Organization
Based on the interviews, Forrester constructed a TEI framework, a composite company, and an ROI analysis that illustrates the areas financially affected. The composite organization is representative of the interviewees’ organizations, and it is used to present the aggregate financial analysis in the next section. The composite organization has the following characteristics:
-
Description of composite. The composite is global, multibillion-dollar company with 10,000 employees that generates $8 billion in annual revenue. Before the Omada investment, it used a mix of tools, internally built workflows, and manual processes to manage identities and accesses.
-
Deployment characteristics. The composite organization employs a six-member identity and access governance team that manages all identity administration and user provisioning, and it is responsible for managing around 13,500 identities. These identities are split into 7,500 Regular, 2,500 Lite (contractors, freelancers, and other nonpermanent employees), and 3,000 nonhuman identities (NHIs).3 The composite begins using the SaaS-based identity governance solution in Year 1, following a six-month implementation period. It also purchased the optional accelerator package to support the initial deployment and implementation.
KEY ASSUMPTIONS
-
$8 billion revenue
-
10,000 employees
-
6 identity administrators
-
13,500 identities managed in total
- 7,500 Regular
- 2,500 Lite (contractors, freelancers, and other nonpermanent employees)
- 3,000 NHIs
Analysis Of Benefits
Quantified benefit data as applied to the composite
Total Benefits
| Ref. | Benefit | Year 1 | Year 2 | Year 3 | Total | Present Value |
|---|---|---|---|---|---|---|
| Atr | Faster employee onboarding | $875,337 | $875,337 | $875,337 | $2,626,010 | $2,176,832 |
| Btr | Efficiency gains through automation | $262,656 | $262,656 | $262,656 | $787,968 | $653,187 |
| Ctr | Improved identity and account management efficiency | $229,827 | $203,273 | $203,273 | $636,372 | $529,649 |
| Dtr | Improved application access monitoring | $109,269 | $109,269 | $109,269 | $327,807 | $271,736 |
| Etr | Reduction in audit and compliance effort | $71,031 | $71,031 | $71,031 | $213,092 | $176,643 |
| Total benefits (risk-adjusted) | $1,548,119 | $1,521,565 | $1,521,565 | $4,591,249 | $3,808,047 |
Faster Employee Onboarding
Evidence and data. The largest benefit across most of the interviewees’ organizations was the faster onboarding of new employees. By provisioning new employees faster and providing them with the access rights they require, they are able to be productive and start contributing sooner and also have a better experience.
-
The security team manager at an insurance organization said, “The time to onboard new joiners, approvals, etc. has significantly reduced.”
-
The head of IT foundational platforms at a manufacturer shared, “Employee lifecycle management is one of the key features, enabling faster provisioning of access rights.”
-
For new employee onboarding and leaver offboarding, there were a lot of manual tasks and processes that were required, typically by managers and HR team members. Interviewees said that Omada automated many of these tasks, enabling these processes to be much faster and new employees to be productive sooner.
-
On average, interviewees said it took nine days to onboard a new employee, which decreased seven days (or 78%) following the investment in the Omada solution.
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization:
-
The composite onboards 50 new employees or contractors each month, who each require access to 40 applications on average.
-
The average fully burdened annual salary for an onboarded employee or contractor is $85,000.
-
The automation provided by Omada Identity Cloud accelerates the onboarding process and saves seven working days per new employee onboarded.
-
A productivity capture rate of 75% was applied; it is not always the case that all time freed up is put back to productive use.
Risks. The scale of this benefit may vary by organization based on:
-
The number of employees onboarded per month, which can vary based on the size, industry, and labor needs of an organization.
-
The expected efficiencies, which can differ based on the level of automation provided in the legacy environment.
-
The average salary for an onboarded user, which can vary depending on geographical location, industry, and skill level of employees or contractors hired.
Results. To account for these risks, Forrester adjusted this benefit downward by 15%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $2.2 million.
7 days
Reduction in onboarding time for new employees
Faster Employee Onboarding
| Ref. | Metric | Source | Year 1 | Year 2 | Year 3 | |
|---|---|---|---|---|---|---|
| A1 | FTEs or contractors onboarded per month | Interviews | 50 | 50 | 50 | |
| A2 | Average fully burdened annual salary for an onboarded FTE or contractor | Composite | $85,000 | $85,000 | $85,000 | |
| A3 | Baseline onboarding time | Interviews | 9 | 9 | 9 | |
| A4 | Reduction in onboarding time | Interviews | 77.8% | 77.8% | 77.8% | |
| A5 | Onboarding time saved (days) | Interviews | 7 | 7 | 7 | |
| A6 | Productivity capture | TEI methodology | 75% | 75% | 75% | |
| At | Faster Employee Onboarding | A1*A2*A5*A6*12/260 | $1,029,808 | $1,029,808 | $1,029,808 | |
| Risk adjustment | ↓15% | |||||
| Atr | Faster employee onboarding (risk-adjusted) | $875,337 | $875,337 | $875,337 | ||
| Three-year total: $2,626,010 | Three-year present value: $2,176,832 | |||||
Efficiency Gains Through Automation
Evidence and data. Interviewees’ organizations shared that onboarding and offboarding JLMs was done more efficiently thanks to workflow automation. Internal staff saved up to 90% of the time that was required to onboard and offboard within the legacy environment.
-
In their previous environments, interviewees said they relied largely on manual systems and spreadsheets to track all the onboarding and offboarding activities for all JMLs.
-
There were multiple touchpoints and roles within their organizations that were required to complete certain actions in a particular sequence for every new JML.
-
After deploying Omada’s IGA solution, interviewees said they could create custom workflows to manage the entire identity lifecycle and access provisioning, thereby reducing manual intervention and the possibility of errors or omissions.
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization
-
The composite has 50 new joiners and 20 leavers each month.
-
Ten FTEs each need to complete 1 hour of activity for each new joiner.
-
Three FTEs are each required to complete 3 hours of activity for each leaver.
-
The average fully burdened hourly rate for internal staff involved in onboarding and offboarding activities is $40.
Risks. The scale of this benefit may vary by organization based on:
-
The number of joiners or leavers per month, which can vary based on the size, industry, and labor needs of an organization.
-
The expected time savings, which can differ based on the level of automation and the number of touchpoints in the authorization workflow.
-
The average salary for an internal staff member involved in onboarding and offboarding activities.
Results. To account for these risks, Forrester adjusted this benefit downward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $653,000.
90%
New staff onboarding time saved through automation
Efficiency Gains Through Automation
| Ref. | Metric | Source | Year 1 | Year 2 | Year 3 | |
|---|---|---|---|---|---|---|
| B1 | Joiners onboarded per month | Composite | 50 | 50 | 50 | |
| B2 | Internal staff involved in onboarding | Interviews | 10 | 10 | 10 | |
| B3 | Onboarding time per new joiner (hours) | Interviews | 1 | 1 | 1 | |
| B4 | Onboarding time saved through automation | Interviews | 90% | 90% | 90% | |
| B5 | Onboarding time saved (hours) | B1*B2*B3*B4*12 | 5,400 | 5,400 | 5,400 | |
| B6 | Total leavers per month | Composite | 20 | 20 | 20 | |
| B7 | Internal staff involved in offboarding | Interviews | 3 | 3 | 3 | |
| B8 | Offboarding time per leaver (hours) | Interviews | 3 | 3 | 3 | |
| B9 | Offboarding time saved through automation | Interviews | 70% | 70% | 70% | |
| B10 | Offboarding time saved | B6*B7*B8*B9*12 | 1,512 | 1,512 | 1,512 | |
| B11 | Average fully burdened hourly rate for internal staff involved in onboarding and offboarding | Composite | $40 | $40 | $40 | |
| Bt | Efficiency Gains Through Automation | (B5+B10)*B11 | $276,480 | $276,480 | $276,480 | |
| Risk adjustment | ↓5% | |||||
| Btr | Efficiency gains through automation (risk-adjusted) | $262,656 | $262,656 | $262,656 | ||
| Three-year total: $787,968 | Three-year present value: $653,187 | |||||
Improved Identity And Account Management Efficiency
Evidence and data. Interviewees mentioned that their identity administrators had to manage multiple user accounts and manually perform many routine maintenance tasks using various tools and systems. The identity administrators spent a significant amount of time and effort performing routine account administration tasks for all the managed entities like account creation, role management, policy checks, AD integration, and password resets.
-
Interviewees said their organizations also had to push out AD accounts for everyone, which required gathering employee names, cost centers, and managers — a labor-intensive task requiring major planning and effort in execution.
-
With Omada’s built-in automation features and unified account provisioning, interviewees said their administrators were able to handle a much higher number of identities.
-
The manager of the security team in the insurance industry observed: “We are planning to push out AD accounts for everyone in the organization; currently only the 3,500 standard users have AD accounts. Gathering names, cost centers, and managers is a major effort. With Omada automation, we already have that information — saving at least one month of work for my team in the first year and then a fraction of this year on year.”
-
The head of IT foundational platforms in the manufacturing industry said, “It provides a more transparent view about roles and assignments; this improved visibility enables us to better look after access rights and better manage application privileges.”
Modeling and assumptions. There are two components to this benefit: identity management efficiencies and account management efficiencies.
-
Before Omada, the composite’s administrators managed an average of 1,000 identities each; with Omada’s built-in automation features and unified account provisioning, each administrator manages around 1,500 identities. Note that NHI identities have not been included in this benefit calculation.
-
For account setup, the composite has five FTEs in the first year, which drops to one FTE in subsequent years. The effort required for account setup is assumed at 20 days in the first year and five days thereafter. The total effort decreases by 90% following the Omada implementation.
Risks. The impact of this benefit could be lower for an organization like the composite if:
-
The number of identities managed per administrator is higher initially.
-
Salary levels differ, perhaps depending on geographical location and skill level.
Results. To account for these risks, Forrester adjusted this benefit downward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $530,000.
90%
Account setup effort saved due to Omada
Improved Identity And Account Management Efficiency
| Ref. | Metric | Source | Year 1 | Year 2 | Year 3 | |
|---|---|---|---|---|---|---|
| C1 | Identities managed | Composite | 10,000 | 10,000 | 10,000 | |
| C2 | Identities managed per admin before Omada | Interviews | 1,000 | 1,000 | 1,000 | |
| C3 | Identities managed per admin after Omada | Interviews | 1,500 | 1,500 | 1,500 | |
| C4 | Average fully burdened annual salary for an identity admin | Composite | $85,000 | $85,000 | $85,000 | |
| C5 | Productivity captured | TEI methodology | 75% | 75% | 75% | |
| C6 | Subtotal: Improved identity and account management efficiency | ((C1/C2) - (C1/C3))*C4*C5 | $212,500 | $212,500 | $212,500 | |
| C7 | FTEs required for account setup | Interviews | 5 | 1 | 1 | |
| C8 | Account setup effort per FTE (days) | Interviews | 20 | 5 | 5 | |
| C9 | Effort saved due to Omada | Interviews | 90% | 90% | 90% | |
| C10 | Subtotal: Account management efficiency | C7*C8*C9*C4/260 | $29,423 | $1,471 | $1,471 | |
| Ct | Improved Identity And Account Management Efficiency | C6+C10 | $241,923 | $213,971 | $213,971 | |
| Risk adjustment | ↓5% | |||||
| Ctr | Improved identity and account management efficiency (risk-adjusted) | $229,827 | $203,273 | $203,273 | ||
| Three-year total: $636,372 | Three-year present value: $529,649 | |||||
Improved Application Access Monitoring
Evidence and data. Interviewees mentioned that Omada’s automated access review features enabled more efficient and effective access review processes, allowing their organizations to gain efficiency and reduce risks and errors.
-
Before implementing Omada, the interviewees’ organizations reported that they had to perform access reviews manually and often relied on spreadsheets and other legacy data sources that were difficult and expensive to maintain. The manager of the security team in the insurance industry explained, “Managers had to do this manually; that time adds up, given we have over 250 managers in the organization.”
-
Access reviews were time-consuming, and interviewees noted that they were not completed on time, exposing their organizations to internal security risks and audit exposures.
-
Interviewees also highlighted the high number of tickets raised each month just for application access and removal, which resulted in significant loss of productivity.
-
With Omada’s automated user entitlements reviews, accounts reviews, and permission reviews, interviewees said they saved an extensive amount of time on access reviews.
-
Omada’s built-in self-service access request capability allowed the interviewees to reduce the number of tickets by nearly 90% from the first year of deployment.
Modeling and assumptions. There are two components to this benefit: the reduction in IT tickets raised and the efficiencies in application reviews.
-
The number of tickets raised for application access and removal is assumed to be 600 each month (6% of the workforce).
-
The average cost of a service ticket is $14 for the composite organization.
-
Before the Omada investment, three FTEs would each spend an average of 25 hours monthly performing application access reviews; following the investment, this time decreased 90%.
-
The average fully burdened hourly rate for an identity access administrator is $40.
-
A 75% productivity capture rate was applied since not all time freed up is necessarily put back into productive use.
Risks. The impact of this benefit could be lower for an organization like the composite because:
-
The number of applications deployed, the amount of cross-departmental input that is needed, and the number of expected user reviews per year could be lower.
-
Salary levels can differ depending on geographical location and skill level.
Results. To account for these risks, Forrester adjusted this benefit downward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $272,000.
90%
Reduction in application access-related service tickets raised after implementing Omada
Improved Application Access Monitoring
| Ref. | Metric | Source | Year 1 | Year 2 | Year 3 | |
|---|---|---|---|---|---|---|
| D1 | Tickets raised for application access/removal (monthly) | Interviews | 600 | 600 | 600 | |
| D2 | Average cost of a service ticket | Interviews | $14 | $14 | $14 | |
| D3 | Reduction in tickets raised due to Omada | Interviews | 90% | 90% | 90% | |
| D4 | Subtotal: Savings due to reduction in service tickets annually | D1*D2*D3*12 | $90,720 | $90,720 | $90,720 | |
| D5 | Time spent on application access review each month per admin (hours) | Interviews | 25 | 25 | 25 | |
| D6 | Admins performing access reviews | Interviews | 3 | 3 | 3 | |
| D7 | Time saved due to Omada | Interviews | 90% | 90% | 90% | |
| D8 | Average fully burdened hourly rate for an identity access administrator | Composite | $40 | $40 | $40 | |
| D9 | Productivity captured | TEI methodology | 75% | 75% | 75% | |
| D10 | Subtotal: Savings due to application access automation | D5*D6*D7*D8*D9*12 | $24,300 | $24,300 | $24,300 | |
| Dt | Improved Application Access Monitoring | D4+D10 | $115,020 | $115,020 | $115,020 | |
| Risk adjustment | ↓5% | |||||
| Dtr | Improved application access monitoring (risk-adjusted) | $109,269 | $109,269 | $109,269 | ||
| Three-year total: $327,807 | Three-year present value: $271,736 | |||||
Reduction In Audit And Compliance Effort
Evidence and data. All interviewees mentioned that demonstrating compliance with increasingly stringent regulatory and audit requirements was one of their key responsibilities, but their legacy identity management environments lacked the basic automation and sophistication needed to complete all of them efficiently and easily.
-
By using Omada’s built-in real-time visibility and audit readiness features and reporting dashboards, the administrators were able to complete their compliance review and reporting in much less time.
-
The manager of the security team in the insurance industry explained, “[Before the Omada investment], it took 20 people two days to go through the spreadsheet. This is now just 0.5 days.”
Modeling and assumptions. Based on the interviews, Forrester assumes the following about the composite organization
-
The composite has six FTEs working on compliance-related tasks.
-
Each FTE spends an average of four days to review and report each month before implementing Omada; this effort is reduced by 90% following the deployment.
-
A productivity recapture rate of 75% is applied as not all time saved will be put to productive use.
-
The average annual salary for a compliance FTE is assumed to be $100,000.
Risks. An organization like the composite might not achieve such a high impact because:
-
There are differences in auditing and compliance requirements.
-
Salary levels differ depending on geographical location and skill level.
Results. To account for these risks, Forrester adjusted this benefit downward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $177,000.
4 days to less than half day
Average reduction in time spent completing audit and compliance tasks
Reduction In Audit and Compliance Effort
| Ref. | Metric | Source | Year 1 | Year 2 | Year 3 | |
|---|---|---|---|---|---|---|
| E1 | FTEs working on compliance | Composite | 6 | 6 | 6 | |
| E2 | Average time to review and report each month (days) | Interviews | 4 | 4 | 4 | |
| E3 | Percentage of time saved due to Omada | Interviews | 90% | 90% | 90% | |
| E4 | Productivity captured | TEI methodology | 75% | 75% | 75% | |
| E5 | Average annual salary for a compliance FTE | Composite | $100,000 | $100,000 | $100,000 | |
| Et | Reduction In Audit And Compliance Effort | E1*E2*E3*E4*(E5/260)*12 | $74,769 | $74,769 | $74,769 | |
| Risk adjustment | ↓5% | |||||
| Etr | Reduction in audit and compliance effort (risk-adjusted) | $71,031 | $71,031 | $71,031 | ||
| Three-year total: $213,092 | Three-year present value: $176,643 | |||||
Unquantified Benefits
Interviewees mentioned the following additional benefits that their organizations experienced but were not able to quantify:
-
Improved security posture and reduced risks. Automated JML processes, segregation of duties controls, and periodic access certifications reduce the likelihood of unauthorized access, credential misuse, and insider threats. Interviewees mentioned they gained greater confidence that access risks are proactively managed and that sensitive systems and data remain better protected.
-
Secure and flexible access for temporary and mobile workers. Interviewees highlighted their increasing reliance on contractors, consultants, temporary staff, and project teams that require elevated or changed levels of access for limited periods. They said that the Omada platform enables just-in-time and time-bound access, allowing users to receive the permissions they need only for the duration of a specific task or assignment, with access automatically revoked once it is no longer required. This reduces reliance on standing privileged access, minimizes the risk of excessive permissions, and helps maintain a strong security posture without slowing business operations. The service manager for IAM at a retailer explained: “We now have the ability to support changes of jobs for workers on a daily basis moving around stores. We have 860 stores and about two to three employee movements per week.”
Flexibility
The value of flexibility is unique to each customer. There are multiple scenarios in which a customer might implement Omada Identity Cloud and later realize additional uses and business opportunities, including:
-
Emerging need for AI agent identity management. Governance and security aspects of AI agents are becoming an increasingly important issue as enterprises continue to explore, implement, and adopt AI. Managing AI agents’ identities and what they are able to access is and will further become part of an organization’s identity management responsibilities.
-
Data sovereignty and jurisdictional control requirements. Regulations and compliance requirements for data residency, jurisdictional control, and data sovereignty are changing, especially in Europe. Customers expect that software vendors and cloud providers will support them in addressing such changing requirements to minimize the burden of dealing with these changes. The head of IT foundational platforms at a manufacturing organization shared, “Such changes should not put a lot of effort on software users; the burden should be on the vendors.”
Flexibility would also be quantified when evaluated as part of a specific project (described in more detail in Total Economic Impact Approach).
Analysis Of Costs
Quantified cost data as applied to the composite
Total Costs
| Ref. | Cost | Initial | Year 1 | Year 2 | Year 3 | Total | Present Value |
|---|---|---|---|---|---|---|---|
| Ftr | Subscription cost | $0 | $315,000 | $315,000 | $315,000 | $945,000 | $783,358 |
| Gtr | Implementation and maintenance effort | $451,000 | $21,577 | $21,577 | $21,577 | $515,731 | $504,659 |
| Total costs (risk-adjusted) | $451,000 | $336,577 | $336,577 | $336,577 | $1,460,731 | $1,288,017 |
Subscription Cost
Evidence and data. The largest cost category is the subscription fee for the Omada platform. Interviewees shared their annual costs, and Forrester used these to estimate the cost for the composite, which Omada then confirmed. Pricing may vary, contact Omada for additional details.
Modeling and assumptions. Based on the interviews, Forrester assumes that the composite organization is charged annual subscription fees of $300,000 for use of the platform.
Risks. An organization like the composite might pay more for the platform because:
-
Prices change over time.
-
There may be regional differences.
Results. To account for these risks, Forrester adjusted this cost upward by 5%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $783,000.
Subscription Cost
| Ref. | Metric | Source | Initial | Year 1 | Year 2 | Year 3 |
|---|---|---|---|---|---|---|
| F1 | Subscription cost | Interviews and Omada | $300,000 | $300,000 | $300,000 | |
| Ft | Subscription cost | F1 | $0 | $300,000 | $300,000 | $300,000 |
| Risk adjustment | ↑5% | |||||
| Ftr | Subscription cost (risk-adjusted) | $0 | $315,000 | $315,000 | $315,000 | |
| Three-year total: $945,000 | Three-year present value: $783,358 | |||||
Implementation And Maintenance Effort
Evidence and data. In addition to the licensing cost, interviewees shared details about upfront and ongoing costs.
-
Platform implementation takes some effort and includes not only the technical integration, testing, and deployment but also the data preparation, formatting, and agreement about which roles have access to which applications and resources. The head of IT foundational platforms at a manufacturing organization explained, “Agreeing on the governance processes and access rights took the most effort, [which was] an organizational [process] and not a technical one.”
-
Most of the interviewees’ organizations either worked with an independent systems integrator or with Omada for the implementation.
-
There is some ongoing effort required for the team responsible for identity management, although interviewees said this was minimal since the platform is deployed in the cloud rather than on-premises.
Modeling and assumptions. In the case of the composite organization, the following implementation and maintenance costs were estimated:
-
The composite invests in Omada’s accelerator package to support its implementation.
-
A team of four FTEs, including a project manager, cloud specialist, a developer, and an IAM architect, is required for the implementation, which takes six months.
-
A team of six FTEs maintain the platform as part of their identity management responsibilities; each has to allocate two weeks per year on average for platform training and maintenance.
Risks. It is possible that the implementation and maintenance costs could be higher for an organization like the composite because:
-
The previous setup is less mature and requires additional effort to implement.
-
Certain skills are lacking internally.
-
The structure of the organization is more complicated, requiring additional ongoing effort.
Results. To account for these risks, Forrester adjusted this cost upward by 10%, yielding a three-year, risk-adjusted total PV (discounted at 10%) of $505,000.
Implementation And Maintenance Effort
| Ref. | Metric | Source | Initial | Year 1 | Year 2 | Year 3 |
|---|---|---|---|---|---|---|
| G1 | Accelerator package | Interviews | $164,000 | |||
| G2 | FTEs required for implementation | Interviews | 4 | |||
| G3 | Time taken for implementation (months) | Interviews | 6 | |||
| G4 | Average fully burdened annual salary for an implementation FTE | Composite | $123,000 | |||
| G5 | Subtotal: Implementation effort | G2*G3*G4/12 | $246,000 | |||
| G6 | Time for training and maintenance (days) | Interviews | 10 | 10 | 10 | |
| G7 | FTEs required for training and maintenance | Interviews | 6 | 6 | 6 | |
| G8 | Average fully burdened salary for an identity admin | Composite | $85,000 | $85,000 | $85,000 | |
| G9 | Subtotal: Ongoing training and maintenance cost | G6*G7*G8/260 | $19,615 | $19,615 | $19,615 | |
| Gt | Implementation and maintenance effort | G1+G5+G9 | $410,000 | $19,615 | $19,615 | $19,615 |
| Risk adjustment | ↑10% | |||||
| Gtr | Implementation and maintenance effort (risk-adjusted) | $451,000 | $21,577 | $21,577 | $21,577 | |
| Three-year total: $515,731 | Three-year present value: $504,659 | |||||
Financial Summary
Consolidated Three-Year, Risk-Adjusted Metrics
Cash Flow Chart (Risk-Adjusted)
Cash Flow Analysis (Risk-Adjusted)
| Initial | Year 1 | Year 2 | Year 3 | Total | Present Value | |
|---|---|---|---|---|---|---|
| Total costs | ($451,000) | ($336,577) | ($336,577) | ($336,577) | ($1,460,731) | ($1,288,017) |
| Total benefits | $0 | $1,548,119 | $1,521,565 | $1,521,565 | $4,591,249 | $3,808,047 |
| Net benefits | ($451,000) | $1,211,542 | $1,184,988 | $1,184,988 | $3,130,518 | $2,520,030 |
| ROI | 196% | |||||
| Payback | <6 months |
Please Note
The financial results calculated in the Benefits and Costs sections can be used to determine the ROI, NPV, and payback period for the composite organization’s investment. Forrester assumes a yearly discount rate of 10% for this analysis.
These risk-adjusted ROI, NPV, and payback period values are determined by applying risk-adjustment factors to the unadjusted results in each Benefit and Cost section.
The initial investment column contains costs incurred at “time 0” or at the beginning of Year 1 that are not discounted. All other cash flows are discounted using the discount rate at the end of the year. PV calculations are calculated for each total cost and benefit estimate. NPV calculations in the summary tables are the sum of the initial investment and the discounted cash flows in each year. Sums and present value calculations of the Total Benefits, Total Costs, and Cash Flow tables may not exactly add up, as some rounding may occur.
From the information provided in the interviews, Forrester constructed a Total Economic Impact™ framework for those organizations considering an investment in Omada Identity Cloud.
The objective of the framework is to identify the cost, benefit, flexibility, and risk factors that affect the investment decision. Forrester took a multistep approach to evaluate the impact that Omada Identity Cloud can have on an organization.
Due Diligence
Interviewed Omada stakeholders and Forrester analysts to gather data relative to Omada Identity Cloud.
Interviews
Interviewed four decision-makers at organizations using Omada Identity Cloud to obtain data about costs, benefits, and risks.
Composite Organization
Designed a composite organization based on characteristics of the interviewees’ organizations.
Financial Model Framework
Constructed a financial model representative of the interviews using the TEI methodology and risk-adjusted the financial model based on issues and concerns of the interviewees.
Case Study
Employed four fundamental elements of TEI in modeling the investment impact: benefits, costs, flexibility, and risks. Given the increasing sophistication of ROI analyses related to IT investments, Forrester’s TEI methodology provides a complete picture of the total economic impact of purchase decisions. Please see Appendix A for additional information on the TEI methodology.
Total Economic Impact Approach
Benefits
Benefits represent the value the solution delivers to the business. The TEI methodology places equal weight on the measure of benefits and costs, allowing for a full examination of the solution’s effect on the entire organization.
Costs
Costs comprise all expenses necessary to deliver the proposed value, or benefits, of the solution. The methodology captures implementation and ongoing costs associated with the solution.
Flexibility
Flexibility represents the strategic value that can be obtained for some future additional investment building on top of the initial investment already made. The ability to capture that benefit has a PV that can be estimated.
Risks
Risks measure the uncertainty of benefit and cost estimates given: 1) the likelihood that estimates will meet original projections and 2) the likelihood that estimates will be tracked over time. TEI risk factors are based on “triangular distribution.”
Financial Terminology
Present value (PV)
The present or current value of (discounted) cost and benefit estimates given at an interest rate (the discount rate). The PVs of costs and benefits feed into the total NPV of cash flows.
Net present value (NPV)
The present or current value of (discounted) future net cash flows given an interest rate (the discount rate). A positive project NPV normally indicates that the investment should be made unless other projects have higher NPVs.
Return on investment (ROI)
A project’s expected return in percentage terms. ROI is calculated by dividing net benefits (benefits less costs) by costs.
Discount rate
The interest rate used in cash flow analysis to take into account the time value of money. Organizations typically use discount rates between 8% and 16%.
Payback
The breakeven point for an investment. This is the point in time at which net benefits (benefits minus costs) equal initial investment or cost.
Appendix A
Total Economic Impact
Total Economic Impact is a methodology developed by Forrester Research that enhances a company’s technology decision-making processes and assists solution providers in communicating their value proposition to clients. The TEI methodology helps companies demonstrate, justify, and realize the tangible value of business and technology initiatives to both senior management and other key stakeholders.
Appendix B
Supplemental Material
Related Forrester Research
How Agentic AI Will Turbocharge IAM Solutions, Forrester Research, Inc., March 10, 2026
The Workforce Identity Security Platforms Landscape, Q4, 2025, Forrester Research, Inc., December 18, 2025
Appendix C
Endnotes
1 Source: Manage Identity And Access For Humans, Machines, And AI Agents Using The Forrester IAM Lifecycle, Forrester Research, Inc., August 14, 2026.
2 Total Economic Impact is a methodology developed by Forrester Research that enhances a company’s technology decision-making processes and assists solution providers in communicating their value proposition to clients. The TEI methodology helps companies demonstrate, justify, and realize the tangible value of business and technology initiatives to both senior management and other key stakeholders.
3 Note: The NHI identities are not included in the quantified benefits.
Disclosures
Readers should be aware of the following:
This study is commissioned by Omada and delivered by Forrester Consulting. It is not meant to be used as a competitive analysis.
Forrester makes no assumptions as to the potential ROI that other organizations will receive. Forrester strongly advises that readers use their own estimates within the framework provided in the study to determine the appropriateness of an investment in Omada Identity Cloud. For any interactive functionality, the intent is for the questions to solicit inputs specific to a prospect's business. Forrester believes that this analysis is representative of what companies may achieve with Omada Identity Cloud based on the inputs provided and any assumptions made. Forrester does not endorse Omada or its offerings. Although great care has been taken to ensure the accuracy and completeness of this model, Omada and Forrester Research are unable to accept any legal responsibility for any actions taken on the basis of the information contained herein. The interactive tool is provided ‘AS IS,’ and Forrester and Omada make no warranties of any kind.
Omada reviewed and provided feedback to Forrester, but Forrester maintains editorial control over the study and its findings and does not accept changes to the study that contradict Forrester’s findings or obscure the meaning of the study.
Omada provided the customer names for the interviews but did not participate in the interviews.
Consulting Team:
Jaspreet Singh
Published
October 2026