State of CIAM 2026
Customer-identity-specific benchmarks. Passkey adoption curve, ATO attack rates, B2B SaaS Organizations pattern adoption, multi-tenant identity maturity. Sourced to FIDO Alliance + Akamai + practitioner observations.
Reviewed
2026-05-22
5 benchmarks · CC BY 4.0
Regulators
FFIEC authentication guidance · NYDFS Part 500 · CCPA + GDPR
75%
Consumers with at least one passkey
Share of consumers who have enabled a passkey on at least one of their accounts. 49% use passkeys regularly when offered. 5 billion passkeys are now in use worldwide.
Source: FIDO Alliance — State of Passkeys 2026 · 2026
87%
Enterprise passkey deployment
Share of organizations that have either deployed or are currently deploying passkeys for workforce sign-ins — 47% deployed, 40% in active rollout. Up from a small minority two years ago.
Source: FIDO Alliance — State of Passkeys 2026 · 2026
29%
US adults hit by account takeover (annual)
29% of US adults experienced an account takeover in 2024 — roughly 77 million people. ATO fraud losses hit $2.9B, the fastest-growing identity-fraud category. Akamai recorded 193+ billion credential-stuffing attempts in one year.
Source: Akamai State of the Internet — Security + AARP fraud data · 2025
63%
ObservationB2B SaaS using Organizations pattern
Share of B2B SaaS products with an Auth0 / Okta CIC tenant that have adopted the Organizations multi-tenancy pattern. The remaining sites carry custom tenancy that creates upgrade debt.
Source: askmeidentity practice observations · 2026
>99%
Identity attacks blocked by phishing-resistant MFA
Microsoft data on the effectiveness of phishing-resistant MFA at blocking unauthorized access attempts. Identity-based attacks rose 32% in H1 2025; 97% are simple password-spray attempts that MFA would have stopped outright.
Source: Microsoft Digital Defense Report 2025 · 2025
Cite this page
Reference our benchmarks in your reporting.
These benchmarks are licensed under CC BY 4.0 — free to cite, quote, and link to with attribution. Pick a format below.
askmeidentity. (2026). The State of Identity, live (v2026.05). Retrieved 2026-05-22 from https://askmeidentity.com/resources/state-of-ciam/
"The State of Identity, live." askmeidentity, v2026.05, https://askmeidentity.com/resources/state-of-ciam/. Accessed 2026-05-22.
@misc{askmeidentity_state_of_identity_2026_05, title = {The State of Identity, live}, author = {{askmeidentity}}, year = {2026}, note = {Version 2026.05, retrieved 2026-05-22}, url = {https://askmeidentity.com/resources/state-of-ciam/} }