Think of identity dark matter as a containment challenge

Why teams must focus on the access paths that sit outside of the central identity provider.