Vendors sell platforms. You should buy outcomes. The gap between what you purchase and what your team can actually run is where lock-in lives and carry cost compounds.

Every identity vendor has the same pitch: a comprehensive platform that covers SSO, MFA, IGA, PAM, lifecycle automation, and analytics. The demo is impressive. The roadmap is compelling. The pricing looks competitive. Then you sign the deal, and the distance between what you bought and what your team can operate becomes the most expensive line item in your IT budget.

🎯 The Frame Is the Vendor’s

The vendor controls the conversation. They pitch 47 features. They evaluate the suite. They define what “complete” means. You are reacting to their frame instead of setting your own.

The reframe is simple: “What can my team actually run this quarter?” Not what the platform can do. Not what the roadmap promises. Not what the POC demonstrated. What your team, at its current capacity, can actually operationalize without creating new risk.

Most organizations buy the suite because the vendor made the suite feel like the answer. The real answer is the intersection of what the platform offers and what your team can absorb. That intersection is always smaller than the pitch.

💸 The Renewal Is Where They Get You

Year 1 pricing is competitive. The vendor needs the logo. The sales engineer fights for the discount. The contract is favorable.

Year 3 pricing is whatever the market will bear. You have migrated your identity infrastructure to their platform. Your team has built workflows around their APIs. Your auditors expect their dashboards. Switching is now a multi-year project with real cost and real risk. The vendor knows this. The renewal reflects it.

The negotiation strategy is not about Year 1. It is about Year 3. Before you sign the first deal, ask: “What will this cost at renewal, and what will it cost to leave?” If you cannot answer both questions, you are not negotiating. You are hoping.

🧠 The Tactics They Use

Vendors use well-documented persuasion tactics to drive urgency. Recognizing them doesn’t make them wrong. It makes you a better negotiator.

Scarcity: “This pricing expires Friday.” Real constraints are rare. Manufactured urgency is common. If the deal is good today, it will be good next week. If the vendor won’t honor the price next week, the price was never real.

Social proof: “Your competitors are on this platform.” Your competitor’s environment is not your environment. Their team size is not your team size. Their operational capacity is not your operational capacity. Their decision is not your decision.

Authority: “Our CTO recommends this.” The vendor’s CTO is not your advisor. They are the vendor’s employee. Their recommendation serves their margin, not your architecture.

None of these tactics are dishonest. They are professional. But they are professional on the vendor’s side of the table. You need to be professional on yours.

🏗️ The Constraint Is Your Team

The theory of constraints applies to identity procurement. Your operational capacity is the bottleneck. Buying a platform your team cannot operate doesn’t create value. It creates waste.

Every unused feature has a carry cost: licenses paid but not deployed, governance overhead for capabilities you’re not running, audit evidence for controls you haven’t implemented. The platform cost isn’t the purchase price. It is the ongoing cost of carrying capacity you’re not using.

The question is not “Can we afford this platform?” The question is “Can our team operate this platform without creating new risk?” If the answer is no, you are buying shelfware at enterprise pricing.

✅ The Recommendation

The path forward is not better negotiation tactics. It is a better procurement framework.

Buy what you can operationalize this quarter. Not what the vendor is selling. Not what the roadmap promises. What your team can actually run.

Negotiate the renewal before you sign the first deal. Get Year 3 pricing in writing. Get exit terms in writing. Get data portability in writing. The time to negotiate exit is before you enter.

Know when to walk away. The best deal is the one you are willing to not take. If the vendor won’t honor your terms at renewal, you have your answer. The cost of switching is real. The cost of staying locked in is real too. Compare them honestly.

The identity platform trap is not that vendors sell too much. It is that organizations buy too much and operationalize too little. The gap between those two numbers is where your leverage lives.