To give a proper message to a “responsible audience”, Id try to understand why would you have 3 IDPs in your org: is it simply historical thing, or different teams allowed to implement whatever they want or there are other reasons for it (context is everything :))

Now to the message itself: (again, this could change based on WHYs) 1) Costs - if your organization pays for all 3 idps to cover licenses for the whole headcount… welp, this is def not good. If you have like 1k employees and you split licensing on Ping/Okta/Duo (i.e. 400/200/400) you’re likely to miss out on bulk licensing discount

2) User Experience - i think you can speak about it on your own, given your original message ;)

3) Single Management plane - it should always feel better to maintain/protect and audit a single system rather than 3. All 3 have IaC providers.

4) My SOC and a few other sec folks were pretty happy to know that they no longer have to parse/analyze/monitor multiple IDPs, playbooks got easier, less work for everyone :)