IT Asset Management in the World of SaaS & AI

IT asset management (ITAM) stopped being an inventory chore the moment SaaS and AI flooded the stack. It is now the practice of discovering, governing, and optimizing every IT asset from procurement through retirement, and, more importantly, tracking who and what has access to each one.

Identity is the control plane for your IT estate. Business units spin up tools on a credit card. Employees experiment with AI assistants. Free trials quietly convert to paid subscriptions. Each action expands the identity attack surface faster than spreadsheets can track. Effective ITAM, paired with identity governance, closes that gap.

‍

Key Takeaways

• ITAM now means identity governance: tracking who and what accesses each asset, not just inventory
• SaaS sprawl and AI adoption expand the identity attack surface faster than spreadsheets can track
• Embedding IGA in ITAM automates access enforcement, lifecycle management, and risk surfacing
• Only 31% of organizations see their AI tools, creating cost and compliance blind spots
• Quantum Brilliance cut SaaS costs 30-50% by centralizing asset and identity management with Josys

‍

What Is IT Asset Management (ITAM)?

IT asset management is the end-to-end discipline of discovering, inventorying, governing, and optimizing every technology asset an organization owns or subscribes to. That includes hardware, on-premises software, SaaS applications, and cloud infrastructure. It increasingly covers human, machine, and AI-agent identities that interact with those assets.

The goal is clear: maximize the value IT delivers while minimizing cost, risk, and compliance exposure. ITAM achieves this by:

• Maintaining an accurate, real-time inventory of assets and the identities accessing them
• Tracking contracts, licenses, and renewal dates
• Monitoring usage to identify waste and reassign resources
• Enforcing access policies that govern who and what can reach sensitive data

‍

Key Components of Modern ITAM

Modern ITAM depends on three capabilities: identity-aware inventory, contract control, and financial visibility.

• Identity-aware inventory management: Keep a current record of every IT asset mapped to the identities that access it.
• Contract and license management: Track agreements, terms, renewal dates, and SLAs. SaaS subscriptions auto-renew; missing a cancellation window means paying for shelfware.
• Financial tracking: Map every asset to its cost. Clear financials link IT spending to business outcomes.

‍

Why Identity Governance Belongs in ITAM

Traditional ITAM tracked assets. Modern ITAM tracks access. The distinction matters because a SaaS application without governed access is a liability, not an asset.

Identity governance and administration (IGA) answers the questions ITAM cannot answer alone. Who has access to this application? Should they? What happens to that access when they change roles or leave?

When IGA capabilities live inside your ITAM platform, you gain four advantages:

• Continuous access visibility: See every identity with access to every application in real time
• Policy-led automation: Define access policies once; enforce them autonomously across the estate
• Lifecycle orchestration: Provision access on day one, adjust it at role changes, revoke it at offboarding
• Risk-aware decision making: Surface access anomalies and over-permissioned identities before incidents occur

This integration transforms ITAM from a cost-management function into a security and governance function.

‍

From Identity To SaaS: The Access-First View Of ITAM

Identity is the control plane, so governing access is how you actually control the asset estate. Every application, device, and AI tool is reached by an identity, and what that identity may do is set by policy. Get the access model right, and the rest of ITAM follows.

That work runs across the identity lifecycle. Provision access on someone's first day, scoped to what the role needs and nothing more. Keep it least-privilege as roles change. Run access reviews on a regular cadence to confirm entitlements still make sense. Then revoke access the moment someone leaves, closing the orphaned and stale accounts that quietly become an attacker's easiest way in.

A platform with automated app and identity discovery makes that lifecycle enforceable. IT teams see new applications as they appear, along with every identity accessing them, so access decisions rest on live data rather than last quarter's spreadsheet.

‍

Why is SaaS Visibility Important?

SaaS is where identity and access governance show up in the budget and the audit. Once you know who can reach which application, wasted licenses and compliance gaps become obvious. Complete SaaS visibility across every department, mapped to every identity, turns that insight into savings.

The same visibility carries compliance. Documenting who has access to each application, and revoking it promptly at offboarding, supports frameworks like SOC 2 and ISO 27001 without a separate audit scramble.

‍

ITAM in the Age of AI Agents

AI adoption is accelerating faster than most governance programs can handle. Josys surveyed 500 technology decision-makers. The findings: 78% of employees use AI tools daily, yet 70% of organizations have moderate-to-no visibility into that usage.

Roughly 36% of employees upload sensitive data to AI tools. One in five have input customer PII, intellectual property, or legal documents.

The visibility gap widens when you look at AI-specific assets. The Flexera 2026 State of ITAM Report found that only 31% of organizations have visibility into AI software, compared with 66% for traditional SaaS. The same report notes that 59% of organizations saw wasted AI spend increase over the past year.

AI tools behave differently than traditional software. They scale dynamically, consume credits unpredictably, and create data-flow pathways that traditional ITAM processes miss. An AI assistant embedded in a CRM may call external APIs, cache customer records, and generate outputs that persist outside the organization's control.

Governing AI requires extending ITAM and identity governance to cover AI-agent identities alongside human and machine identities. That means:

• Discovering every AI tool and agent operating in the environment
• Mapping data access and data flows for each agent identity
• Enforcing policies that control what data AI agents can access
• Monitoring usage to catch cost overruns and policy violations
  ‍

Without that governance layer, AI adoption becomes a source of unchecked cost and identity risk. With it, organizations can govern identity risk across humans, machines, and AI agents from a single platform.

‍

Benefits of Identity-Aware ITAM for SaaS-Centric Businesses

Identity-aware ITAM earns its keep fast. It cuts shelfware, shrinks risk, and frees IT from spreadsheet babysitting.

‍

Identifying Underutilized Licenses

Usage tracking reveals which licenses sit idle. Teams can optimize license spend by reassigning unused seats or downgrading to lower-cost tiers. Over time, these adjustments compound into significant savings.

‍

Negotiating Favorable Terms with Vendors

Complete usage and identity data strengthens vendor negotiations. Organizations can adjust subscription plans to match real consumption, secure volume discounts, and renegotiate contracts based on utilization trends.

‍

Automated Compliance with Organizational Policies

Identity-aware ITAM enforces access policies automatically. It verifies that all SaaS tools meet security requirements, tracks who has access to sensitive applications, and flags unauthorized usage. When employees leave, automated offboarding workflows automate the identity lifecycle, revoking access before it becomes a security gap.

‍

Real-World Impact: Quantum Brilliance

Quantum Brilliance, a quantum computing company, used ITAM to gain control over a SaaS environment that accounted for 60% of IT spend. Before adopting a centralized platform, the IT team tracked assets manually with spreadsheets, a process prone to errors and lag.

After implementing Josys, Quantum Brilliance reduced SaaS expenditures by 30-50% by optimizing subscriptions and eliminating underutilized licenses. The platform also supported the company's journey toward ISO 27001 compliance by securing user offboarding and documenting access to every application.

"Josys is a valuable resource for tracking our cloud platforms and subscriptions in a central location," says Shaun Delorez, Global IT Manager at Quantum Brilliance. "It provides the information we need for informed decision-making, ensuring fiscal responsibility and operational efficiency."

‍

Selecting the Right Tools

The right ITAM platform embeds identity governance, not bolts it on. Look for five capabilities:

• Automated discovery: Finds new SaaS, AI tools, and the identities accessing them
• Identity governance: Enforces access policies and manages the full identity lifecycle
• License optimization: Surfaces underused subscriptions and recommends actions
• Real-time usage monitoring: Tracks how apps and identities interact, not just that assets exist
• Integration depth: Connects to identity providers, HR systems, and finance tools

Josys unifies ITAM and Identity Security & Governance. It discovers every identity and application in the enterprise, governs access through policy-led automation, and gives IT teams a single source of truth for cost, compliance, and security. Request a Josys demo to see identity-aware ITAM in action.

‍

Frequently Asked Questions

What is the difference between ITAM and SaaS management?

ITAM covers all IT assets: hardware, on-premises software, SaaS, and cloud infrastructure. SaaS management focuses on cloud subscriptions. Modern platforms merge both and add identity governance to track who accesses each asset.

How does identity governance fit into ITAM?

IGA answers questions ITAM alone cannot: who has access, should they, and what happens when they leave. Embedding IGA enables automated access control, policy enforcement, and lifecycle orchestration.

Why do organizations struggle with AI tool visibility?

AI tools slip in through shadow IT, skip procurement, and scale unpredictably. According to Flexera's 2026 State of ITAM Report, only 31% of organizations have visibility into AI software. Governing AI requires extending identity governance to AI-agent identities.

How can ITAM reduce SaaS costs?

ITAM surfaces idle licenses, flags redundant tools, and arms IT with usage data for vendor negotiations. Quantum Brilliance cut SaaS expenditures by 30-50% after implementing identity-aware ITAM with Josys.