It is more about vendor and technology mitigation vs selection. Companies fail, projects degrade, like lask week quality can go down. The better question is w

It is more about vendor and technology mitigation vs selection. Companies fail, projects degrade, like lask week quality can go down. The better question is why would my organization couple their success to you wagon, do you provide them with a way to get their info out in a portable way? But there are many reasons to maintain the ability of your IAM to access multiple IDPs. I do think there is a growing market for products that don't use your private data for their own goals. But coupling a domain controller to a single 2FA provider just doesn't have any value as you have described it, at least for me. I am not the entire market, just one potential user, so take this as feedback and not outright dismissal. Perhaps if you develop the idea more I may be interested in the future.