Large-scale cyberattacks have rocked both the public and private sector in recent years, causing everything from data loss to a fuel shortage along the Eastern seaboard – and they aren’t letting up. With our critical infrastructure — including healthcare, energy, and education systems — and government agencies in hackers’ crosshairs, cybersecurity has been elevated to a national security issue. Federal agencies have worked for a long time to enhance, standardize, and secure the identities of their employees and contractors who access Federal networks. While they have made many ICAM improvements, agency environments are rife with legacy identity technologies, which lead to common identity challenges. These challenges can make it difficult to implement Zero Trust. We review these challenges and ways to overcome them by modernizing existing identity infrastructure.