According to a recent Strata Identity report, 60% of organizations do not have the resources or time to rewrite old, outdated applications.
https://www.securitymagazine.com/articles/99782-41-of-organizations-said-they-can-enforce-consistent-access-policies