In the AI era, repatriating IAM can stem mounting costs and secure the identity goldmine