Episodios

  • #361 - Identiverse 2025 - Sean O'Dell on Harnessing CAEP Abilities with Event-Driven Identity
    Jul 14 2025

    In this episode of the Identity at the Center Podcast, hosts Jeff and Jim discuss highlights from Identiverse 2025, featuring special guest Sean O'Dell from The Walt Disney Company. They reflect on the importance of continuous identity management, event-driven architecture, and AI in identity and access management (IAM). The conversation covers a range of topics, including insights from the CAEP (continuous access evaluation profile) panel, adoption of the shared signals framework (SSF), and the evolution of identity verification. Tune in for a deep dive into the future of IAM and thoughtful reflections on key industry trends and practices.

    00:00 Introduction and Greetings

    00:05 Acknowledgements and Thanks

    00:23 Conference Highlights and Listener Feedback

    01:36 Introducing the Guest Speaker: Sean O'Dell

    01:48 Sean O'Dell's Role and Responsibilities

    02:35 Panel Discussion Recap: Event-Driven Identity Management

    03:29 Audience Engagement and Technical Questions

    04:34 Continuous Identity and Security Paradigms

    09:19 Federated Policies and Signal Integration

    19:28 Privacy Sharing and Anonymity

    20:25 Vendor Adoption and Keynotes

    21:28 AI and Data Readiness

    22:26 Non-Human Identities vs. Workload IAM

    26:25 Continuous Authentication and Identity

    28:12 Shared Signals Framework and Device Management

    31:34 Vendor Solutions and Identity Verification

    34:58 Panel Reflections and Moderation Insights


    Connect with Sean: https://www.linkedin.com/in/seanodentity/

    Learn more about CAEP: https://caep.dev/


    Connect with us on LinkedIn:

    Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

    Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

    Visit the show on the web at http://idacpodcast.com

    Más Menos
    37 m
  • #360 - Sponsor Spotlight - Trusona
    Jul 9 2025

    This episode is sponsored by Trusona. Visit trusona.com/idac to learn more.

    In this episode of the Identity of the Center podcast, Jeff and Jim discuss identity verification challenges with Ori Eisen, the founder and CEO of Trusona. The conversation explores the problems surrounding help desk authentication and how Trusona's new product, ATO Protect, aims to address these issues by confirming caller identities, even in scenarios involving social engineering and advanced AI threats. Ori explains the technology behind document scanning, data triangulation, and geolocation to validate identities. The episode also includes an intriguing hack challenge for listeners to test the robustness of Trusona's solutions. Check out the detailed demo on Trusona's website and join the challenge!

    Timestamps

    00:00 Introduction and Episode Excitement01:16 Introducing the Guest: Ori Eisen from Trusona02:11 The Problem with Passwordless Authentication03:53 The Rise of Gen AI and Its Impact on Security04:51 Understanding ATO Protect and Its Importance16:10 How ATO Protect Works: A Step-by-Step Guide27:51 The Puppeteering Scam Unveiled28:24 Fingerprinting the Fraudsters29:11 Real-Time Fraud Detection Demo29:42 Challenges in Penetration Testing30:08 Combating Man-in-the-Middle Attacks30:41 The Ultimate Security Challenge33:44 Verifying Caller Identity41:24 Future Threats in Cybersecurity42:10 AI: The Double-Edged Sword49:08 Issuing the Hack Challenge52:45 Conclusion and Final Thoughts

    Connect with Ori: https://www.linkedin.com/in/orieisen/

    Learn more about Trusona: https://www.trusona.com/idac

    Connect with us on LinkedIn:

    Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

    Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

    Visit the show on the web at idacpodcast.com

    Keywords:

    IDAC, Identity at the Center, Jeff Steadman, Jim McDonald, Trusona, Ori Eisen, Identity Verification, Help Desk Security, Service Desk, Passwordless, Authentication, KBA, Knowledge-Based Authentication, Cybersecurity, Identity and Access Management, IAM, Multi-Factor Authentication, MFA, Zero Trust, Identity Proofing

    #IDAC #Trusona #Passwordless #Cybersecurity #IdentityManagement #HelpDesk #ZeroTrust

    Más Menos
    54 m
  • #359 - Identiverse 2025 - Andrew Shikiar’s FIDO Alliance Update
    Jul 7 2025

    In this episode of the Identity at the Center Podcast, Jeff and Jim broadcast live from Identiverse 2025. Special guest Andrew Shikiar from the FIDO Alliance joins to talk about efforts to push passkey adoption and reduce reliance on passwords. Topics covered include the technicalities of passkeys, their adoption by major banks like Wells Fargo, and initiatives for adding more signals for high assurance scenarios. The episode wraps up with exciting news about the upcoming Authenticate conference and plans for an Authenticate APAC edition in Singapore.

    00:00 Introduction and Greetings00:16 Podcast Highlights and Recent Activities01:38 Guest Introduction: Andrew Shikiar from FIDO Alliance01:58 FIDO Alliance and Passkey Adoption07:13 Technical Insights on Passkeys14:52 Authenticate Conference and Community20:20 Global Adoption and Regional Differences25:13 Conclusion and Wrap-Up

    Connect with LinkedIn: https://www.linkedin.com/in/andrewshikiar

    Learn more about the FIDO Alliance: https://fidoalliance.org/

    Connect with us on LinkedIn:

    Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

    Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

    Visit the show on the web at http://idacpodcast.com

    Más Menos
    27 m
  • #358 - Identiverse 2025 - Identi-Squabble
    Jun 30 2025

    Welcome to a special game show edition of 'Identity at the Center,' hosted by Jeff Steadman! Recorded live at Identiverse 2025, this episode features two teams—Team IDPro (Heather Flanagan, Tina Srivastava, and Mike Kiser) and Team IDAC (Jim McDonald, David Mahdi, and Steven Rennick)—competing in a Family Feud-style trivia game focused on Identity and Access Management (IAM). Watch as they answer questions related to common IAM project failures, non-human identities, snacks at conferences, and popular conference swag with a little help from the audience. Stick around to the end for a special IAM-themed rap performance by Tina.

    Chapters

    00:00 Introduction and Welcome01:18 Meet the Teams03:10 Explaining the Rules04:20 Round 1: Common Reasons for IAM Project Failure07:52 Round 2: Non-Human Identities in IAM11:33 Introduction and Initial Questions11:55 Fun with Vegas Snacks15:00 Final Round: Common Swag Items18:40 Conclusion and Farewell

    Connect with the contestants:

    Heather Flanagan: https://www.linkedin.com/in/hlflanagan/

    Tina Srivastava: https://www.linkedin.com/in/tina-s-8291438a/

    Mike Kiser: https://www.linkedin.com/in/mike-kiser/

    David Mahdi: https://www.linkedin.com/in/dmahdi/

    Steven Rennick: https://www.linkedin.com/in/steven-rennick/

    Connect with us on LinkedIn:

    Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

    Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

    Visit the show on the web at http://idacpodcast.com


    Más Menos
    21 m
  • #357 - Sponsor Spotlight - Silverfort
    Jun 25 2025

    This episode is sponsored by Silverfort. Visit silverfort.com for more.

    In this sponsored episode of the Identity at the Center Podcast, Jeff and Jim sit down with Hed Kovetz, CEO and Co-founder at Silverfort. They discuss the rapid evolution in the identity security space, Silverfort's groundbreaking innovations, and the critical role of AI and non-human identities. Learn how Silverfort's inline, real-time enforcement technology is tackling the complexities of identity management at scale. Hed also shares insights on the company's recent expansions and acquisitions, and the growing importance of AI agent security. Don't miss out on this deep dive into the future of identity security!

    00:00 Introduction and Guest Welcome00:14 Sponsor Spotlight and Industry Insights01:15 Silverfort's Recent Developments02:17 Identity Security Market Trends04:46 Challenges in Identity Governance07:14 Non-Human Identities and AI10:39 Silverfort's Unique Approach18:52 Service Account Security29:59 Reducing Risk with Virtual Fencing30:45 Addressing Human and Non-Human Identity Risks31:34 Overcoming the Fear of Breaking Systems32:35 Simulation Mode for Trust Building35:20 Challenges in Manual Identity Management36:12 AI Agent Security: The New Frontier42:10 The Importance of Inline Security55:50 The Ideal Identity Security Playbook01:00:38 Closing Remarks and Resources

    Connect with Hed: https://www.linkedin.com/in/hed-kovetz-910ba5b9/

    Learn more about Silverfort: https://www.silverfort.com/

    Insecurity in the shadows: New data on the hidden risks of non-human identities: https://resources.silverfort.com/insecurity-in-the-shadows/home

    The Identity Security Playbook (eBook): https://www.silverfort.com/resources/the-identity-security-playbook/

    Connect with us on LinkedIn:

    Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

    Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

    Visit the show on the web at idacpodcast.com and watch at https://www.youtube.com/@idacpodcast

    Más Menos
    1 h y 3 m
  • #356 - Mr. NHI, Lalit Choda, on Securing the Exploding World of NHI
    Jun 23 2025

    Join Jim McDonald and Jeff Steadman on the Identity at the Center podcast as they welcome Lalit Choda, founder and CEO of the Non-Human Identity Management Group. Lalit, also known as "Mr. NHI," shares his journey from investment banking to becoming a leading expert in non-human identities. This episode delves into the critical and often overlooked world of NHI, exploring why it's such a hot topic now, the challenges practitioners face in managing these identities, and how to approach the problem from a risk-based perspective. Lalit discusses the limitations of traditional PAM and IGA tools for NHI, the importance of foundational controls, and the alarming implications of AI on non-human identity management. Plus, hear a fun segment about vinyl records and some surprising finds!

    Chapter Timestamps:00:00:00 - Introduction to Lalit Choda and the NHI Community00:02:31 - Welcome to the Identity at the Center Podcast & IdentiVerse Discussion00:06:18 - Lalit Choda's Identity Origin Story: From Mr. SOX to Mr. NHI00:12:03 - Why Non-Human Identities Are a Big Deal Right Now00:15:37 - Defining NHI and the Practitioner's Framework00:19:13 - The Scale and Challenges of NHI Management00:23:01 - New Types of NHI and Tooling Limitations00:27:12 - The Lack of a Single Source of Truth for NHI00:33:57 - Prioritizing NHI Management and the Role of PAM00:38:58 - A Risk-Based Approach to NHI and Foundational Controls00:48:15 - What Scares Lalit Most About NHI (and AI)00:50:54 - Lalit's Impressive Vinyl Collection00:56:38 - Jim and Jeff's First, Best, and Favorite Albums01:01:15 - The Intersection of Music and Non-Human Identities01:02:00 - Wrapping Up & Where to Find More Information

    Connect with Lalit: https://www.linkedin.com/in/lalit-choda-5b924120/

    Non-Human Identity Management Group: https://www.nhimg.org/

    Connect with us on LinkedIn:

    Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

    Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

    Visit the show on the web at http://idacpodcast.com

    Keywords:Lalit Choda, Non-Human Identity, NHI, Machine Identity, Workload Identity, Identity Management, Cybersecurity, PAM, IGA, Privilege Access Management, Identity Governance and Administration, Secrets Management, Cloud Security, AI, Artificial Intelligence, DevSecOps, Risk-Based Approach, Identity Security, Service Accounts, Identity at the Center, IDAC, Jeff Steadman, Jim McDonald, IdentiVerse, Vinyl Collection, Podcast, Mr. NHI

    #idac #nonhumanidentity #machineidentity #cybersecurity #identityaccessmanagement #IAM #infosec #digitalidentity #workloadsecurity #devsecops #cloudsecurity #privilegedaccessmanagement #identitygovernance #zerotrust #nhi #mrnhi

    Más Menos
    1 h y 5 m
  • #355 - IdentiBeer Oslo & Berlin 2025
    Jun 16 2025

    This episode features various professionals discussing their experiences and journeys in the identity and access management (IAM) field during a meetup in Oslo, Norway, and Berlin, Germany. Participants include individuals from the Central Bank of Norway, Space Norway, and newcomers to the IAM space, among others. The event, promoted as 'IdentitBeer,' highlights networking, the evolution of IAM, challenges faced, and the importance of honest relationships in business development. Key topics include the history and growth of IdentiBeer, community impact, and personal anecdotes about working in IAM.

    Chapters

    00:00 Welcome to Identity at the Center00:18 Meet the Identity Experts01:49 Discovering the Faces Behind Identity02:07 Sarah's Journey into Identity06:47 Tips for Building Client Relationships13:13 Espen's Origin Story and IdentiBeer17:05 Expanding IdentiBeer Globally22:58 IdentiBeer Meetup in Asheville23:30 Organizing IdentiBeer Events24:34 IdentiBeer at Identiverse25:55 Reflections on Identity Community26:07 Identity Professionals' Introductions28:17 AI and Identity Management30:04 Identity Journeys and Experiences31:26 Challenges in Identity Management34:08 Identity in Cybersecurity45:37 Closing Remarks and Cheers

    Find your next IdentiBeer event: https://identi.beer/

    Connect with us on LinkedIn:

    Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

    Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

    Visit the show on the web at http://idacpodcast.com


    #idac #IdentityAtTheCenter #IdentiBeer #IAM #IdentityandAccessManagement #Oslo #Berlin #Norway #Germany #Cybersecurity #InfoSec #TechCommunity #Networking #IdentityManagement #DigitalIdentity #TechPodcast #ITSecurity #AccessManagement #IdentiBeerOslo #IdentiBeerBerlin #JimMcDonald #JeffSteadman

    Más Menos
    46 m
  • #354 - Kristina Yasuda & Torsten Lodderstedt on the EUDI Wallet and its Global Impact
    Jun 9 2025

    Join Jim McDonald and Jeff Steadman on Identity at the Center as they sit down with Kristina Yasuda, Product Owner, and Dr. Torsten Lodderstedt, Project Lead for the German EUDI Wallet project. Recorded at EIC 2025, this episode delves into the ambitious European Union initiative to create a digital identity wallet for all its citizens.

    Kristina and Torsten discuss the vision behind the EUDI Wallet, the political will driving it, and the funding making it a reality. They explore the challenges and complexities of aligning multiple parties, standardizing technical specifications, and the goal of digitizing everything from government-issued IDs to driving licenses and ePrescriptions.

    Learn about the Federal Agency for Breakthrough Innovation (SPRIN-D), the importance of a transparent and collaborative development process, and how Germany aims to provide a secure, privacy-preserving, and interoperable digital wallet ecosystem. The discussion also touches on digital sovereignty, the role of platform providers like Google and Apple, the aggressive timelines, and the potential global impact of this initiative.

    Find out how the EUDI Wallet aims to put users in the driver's seat, ensure non-discriminatory access, and foster a flourishing digital economy in Europe.

    Chapters

    00:00 Introduction: Vision, Political Will, and Funding00:50 Blockchain vs Federated Identity: Bridging the Gap01:47 Welcome to the Identity of the Center Podcast03:18 Meet the Guests: German EUDI Wallet Project03:42 Christina's Journey into Identity06:05 Torsten's Background in Identity08:31 The EUDI Wallet Project: Scope and Goals12:19 Challenges and Opportunities in Digital Identity15:38 Production and Adoption of Digital Wallets20:53 Digital Sovereignty and Interoperability26:16 Government's Role in Digital Identity26:54 Certification and Recognition of Wallet Providers27:21 Cultural Differences in Government-Provided IDs27:53 Challenges and Timelines for Digital Wallet Implementation28:25 Legal Obligations and Compliance29:10 Public vs. Private Sector in Digital Identity30:13 Barriers to Widespread Adoption31:26 Complexities of Wallet-Based Systems33:23 Global Interoperability and Standards33:59 Technical Specifications and Convergence36:05 Multi-Step Process for Implementation38:26 Transition Period and Global Considerations42:49 Digital Driver's License and Real-World Applications46:17 Final Thoughts and Future Outlook46:23 Fun and Lighthearted Ending

    Connect with Kristina: https://www.linkedin.com/in/kristinayasuda

    Connect with Dr. Torsten: https://www.linkedin.com/in/dr-torsten-lodderstedt/

    Connect with us on LinkedIn:

    Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

    Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

    Visit the show on the web at http://idacpodcast.com

    Keywords:

    EUDI Wallet, Digital Identity, European Union, Germany, Kristina Yasuda, Torsten Lodderstedt, Identity Management, Self-Sovereign Identity (SSI), Digital Sovereignty, Interoperability, Technical Standards, OpenID, Verified Credentials, Federal Agency for Breakthrough Innovation, Sprint, EIC 2025, Government Issued ID, Digital Transformation, Privacy, Security, User Control, Mobile Driver's License, IDAC, Identity at the Center, Jeff Steadman, Jim McDonald

    #EUDIWallet #DigitalIdentity #EuropeanUnion #Germany #KristinaYasuda #TorstenLodderstedt #IdentityManagement #SelfSovereignIdentity #SSI #DigitalSovereignty #Interoperability #OpenID #VerifiedCredentials #EIC2025 #GovernmentID #DigitalTransformation #Privacy #Security #UserControl #MobileDriverLicense #IDAC #IdentityAtTheCenter #JeffSteadman #JimMcDonald #DigitalWallet #EU

    Más Menos
    52 m