Episode 129: Function-Based Access Control?
In this session, we’ll explore how traditional access control models—RBAC, ABAC, and the whole alphabet soup—are showing their age in the face of modern business needs. We’ll question whether these…
Identerati Office Hours
Identerati Office Hours episodes
A livestream about identity standards and the people who write them. Every episode is archived here.
Episode 128: Youth-Powered Solutions for Africa’s Digital ID Future
While digital identity systems are gaining ground across Africa, true adoption requires more than just infrastructure—it demands practical use cases and local capacity to build and sustain them. The…
Episode 127: What is The First Person Network?
How can we prove we're real people online without surrendering our biometrics? Join us for a conversation with Drummond Reed, co-organizer of the First Person Project, on building privacy-preserving,…
Episode 126: Personas: The Next Security+UX Control We Need for Identity?
Humans are inherently complex creatures. Eve and Jacob suggest that using login accounts in a traditional fashion to solve access challenges is failing to address the challenges of protecting,…
Episode 125: Is W3C's Credentials API the Future?
There's been a lot of noise recently around the potential adoption of the W3C Digital Credentials API for the EUDI Wallet. While some of the issues addressed by this API can be solved in other ways,…
Episode 124: Authz Signal Jam
In this new 60 minute format, Mike and Gabriel will improvise a conversation prompted by some latest industry news. We are also encouraging audience participation in the episode! Audience questions…
Episode 123: Outsiders Within: Managing Access in the Extended Enterprise
In today’s hyper-connected business landscape, the lines between internal and external users have all but disappeared. Contractors, third-party vendors, freelancers, offshore teams, and business…
Episode 122: Cedar v. Rego v. OpenFGA
Cedar’s simple and intuitive syntax supports common authorization use-cases with readable policies, naturally leveraging concepts from role-based, attribute-based, and relation-based access control…
Episode 120: Adapting Existing Identity Infrastructure to Manage AI Agent Identities
As AI agents evolve from passive tools to autonomous actors capable of decision-making and goal-driven behavior, identity systems must evolve with them. This webinar explores how organizations can…
Episode 118: IAM at 2035: A Future Guide to Identity Security
Don't miss this discussion with Simon, author of the recently released book "IAM at 2035: A Future Guide to Identity Security". Where will our IAM world take us over the next decade? IAM at 2035 aims…
Episode 117: Agent Name Service (ANS) Protocol
Developed under the OWASP GenAI Security Project – Agentic Security Initiative, the Agent Name Service (ANS) Protocol has some interesting properties for agent identity and discovery: Could a…
Episode 116: Replays Rejected: Fortifying Microservices Against Stolen Tokens
At the OAuth Security Workshop 2025, Mert and Naveem co-presented a session titled "Enhancing Security with Transaction Tokens," where they introduced a novel approach to mitigating cookie theft and…