Episode 102: The Rise of the Embeddable PDPs
Explore the emergence of a new class of WASM (WebAssembly) embeddable Policy Decision Points (PDP) products, such as Cerbos’ ePDP and Janssen Cedarling, and why they represent a significant leap…
Identerati Office Hours
Identerati Office Hours episodes
A livestream about identity standards and the people who write them. Every episode is archived here.
Episode 101: The Future of Education & Workforce Credentials
The Digital Credentials Consortium ("DCC") is advancing the use and understanding of privacy-enhanced, portable, verifiable digital credentials in Higher Education through open source technology…
Episode 100: Is TBAC the Next Big Thing?
The number of JWT tokens out there is rapidly expanding. Beyond traditional federation tokens, like OAuth access tokens, and OpenID identity assertions, there is whole new category of “decentralized…
Episode 99: OpenID Provider Commands: New JWT Tokens for RP Acct Mgt
“OpenID Provider Commands” is a new proposed protocol via Dick Hardt and Karl McGuinness which introduces a mechanism for delivering backchannel “command tokens” (a JWT) that allows an OpenID…
Episode 98: Eclipse Decentralized Claims Protocol
The Eclipse Decentralized Claims specification defines “Dataspaces” which enable participants to secure data access using credentials associated with an identity. The specification defines a set of…
Episode 97: Patterns and Anti-patterns in Privileged Access Management (PAM)
Managing privileged access is one of the most critical aspects of cybersecurity, yet organizations often struggle with implementing it effectively. In this episode of Identerati Office Hours, we’re…
Episode 91: Powering Continuous Identity with OAuth and OpenID
Continuous identity requires new enterprise infrastructure to publish events related to a login session and token lifecycle. One solution could be Shared Signals Transmitters (SSTs) based on the…
Episode 96: iShare: Bringing Trust to Data with JWT-Based Access
The iShare ecosystems have been leveraging Token-Based Access Control (TBAC) for years to address the complex challenges of secure and seamless data sharing across enterprise boundaries within the…
Episode 93: Is TBAC the Future? Gluu, SGNL & Strata Weigh In
TBAC is a new access control model that leverages the rich context encoded in tokens, such as JWTs, to make dynamic, fine-grained access decisions. Unlike existing models like RBAC, ABAC, or ReBAC,…
Episode 95: Are JWTs bad for authz?
Relying on data in token claims for authorization is a slippery slope that can lead to unexpected failures and painful debugging sessions. JWT bloat—caused by excessive claims—can run into header…
Episode 91: Powering Continuous Identity with OAuth and OpenID
Continuous identity requires new enterprise infrastructure to publish events related to a login session and token lifecycle. One solution could be Shared Signals Transmitters (SSTs) based on the…
Episode 94: The IPSIE Standard: A New Era of Identity Interoperability
IPSIE (pronounced “ip-see”) stands for Interoperability Profiling for Secure Identity in the Enterprise. Its mission is to develop interoperability and security profiles of existing specifications.…