Episode 47: Is IAM asleep at the wheel?
In the past year AI has hit center stage – the tech world is talking about the future potential and organizations are implementing first projects. But the identity world…crickets! In this chat we…
Identerati Office Hours
Identerati Office Hours episodes
A livestream about identity standards and the people who write them. Every episode is archived here.
Episode 46: Multi-layer authz? Yes please!
Q: Where should you enforce your authorization policy? A: Everywhere you can! There are four common scenarios and enforcement points for a defense-in-depth strategy: ⚡ during the authentication…
Episode 45: Intro to the Cedarling
Cedar is a policy syntax invented by Amazon. It’s used by the AWS Verified Permissions, Authz-as-a-Service offering. Gluu is working on a new product at the Janssen Project called the…
Episode 44: Securing identity and context in microservices
Defending against privileged user compromise and software supply chain attacks requires newer standards that can reduce the trust in non-human (or machine) identities used by services to communicate…
Episode 43: Intersection of IAM with cloud
Managing IAM for your own users and employees is hard enough, and with the adoption of cloud (including SaaS) it’s only getting harder. Especially when you consider the addition of 3rd parties into…
Episode 41: National ID Challenges
What are the priorities and tradeoffs of certain approaches to building a national identity infrastructure? How can you build a system that enables people to assert their identity and claims, and…
Episode 40: You got the JWT… now what?
Once you have obtained a JSON Web Token (JWT), the next steps involve understanding, securely storing, and effectively using it for authentication and communication within your web application. A JWT…
Episode 39: Blockchain vs. The Right To Be Forgotten – one Solution
1. Can a blockchain be made to support the many new regulations that require the “Right of Erasure”? 2. If so, how can it then remain an immutable source of truth? 3. Does a solution require a…
Episode 38: Immortal passwords versus vulnerable humans
Immortal Passwords refers to the concept of password practices and protocols that are designed to be incredibly secure and resistant to various forms of cyber-attacks, essentially making them…
Episode 37: The Rise of Browser Identity APIs
In the last few years, there have been a number of new browser APIs proposed and implemented that assist developers to authenticate people or establish identity. This talk will discuss a few of…
Episode 36: Deepfakes II: BioID’s Combat Strategy
The applications for Deepfake Detection are numerous, especially as generative AI has advanced significantly. The question arises: can online media and identity verification processes still be deemed…
Episode 35: Next Gen Open Banking and Bank ID is beginning
The increased mobility of users and their demand for personalized, unified omnichannel access experiences has stretched federated IAM beyond its limits. Meanwhile, the need for organizations to…