Identerati Office Hours
A livestream about identity standards and the people who write them. Every episode is archived here.
Machine identities have been proliferating, outnumbering human identities by a considerable margin. Despite often having far more privilege than humans, they remain under governed relative to user…
At EIC24, Eve laid out a case that digital consent is a fiction. How bad is the situation? How does it impact identity, security, and privacy? And do identitarians need to start getting their heads…
Often vendors suggest our customers to manage things–robotic process automation (RPA), service accounts, etc–in an IGA system. Naaahh, that’s not how you manage those type of accounts!
Decentralized identity wallets are the keys to unlocking vast potential business value. But when misaligned with user expectations, wallets become a closed valve to hold back the rising tide. The…
OpenFGA (Open Fine-Grained Authorization) is a CNCF sandbox project designed to provide scalable, fine-grained access control for applications. It is based on the Zanzibar model, originally developed…
“Synced passkeys” offer a convenient way to authenticate across devices – similar to how consumers have learned to authenticate with passwords. For organizations with high security needs, however,…
The recent BlastRADIUS vulnerability has hit the world by storm. The impact is that every switch, router, VPN concentrator, access point controller, etc. world-wide has to be udpated. In this…
Enterprises commonly use terms and conditions and data sharing agreements that do not legally manage consent. The “Transparency Performance Schema for Regulators” (TPS4R), developed at Kantara, is a…
There are a bunch of FIDO keys in the card form factor, but most of them don’t have an HID antenna to open door locks. Combining biometric and phsyical access is a game changer for physical access…
Shared Signals wants to limit the damage of compromised accounts used from one website to gain access to accounts on another website. CAEP uses the Shared Signals event framework to defines some…
Authorization decisions are only as good as the data used to make them. An identity data fabric, identity data lake, or master user record pulls data from many sources, which it prioritizes by…
Agama is a domain specific language (“DSL”) for identity orchestration. It’s governed at the Linux Foundation Janssen Project. There is also an Agama project archive format, which is a standard way…
