Episode 160: Redefining Data Security for AI Agents
As AI driven systems increasingly automate decision making, organizations face new challenges in securing privleged access. This session explores how policy driven, ephemeral credentials and…
Identerati Office Hours
Identerati Office Hours episodes
A livestream about identity standards and the people who write them. Every episode is archived here.
Episode 159: The Rise of JIT Access
Most organizations still run on permanent privilege: SSH keys that never expire, service accounts with admin rights, and approval flows that take longer than the actual work. The result? 77% of…
Episode 157: Third Party Risk Mgt (TPRM) needs an intervention
Kamal asserts that Third Party Risk Management (TPRM) needs collective and coordinated intervention--in the form of extraordinary leadership and concerted action by security leaders on a scale we…
Episode 158: What Is Declarative IGA?
In this episode we’ll explore the shift from legacy role-based IGA toward a “what do we want done” mindset as proposed in the Declarative IGA Manifesto, and unpack what it really means to declare…
Episode 156.5: Gartner IAM Authz Chat with Sarah
Quick chat with Sarah from the Gartner IAM 2025 expo floor on all things authz, especially Cedar.
Episode 156: OPA - SpiceDB Connector
Roland wrote a plugin that adds support for querying and manipulating relations from Authzed SpiceDB via gRPC as custom builtin commands for Open Policy Agent. Why does this make sense? How's it…
Episode 155: Applying Governance to Digital Trust
Learn how a risk-based trust model is architecting how technology ecosystems are governed. Hear how the C2PA and GLEIF have used the Trust Over IP Governance Metamodel to provide a transparent and…
Episode 154: Twilio Acquires Stytch: The Future of Agent-Ready Identity
Join us for a special Identerati Office Hours with Reed McGinley-Stempel, co-founder and CEO of Stytch, fresh on the heels of its acquisition by Twilio. We’ll dig into how this move expands Stytch’s…
Episode 153: AI Agent Trust via Decentralized Machine Identity
True AI agent trust comes from binding actions to verifiable agent identities, enabling attested, decentralized execution rather than fragile token-passing models. Join us for a deep authz discussion…
Episode 152: Citizen Identity: Lessons from Social Security
Leland Dudek, former acting head of the Social Security Administration from February to May 2025, shares his perspective on one of the government’s most pressing challenges: citizen identity…
Episode 151.875: KubeCon Live: Taming Kubernetes Access Control
Have you ever struggled writing least-privilege access control policies for Kubernetes? Are you concerned about the wide permissions of installed Helm charts? Do you manage to regularly audit who has…
Episode 151.75: KubeCon Live: Token Exchange Trends
Chat with Marc Boorshtein at KubeCon 25 about new trends in token exchange and his thoughts on Kubnernetes SIG Auth session: