Episode 142: IGA: From automation to intelligence
How will Identity Governance & Access (IGA) programs evolve beyond rote automation into adaptive, machine-learning-driven intelligence. Manoj will share insights from his recent articles on applying…
Identerati Office Hours
Identerati Office Hours episodes
A livestream about identity standards and the people who write them. Every episode is archived here.
Episode 141: OBO OAuth: Encoding Delegation with JWTs
Engineers from WSO2 have proposed an IETF draft for OAuth "On-Behalf-Of User Authorization for AI Agents" or “OBO OAuth”, which extends standard OAuth flows to support secure delegation to AI agents.…
Episode 140: OpenSearch Conference: Securing Data with Cedar
The fine-grained access control challenge is no longer just “who can access the database,” but "what data they should see once access is granted." In this talk, we introduce a new security plugin for…
Episode 139: Do We Really Need an Identity "Event Hub"?
In this episode of Identerati Office Hours, we’ll explore the role of an Event Hub in the modern IAM stack—an orchestration layer highlighted in Sean O’Dell and Andrew Cameron’s Identiverse keynote.…
Episode 138: What on Earth is silent MFA?
Most IAM teams have done the right things: deploying modern MFA, supporting passkeys, and educating users about threats. But people still default to what’s familiar — passwords and TOTPs. In this…
Episode 137: iOPA: Styra Gets a Genius Bar Makeover
Mike Schwartz and Or Weis (Co-Founder / CEO, Permit.io) debate Apple’s acquisition of Styra, the commercial backer of Open Policy Agent (OPA). With Styra’s enterprise offerings winding down and its…
Episode 136: 10 Years of Identiverse
In this special retrospective episode of Identerati Office Hours, we sit down with Andi Hindle, who served as the conference chair for Identiverse from 2015 to 2025. Andi will shares his reflections…
Episode 135: Cedar Analysis Toolkit
Dive into Cedar Analysis, AWS’s new open-source toolkit designed to give developers rigorous insight into their Cedar authorization policies. Learn how the Cedar Symbolic Compiler translates your…
Episode 134: OIDC-A: Securing AI Agent Identity
Traditional OAuth and OpenID Connect protocols are inadequate to secure AI agents acting on behalf of users across complex organizational boundaries. The OpenID Connect for Agents (OIDC-A) draft…
Episode 133: Governing the Agentic Web
The agentic web is coming — a world where AI agents act on our behalf, coordinate with one another, and make decisions at scale. But with new autonomy comes new risk: How do we know who or what to…
Episode 131: What is Janssen Project?
Join us for a special Identerati Office Hours featuring Dhaval Desai, Community Manager for the Linux Foundation's Janssen Project. We'll explore how Janssen is advancing open source identity and…
Episode 130: PAM 101
How does PAM work? When is it helpful? Who are the main vendors? Why is it not going away? Mike Schwartz asserts that PAM is proof that we've previously failed at authorization--each PAM solution…