Stay ConnectedIdentity at the Center is a weekly podcast all about identity security in the context of identity and access management (IAM). With decades of real-world IAM experience, hosts Jim McDonald and Jeff Steadman bring you conversations with news, topics, and guests from the identity management industry. Do you know who has access to what?
Visit us on the web at idacpodcast.com
Copyright: © 771327
In this episode of the Identity Center Podcast, Jim McDonald discusses policy enforcement, adaptive authentication, and fraud prevention with Patrick Harding, Chief Product Architect at Ping Identity. They delve into how policy enforcement can be managed locally to maintain performance for SaaS applications while ensuring greater flexibility using standards like AuthZEN. Jim and Patrick also cover the benefits and challenges of using SAML and OpenID Connect for single sign-on (SSO) and explore the future role of AI agents in identity and access management. Additionally, they provide valuable tips for attending identity-focused conferences in Berlin and Las Vegas.
Chapters
00:00 Introduction to Policy Enforcement
01:29 Welcome to the Identity Center Podcast
01:54 Conference Discount Codes
03:03 Guest Introduction: Patrick Harding from Ping Identity
03:54 Patrick's Journey into Identity
06:56 Challenges in Adaptive Authentication
10:50 SaaS Applications and Policy Enforcement
21:18 Advanced Fraud Analytics
29:23 Integrating On-Premise and Cloud Applications
30:35 Effort and Challenges in Modernizing Applications
31:22 The Shift to OpenID Connect
32:22 SaaS Applications and Single Sign-On Costs
33:52 AI Agents and Adaptive Authentication
34:54 The Future of AI Agents in Business
39:15 Delegation and Authentication for AI Agents
43:46 The Impact of AI on Jobs and Efficiency
47:11 Advice for Future Careers in a Tech-Driven World
52:57 Conference Tips and Final Thoughts
Connect with Patrick: https://www.linkedin.com/in/pharding/
Conference Discounts!
European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac
Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
In this episode of the Identity at the Center Podcast, Jeff and Jim tackle questions from listeners around the world, including: "What certifications or skills would you recommend focusing on in 2025?" "What are some of the most common mistakes companies make when rolling out MFA, and how can they avoid them?" and "How should small and mid-sized businesses approach IAM when they don’t have the same resources as large enterprises?" Thanks to Ryan, Diego, and Omar for sending these in!
Chapters
00:00 The Unsustainable Strategy of Heroism
01:48 Introducing the Identity at the Center Podcast
02:04 Travel Tales and Tech Tips
09:57 Listener Mailbag: Career Advice for IAM Professionals
19:20 Global Listener Stats and MFA Rollout Mistakes
24:30 Exploring MFA Options
24:56 Common MFA Mistakes
25:13 The Importance of Coverage
25:44 Humorous Interlude
26:00 Understanding MFA Factors
26:29 Avoiding Knowledge-Based Authentication
26:50 Self-Serve MFA Resets
27:31 Productizing IAM
28:35 Listener Question: SMB IAM Strategies
31:35 Balancing Security Investments
32:07 Staffing and Technology Considerations
35:54 The Role of Cyber Insurance
43:10 Historical Figure Swap
47:10 Wrapping Up and Listener Appreciation
Conference Discounts!
Gartner IAM Summit - Code IDAC425 saves 425€: https://www.gartner.com/en/conferences/emea/identity-access-management-uk
European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac
Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
This episode is sponsored by Beyond Identity. Visit https://www.beyondidentity.com/idac to learn more.
In this sponsored episode of the Identity at the Center podcast, Jeff and Jim host Sarah Cecchetti, Director of Product Strategy at Beyond Identity. They discuss the transition away from password-based systems to more secure, passwordless authentication methods. Sarah explains the unique differentiators of Beyond Identity, their integration with security tools, and how they leverage cryptographic keys stored in device secure enclaves. The conversation covers user resistance to biometrics, deployment strategies, and the importance of shared security signals. Sarah also shares personal anecdotes about her backpacking trip across Spain and informs listeners about upcoming events like BeyondCon, featuring live demos and a private performance of Broadway hits.
Chapters
00:00 Introduction to Passwordless Authentication00:34 What Makes Beyond Identity Unique?01:35 Welcome to the Identity at the Center Podcast02:01 Introduction of Sarah Cecchetti03:04 Beyond Identity's Approach to Authentication09:31 Balancing Security and Usability16:00 Use Cases and Customer Success Stories19:15 Technical Insights and Future Directions24:32 Understanding Customer Policy Changes24:48 Real-World Scenarios of Shared Signals25:10 Implementing Shared Signals in Security27:47 Policy Simulation and Auditing28:31 Addressing Identity-Based Threats29:57 The Future of Passwordless Security33:56 Challenges in Identity Deployment37:49 BeyondCon and Industry Events41:12 Personal Adventures and Reflections46:42 Final Thoughts and Farewell
Connect with Sarah: https://www.linkedin.com/in/sarahcecchetti/
Learn more about Beyond Identity: https://www.beyondidentity.com/idac
Beyond Con: https://insights.beyondidentity.com/beyondcon-west-2025/about
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
Get an insider's look at Identiverse with special guest Andi Hindle, the conference chair, on this episode of 'Identity at the Center.' Andi joins Jeff and Jim to discuss the upcoming Identiverse 2025 in Las Vegas, highlighting key sessions, workshops, and keynote speakers. They explore the significance of industry conferences, delve into non-human identities, and more. Plus, tips for maximizing your conference experience and enjoying Las Vegas!
Chapters
00:00 Engaging with Industry Experts
01:26 Welcome to the Identity at the Center Podcast
01:38 Morning Banter and LinkedIn Insights
02:13 Gartner's Framework on Non-Human Identities
06:14 Conferences and Networking Opportunities
06:43 Upcoming Identity and Cloud Conferences
08:42 Identiverse 2025 Preview with Andi Hindle
15:53 The Importance of New Voices in Identity
20:44 Navigating the Identiverse Agenda
36:19 AI Experimentation and Side Projects
37:12 Pre-Registration and Conference Workshops
39:44 Key Workshop Topics and Industry Trends
48:00 Keynote Speakers and Main Stage Highlights
54:33 After Hours and Networking Events
58:07 Exploring Las Vegas: Tips and Recommendations
01:08:32 Final Thoughts and Wrap-Up
Connect with Andi: https://www.linkedin.com/in/ahindle
Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/
Conference Discounts!
Gartner IAM Summit - Code IDAC425 saves 425€: https://www.gartner.com/en/conferences/emea/identity-access-management-uk
European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
In this episode of the Identity as a Center podcast, Jeff and Jim interview Andrew Cameron, Technical Fellow in Identity and Access Management at General Motors. The discussion covers the importance of speed and security in mission-critical automotive applications, the evolution and impact of identity standards, and the integration of modern identity solutions in vehicles. Andrew also shares insights on the challenges of customer identity management, the complexity of B2B environments, and the role of AI in the future of identity. The conversation touches on GM's move towards passkeys, the centralized management of customer profiles, and the rise of car accounts.
Chapters
00:00 Introduction to Mission-Critical Identity
02:03 Welcome to the Identity as a Center Podcast
02:20 The Value of IDPro Membership
06:18 Upcoming Conferences and Discount Codes
11:39 Introducing Andrew Cameron from General Motors
12:26 Andrew Cameron's Journey in Identity
17:22 The Evolution of Identity Standards
19:09 Adopting Passwordless Authentication at GM
23:10 Challenges and Benefits of Passwordless Adoption
24:55 Role and Responsibilities of a Technical Fellow
28:32 Customer Identity Management at GM
30:00 Establishing a Scalable Authentication Platform
31:09 Centralizing Profile Information
32:05 Challenges and Benefits of Centralized Profiles
33:18 Mentorship and Collaboration in Tech
34:50 Complexities of B2B Identity Management
38:56 Global Privacy and Language Challenges
41:32 Enhancing Vehicle User Experience with Identity
46:50 Speed and Security in Vehicle Identity Systems
53:52 Future of AI in Automotive Industry
57:28 Detroit Pride and Personal Insights
01:02:20 Conclusion and Final Thoughts
Connect with Andrew: https://www.linkedin.com/in/kandrewcameron/
Conference Discounts!
Gartner IAM Summit - Code IDAC425 saves 425€: https://www.gartner.com/en/conferences/emea/identity-access-management-uk
European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac
Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
This episode is sponsored by IAMONES. Visit https://iamones.ai/idac to learn more.
In this sponsored episode of the Identity at the Center podcast, Jim welcomes Andrea Rossi from IAMONES, an innovative conversational identity governance platform. They discuss the revolutionary approach IAMONES takes in simplifying identity and access management (IAM) using large language models (LLM). Andrea explains how IAMONES aims to eliminate the need for complex roles and middle layers by providing business users with direct and comprehensible access to system functions. The discussion dives into the practical applications of LLM in enhancing existing IAM systems, particularly focusing on making permissions and entitlements more understandable and manageable for business users, auditors, and administrators. The episode also highlights the ease of integrating IAMONES with existing identity infrastructures and offers insights into reducing the burden of maintaining multilingual UIs. Tune in to learn more about the potential of AI in transforming IAM.
Chapters
00:00 Introduction to Simplifying Access Management
02:11 Welcome to the Identity at the Center Podcast
02:23 Sponsor Spotlight: Andrea Rossi from IAMONES
05:04 The Story Behind the Name 'IAMONES'
08:16 Conversational Identity and Large Language Models
12:35 Revolutionizing IGA with AI
17:22 The Future of AI in Identity Management
23:08 Enhancing IGA Configuration with Natural Language
31:37 Understanding Outcomes in Identity Governance
32:09 The Shift from RBAC to PBAC
33:35 Challenges with Role Explosion
34:02 Introducing Temporal Identity Graph
35:27 Simplifying Access for Business Users
39:36 Ensuring Proper Data Visibility
46:06 Implementing the Identity Gateway
48:45 Customer Feedback and Success Metrics
52:07 Future of AI in Identity Management
56:21 Travel Tips for Visiting Italy
Connect with Andrea: https://www.linkedin.com/in/arossi67
Learn more about IAMONES: https://iamones.ai/idac
Ramones - Blitzkrieg Bop (Official Music Video): https://www.youtube.com/watch?v=268C3N2dDYk
Microsoft’s Satya Nadella on the evolution of SaaS: https://www.youtube.com/watch?v=a_RjOhCkhvQ&t=22s
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at idacpodcast.com and watch at https://www.youtube.com/@idacpodcast
Join Jeff and Jim on the Identity at the Center podcast as they speak with Matt Franko, Principal at RSM, about the critical role of identity in cybersecurity. Matt discusses how risk management and digital identity intersect, providing insights into top attack vectors like phishing and weak passwords. They delve into the importance of strong identity practices and share real-world examples of risk scenarios. The episode also touches on the organizational structure of IAM, the significance of user awareness, and the potential of AI and cloud in enhancing security. As a special treat, Matt shares his passion for coaching youth sports, highlighting the values and lessons learned from the field.
Chapters
00:00 Simplifying Tech for Executives
00:46 Top Attack Vectors in Cybersecurity
02:07 Podcast Introduction and Big News
02:34 CyberArk Acquires Zilla Security
04:25 Guest Introduction: Matt Franko
07:05 Matt’s Journey into Cybersecurity
12:28 Understanding Cyber Strategy
14:06 Risk Management in Digital Identity
26:29 The Role of Identity in Cybersecurity
31:29 Buzzwords and Trends in Cybersecurity
36:51 The Risk of Excessive Access
38:33 Minimizing the Attack Surface
39:37 The Holy Wars of Identity Management
40:02 Where Should IAM Reside?
41:08 The Importance of Leadership in IAM
43:38 Shared Ownership Model in IAM
47:52 The Role of the CISO
56:05 Coaching and Leadership in Sports
01:08:00 Closing Thoughts and Farewell
Connect with Matt: https://www.linkedin.com/in/matthew-franko-20b6bb7/
Learn more about RSM: https://rsmus.com/services/risk-fraud-cybersecurity/cybersecurity-business-vulnerability/identity-and-access.html?cmpid=ola:45559-idac:bb01
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
In this episode of the Identity at the Center Podcast, hosts Jeff and Jim dive deep into group management, AI, and organizational governance with David Johnson, Principal PM Architect at Microsoft. Join the conversation as David shares his extensive experience managing Microsoft 365, Entra, and SharePoint permissions, and provides best practices for guest management and labeling sensitive data. David also discusses how these paradigms shift with the introduction of AI-driven tools like Copilot. Tune in to understand the essential steps to secure your IT infrastructure and ensure efficient data management.
Chapters
00:00 Introduction to AI and Permissions00:29 Reflecting on SharePoint Innovations00:59 Group Membership Management01:49 Podcast Introduction and Baseball Talk04:25 Upcoming Conferences and Discount Codes08:19 Interview with David Johnson12:40 Managing Microsoft 365 Groups24:29 Understanding Guest Invitations in Microsoft Environments25:09 Defining Guests and Their Access26:45 Common Mistakes in Guest Setup28:22 Lifecycle Management for Guests29:53 Delegated Authority and Guest Management32:28 SharePoint and Teams Integration38:50 Future Trends in Identity and Access Management43:29 Reflections on Microsoft Leadership45:16 Personal Insights and Travel Tips49:22 Conclusion and Farewell
Connect with David:https://www.linkedin.com/in/david-johnson-a12909196/
GMM GitHub repo is available to the public: Https://github.com/microsoftgraph/group-membership-management-tenant
Learn more or for installation support: Contact GMM inquiries atGMMinquiries@microsoft.com
Conference Discounts!
Gartner IAM Summit - CodeIDAC425 saves 425€:https://www.gartner.com/en/conferences/emea/identity-access-management-uk
European Identity and Cloud Conference 2025 - Use codeidac25mko for 25% off:https://www.kuppingercole.com/events/eic2025?ref=partneridac
Identiverse 2025 - Use code IDV25-IDAC25 for 25% off:https://identiverse.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web athttp://idacpodcast.com
In this episode of the Identity at the Center podcast, hosts Jeff and Jim discuss the vital role of user access reviews, device identity, and the evolving landscape of Identity Access Management (IAM) with guest Stephen Washington, Head of IAM at Discover Financial. The conversation delves into regulatory compliance, the use of AI in IAM, and practical steps for improving user access certifications. They also explore the importance of managing service accounts, innovations in IGA, and the role of identity in modern cybersecurity frameworks. The episode wraps up on a lighter note with a chat about fitness challenges like Tough Mudder and personal cheese preferences for grilled cheese sandwiches.
Chapters
00:00 Introduction to Regulatory Compliance in Financial Services 01:54 Welcome to the Identity at the Center Podcast 02:07 Exploring Device Identity 03:19 The Role of Identity in Modern Security 06:44 Engaging with the IAM Community 10:31 Upcoming Conferences and Events 13:58 Interview with Stephen Washington 25:36 The Importance of User Access Reviews 33:55 Backend Changes in IGA Systems 35:04 The Concept of Identity Data Lake 36:37 AI and Identity Fatigue 37:22 Importance of Identity Hygiene 38:32 Challenges with Access Reviews 39:42 Regulatory Compliance and Policy Changes 41:06 Advice for Practitioners on Access Reviews 45:47 NYDFS and User Access Reviews 47:41 The Role of NIST Cybersecurity Framework 52:35 Training Auditors and Policy-Based Access Control 57:38 Fitness and Stress Relief 01:05:38 Grilled Cheese and Final Thoughts
Connect with Stephen: https://www.linkedin.com/in/stephen-washington-jr-5569b57/
Gartner IAM Summit - Code IDAC425 saves 425€: https://www.gartner.com/en/conferences/emea/identity-access-management-uk
European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac
Identiverse 2025 - Use code IDV25-IDAC25 for 25% off: https://identiverse.com/
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
Jeff and guest co-host Sean O'Dell, an identity expert from Disney, discuss the importance of knowing and cleaning data to optimize identity and access management. They delve into topics like Shared Signals Framework (SSF) and Continuous Access Evaluation Profile (CAEP), and how these standards are paving the way for event-driven IAM. They also touch on the complexities of verifying identities, role management, and session management in a zero-trust environment. The episode includes insights into the future of identity practices, emphasizing the shift from runtime to event-driven models and the critical role of accurate data.
Chapters
00:00 Introduction: The Importance of Data Integrity 02:16 Welcome to the Identity at the Center Podcast 03:12 Catching Up with Sean O'Dell 09:23 The Role of Identity in Business 12:36 Understanding Shared Signals Framework (SSF) and CAEP 20:49 The Future of Identity and Access Management (IAM) 32:36 Continuous Management and Identity Verification 33:33 Contextual Signals and Security Regulations 34:44 Data Hygiene and Business Process Challenges 37:52 Centralizing Data for Better Identity Management 44:08 Session Management and Access Control 50:04 Zero Trust and Ephemeral Access 55:51 Defining Continuous Identity 56:50 Fun and Lighter Notes
Connect with Sean: https://www.linkedin.com/in/seanodentity/
European Identity and Cloud Conference 2025 - Use code idac25mko for 25% off: https://www.kuppingercole.com/events/eic2025?ref=partneridac
Connect with us on LinkedIn:
Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/
Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/
Visit the show on the web at http://idacpodcast.com
Our TOPPODCAST Picks 
