#280 - OpenID’s AuthZEN with Omri Gazitt of Aserto

On this episode of Identity at the Center, Jim McDonald and Jeff Steadman are joined by Chad Wolcott, Managing Director at RSM US LLP, to peel back the layers of the identity industry. They delve into the complexities of identity consulting, discussing the challenges and triumphs of implementing and managing IAM solutions. From Chad's early days of designing robots to Jim's arcade escapades, the trio shares their most unusual jobs and the lessons learned from their unique experiences. They also tackle pressing topics like the future of passwordless authentication, the role of AI and analytics in identity, and the evolution of authorization from RBAC to dynamic access models. The conversation takes a turn into the realm of IAM horror stories, highlighting the pitfalls of over-engineering solutions and the importance of aligning with organizational change. As they gear up for Identiverse, they share their excitement for reconnecting with industry peers, diving into sessions on AI and identity security, and enjoying the Vegas experience. Tune in for an insightful and candid discussion on the state of identity security, the potential of AI, and the power of automation in the ever-evolving IAM landscape. Connect with Chad: https://www.linkedin.com/in/chad-wolcott/ Meet up with our RSM team at Identiverse 2024! Schedule at https://rsmus.com/events/2024-events/join-rsm-at-identiverse-2024.html Learn more about RSM Digital Identity consulting: https://rsmus.com/services/risk-fraud-cybersecurity/cybersecurity-business-vulnerability/identity-and-access.html Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter. 🔑 Episode Keywords Identity Security Practitioners, Data Breaches, Identity Access Management (Iam), Digital Identity, Identity At The Center Podcast, Access Control, Security Automation, Identity Governance, Passwordless Authentication, Biometrics, Fido Alliance, Multifactor Authentication (Mfa), Policy-Based Access Control (Pbac), Attribute-Based Access Control (Abac), Role-Based Access Control (Rbac), Ai In Identity Management, Identity Analytics, Identity Consulting, Rsm Us Llp, Identity Program Management

In this episode, hosts Jim McDonald and Jeff Steadman welcome Henrique Teixeira, Senior Vice President of Strategy at Saviynt. Henrique shares his journey into the identity field and reveals how he became a leading figure in digital identity. He discusses his time at Gartner, where he shared his expertise as the conference chair of the IAM summit and created identity scopes such as Cloud Infrastructure & Entitlement Management (CIEM) and Identity Threat Detection & Response (ITDR). Henrique also provides intriguing insights into the role of AI in identity and his transition from Gartner to his current role at Saviynt. The episode ends on a lighter note with Henrique sharing some memorable experiences from his skiing adventures. Connect with Henrique: https://www.linkedin.com/in/bernardes/ Learn more about Saviynt: https://saviynt.com/ Identiverse 2024: As an IDAC listener, you can register with 25% off by using code IDV24-IDAC25 at https://events.identiverse.com/identiverse2024/register?code=IDV24-IDAC25 Meet up with our RSM team! Schedule at https://rsmus.com/events/2024-events/join-rsm-at-identiverse-2024.html Attending Identity Week in Europe, America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: Europe: https://www.terrapinn.com/exhibition/identity-week/ America: https://www.terrapinn.com/exhibition/identity-week-america Asia: https://www.terrapinn.com/exhibition/identity-week-asia/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter. 🔑 Episode Keywords Identity And Access Management (Iam), Access Management Research, Magic Quadrant, Identity At The Center Podcast, Jim Mcdonald, Jeff Steadman, Customer Experience, Atlanta Hartsfield Airport, Identiverse Conference, Continuous Access Evaluation Profile (Cape), Identity Week Europe, Identity Week America, Identity Week Asia, Henrique Teixeira, Savian Strategy, Bmc Software, Control Sa, Rsa Conference, Cloud Infrastructure Entitlement Management (Ciem), Identity Threat Detection And Response (Itdr)

In this episode of Identity at the Center, hosts Jim McDonald and Jeff Steadman delve into the intricate world of authorization within the IAM space with Omri Gazit, co-founder and CEO of Asserto, and co-chair of the AuthZEN working group at the OpenID Foundation. They tackle the evolution of authorization, from the days of basic role-based access control to the current landscape of fine-grained authorization, including policy and relationship-based access control models. Omri shares his insights on the importance of standards in authorization, the role of developers in adopting these standards, and the journey towards a single authorization control plane for multiple applications. He also discusses the challenges organizations face with over-provisioned access and the potential of AI in enhancing authorization decisions. Listeners will also get a personal glimpse into Omri's life outside of IAM, learning about his passion for kung fu and how the discipline and journey of martial arts have influenced his professional ethos. Tune in for a comprehensive discussion on the future of authorization and the steps IAM practitioners can take to evolve their organization's approach to this critical aspect of identity security. Connect with Omri: https://www.linkedin.com/in/ogazitt/ Learn more about Aserto: https://www.aserto.com/ AuthZEN: https://openid.net/wg/authzen/ Google Zanzibar: https://research.google/pubs/zanzibar-googles-consistent-global-authorization-system/ Identiverse 2024: As an IDAC listener, you can register with 25% off by using code IDV24-IDAC25 at https://events.identiverse.com/identiverse2024/register?code=IDV24-IDAC25 Meet up with our RSM team! Schedule at https://rsmus.com/events/2024-events/join-rsm-at-identiverse-2024.html Attending the European Identity and Cloud Conference in Berlin? Use Discount Code: EIC24idac25 for 25% off. Register at https://www.kuppingercole.com/events/eic2024 Attending Identity Week in Europe, America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: Europe: https://www.terrapinn.com/exhibition/identity-week/ America: https://www.terrapinn.com/exhibition/identity-week-america Asia: https://www.terrapinn.com/exhibition/identity-week-asia/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com and follow @IDACPodcast on Twitter. 🔑 Episode Keywords Authorization, Identity Management, Iam Podcast, Fine-Grained Authorization, Authentication, Digital Identity Consulting, Pci Compliance, Qsa (Qualified Security Assessor), Identity Strategy, Rsm Consulting, Identity Governance, Role-Based Access Control (Rbac), Policy-Based Access Control (Pbac), Relationship-Based Access Control (Rebac), Identity At The Center, Asserto, Authzen, Openid Foundation, Zanzibar, Sso (Single Sign-On)

In this episode of the Identity at the Center Podcast, hosts Jim McDonald and Jeff Steadman sit down with Patrick Harding, Chief Product Architect at Ping Identity, to discuss the fascinating intersection between AI and the IAM industry. They explore Harding's journey into the IAM industry, his view on the definition of AI, and dive into a thought-provoking conversation about the future of AI, its potential impacts on identity, and the importance of AI governance. They also touch on the Ping + ForgeRock product roadmap. Don't miss this insightful conversation! Connect with Patrick: https://www.linkedin.com/in/pharding/ Learn more about Ping Identity: https://www.pingidentity.com/ Identiverse 2024: As an IDAC listener, you can register with 25% off by using code IDV24-IDAC25 at https://events.identiverse.com/identiverse2024/register?code=IDV24-IDAC25 Attending the European Identity and Cloud Conference in Berlin? Use Discount Code: EIC24idac25 for 25% off. Register at https://www.kuppingercole.com/events/eic2024 Attending Identity Week in Europe, America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: Europe: https://www.terrapinn.com/exhibition/identity-week/ America: https://www.terrapinn.com/exhibition/identity-week-america Asia: https://www.terrapinn.com/exhibition/identity-week-asia/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter. 🔑 Episode Keywords Identity At The Center Podcast, Iam (Identity And Access Management), Nonprofit Setup, Digital Identity, Conference Attendance, Youtube Growth Strategies, Ai In Identity Security, Generative Ai, Deepfakes, Cybersecurity, Access Management, Ping Identity, Forgerock, Identity Governance, Chat Gpt, Phishing Attacks, Identity Verification, Security Policies, Artificial Intelligence, Identity Industry Trends

In this Sponsor Spotlight episode of Identity at the Center, hosts Jim McDonald and Jeff Steadman sit down with Venkat Raghavan, founder and CEO of Stack Identity. They dive deep into the critical issue of identity security in the cloud, shedding light on the pervasive problem of over-provisioned access and the risks it poses to organizations. Venkat emphasizes the asymmetric challenge defenders face against attackers and the importance of continuous access management in reducing the attack surface. Throughout the conversation, Venkat introduces listeners to Stack Identity's innovative approach, focusing on simplifying the removal of access to prevent breaches. He illustrates how Stack Identity acts as a copilot, guiding organizations to identify and mitigate identity-related risks through their Shadow Access Risk Assessment tool, offering actionable insights within an hour of deployment. Listeners will also get a sneak peek into Stack Identity's presence at the 2024 RSA conference, where they will showcase their solutions to help businesses clamp down on excessive cloud permissions. Venkat also shares personal anecdotes, including his pre-competition rituals in competitive tennis, highlighting the importance of mental preparation in both sports and cybersecurity. For a hands-on experience with Stack Identity and to assess your organization's shadow access risk for free, visit stackidentity.com/idac. Connect with Venkat on LinkedIn and don't miss the opportunity to meet the team at RSA, booth N 6564 in the North Expo Hall. Connect with Venkat: https://www.linkedin.com/in/venkatraghavan1/ Learn more about Stack Identity: https://stackidentity.com/idac LinkedIn: https://www.linkedin.com/company/stack-identity AWS Marketplace: https://aws.amazon.com/marketplace/pp/prodview-yd2ezeebcfq3o 2024 RSA Conference Booth - N-6564 (in the North Expo Hall) Shadow Access Risk Assessment: https://stackidentity.com/shadow-access-risk-assessment/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at https://idacpodcast.com and check out our YouTube channel at https://www.youtube.com/@identityatthecenter

In this episode, hosts Jim and Jeff reached a major milestone with 300,000 downloads. They took the opportunity to answer mailbag questions using AI, providing their own critique of the AI responses. Questions ranged from key IAM metrics for organizations to track, challenges of implementing IAM strategies in large multinational companies, and upcoming trends in the IAM sector. The hosts also posed a fun question: Would you rather have the ability to teleport or the ability to read minds? Tune in for their answers and more! Identiverse 2024: As an IDAC listener, you can register with 25% off by using code IDV24-IDAC25 at https://events.identiverse.com/identiverse2024/register?code=IDV24-IDAC25 Attending the European Identity and Cloud Conference in Berlin? Use Discount Code: EIC24idac25 for 25% off. Register at https://www.kuppingercole.com/events/eic2024 Attending Identity Week in Europe, America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: Europe: https://www.terrapinn.com/exhibition/identity-week/ America: https://www.terrapinn.com/exhibition/identity-week-america Asia: https://www.terrapinn.com/exhibition/identity-week-asia/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

In this thought-provoking episode of Identity at the Center, hosts Jim McDonald and Jeff Steadman engage in a candid conversation with security researcher Kat Traxler from TrustOnCloud. They delve into the intricacies of cloud identity management, discussing the unique challenges and strategies for securing assets in cloud environments like GCP and AWS. Kat sheds light on the importance of understanding the resource hierarchy in GCP and the nuances that differentiate it from AWS. The trio also explores the evolution of IAM tools and their applicability in the cloud, the debate between least privilege and zero standing privilege, and the ongoing journey toward securing the cloud beyond IAM. As they unpack the complexities of cloud security, Kat shares her insights on the significance of asset inventories and the impact of policy inheritance on cloud platforms. The conversation also touches on the future of cloud security conferences and the value of hands-on experiences in understanding cloud security. Amidst the technical deep dive, the episode takes a lighter turn as the hosts and guest contemplate what life might look like outside the realm of technology, revealing personal aspirations ranging from farming to bronze sculpting. For those looking to expand their cloud security knowledge, Kat recommends checking out the GCP 101 series on her blog and the Forward Cloud SEC conference for a comprehensive learning experience. Connect with Kat: https://www.linkedin.com/in/kat-traxler-85a6592/ GCP 101 Series (Blog): https://kattraxler.cloud/gcp/iam/101/2024/03/03/gcp-series-101.html Google Cloud Adoption Framework: https://cloud.google.com/adoption-framework Learn more about TrustOnCloud: https://trustoncloud.com/ fwd:cloudsec conference: https://fwdcloudsec.org/ Identiverse 2024: As an IDAC listener, you can register with 25% off by using code IDV24-IDAC25 at https://events.identiverse.com/identiverse2024/register?code=IDV24-IDAC25 Attending the European Identity and Cloud Conference in Berlin? Use Discount Code: EIC24idac25 for 25% off. Register at https://www.kuppingercole.com/events/eic2024 Attending Identity Week in Europe, America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: Europe: https://www.terrapinn.com/exhibition/identity-week/ America: https://www.terrapinn.com/exhibition/identity-week-america Asia: https://www.terrapinn.com/exhibition/identity-week-asia/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

In this episode, Jim and Jeff welcome back Sandy Bird, the CTO and Co-Founder of Sonrai Security, for a sequel to their first sponsor spotlight. Sandy returns to discuss the groundbreaking Cloud Permissions Firewall with Permissions on Demand. The trio dives into how this new solution revolutionizes the way organizations can clamp down on excessive cloud permissions, streamline operations, and secure their cloud environments with unprecedented speed and efficiency. The discussion illuminates the concept of "default deny," the exhilaration of zapping "zombie" identities, and the seamless integration with cloud native tools. Sandy also shares insights on how customers can measure success with Sonrai’s solution and the significant security benefits provided. For a visual walkthrough of Sonrai’s Cloud Permissions Firewall, visit http://sonrai.co/idac to see the demo in action and learn how you can try it out with a 14-day free trial. And if you're at RSA, AWS re:Inforce, or Gartner IAM, look for the Sonrai Security booth and experience the epiphany moment for yourself. Connect with Sandy on LinkedIn: https://www.linkedin.com/in/sandy-bird-835b5576 Learn more about Sonrai Security: https://sonrai.co/idac Introducing the Cloud Permissions Firewall (YouTube): https://www.youtube.com/watch?v=ffQbM6KGDbY Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter. Episode Keywords Identity And Access Management (Iam), Cloud Security, Aws, Azure, Gcp (Google Cloud Platform), Least Privilege, Identity Risk, Cloud Permissions Firewall, Infrastructure As Code, Security Operations (Secops), Cloud Operations (Cloudops), Permissions Management, Excessive Privileges, Zombie Identities, Identity Governance, Access Analyzer, Sensitive Permissions, Role-Based Access Control (Rbac), Service Control Policies (Scp), Cloud Native Security

In this episode, hosts Jim McDonald and Jeff Steadman engage in a far-reaching discussion with John Podboy, a Senior Vice President in Cybersecurity for a major bank. They delve into the evolving landscape of identity in the banking industry, the impact of AI and indicators of compromise on identity data, and the potential future innovations like FIDO2 and passkeys. John also shares his insights on the importance of understanding business objectives and the role of identity in driving revenue and customer trust. Plus, don't miss the wine talk towards the end, where John reveals his passion for vineyards and the type of wine he would specialize in if he had his own. Connect with John: https://www.linkedin.com/in/johnpodboy/ Identiverse 2024: As an IDAC listener, you can register with 25% off by using code IDV24-IDAC25 at https://events.identiverse.com/identiverse2024/register?code=IDV24-IDAC25 Attending the European Identity and Cloud Conference in Berlin? Use Discount Code: EIC24idac25 for 25% off. Register at https://www.kuppingercole.com/events/eic2024 Attending Identity Week in Europe, America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: Europe: https://www.terrapinn.com/exhibition/identity-week/ America: https://www.terrapinn.com/exhibition/identity-week-america Asia: https://www.terrapinn.com/exhibition/identity-week-asia/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

In this episode, hosts Jim and Jeff sit down with Martin Kuppinger, Founder and Principal Analyst at KuppingerCole Analysts. Making his fourth appearance on the show, Martin shares what he's been up to since the last time they spoke in July 2023. The conversation also explores Martin's insights on who should be in charge of IAM and the role of the CISO, based on his LinkedIn post. The hosts and Martin then delve into a discussion about the upcoming 2024 European Identity and Cloud Conference in Berlin. Martin shares his impressions of the city, provides details about the conference, and gives advice for first-time attendees. They also discuss the main themes of this year's conference and what he's excited for. Finally, they discuss a KuppingerCole blog post about the end-of-life of SAP Identity Management. Connect with Martin: https://www.linkedin.com/in/martinkuppinger/ Who should be in charge of IAM? And what's the role of the CISO?: https://www.linkedin.com/pulse/who-should-charge-iam-whats-role-ciso-martin-kuppinger-vpncc/?trackingId=94hCoE7ifcjDrxv93V72lw%3D%3D SAP Identity Management End-of-Life: What’s Next?: https://www.kuppingercole.com/blog/kuppinger/sap-identity-management-end-of-life-whats-next Identiverse 2024: As an IDAC listener, you can register with 25% off by using code IDV24-IDAC25 at https://events.identiverse.com/identiverse2024/register?code=IDV24-IDAC25 Attending the European Identity and Cloud Conference in Berlin? Use Discount Code: EIC24idac25 for 25% off. Register at https://www.kuppingercole.com/events/eic2024 Attending Identity Week in Europe, America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: Europe: https://www.terrapinn.com/exhibition/identity-week/ America: https://www.terrapinn.com/exhibition/identity-week-america Asia: https://www.terrapinn.com/exhibition/identity-week-asia/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.