Identity at the Center #402 - An Update on SSF and CAEP with Atul Tulshibagwale
Feb 16, 2026
Atul Tulshibagwale, CTO of Signal and SSF/CAEP co-chair, brings updates on Shared Signals Framework and CAEP and their industry rollout. He covers production adoption by major providers, how SSF/CAEP enable continuous session and identity signals, plans for certification, and applying these standards to agentic identities. He also shares Signal’s CrowdStrike acquisition news and a lively Kenya safari anecdote.
AI Snips
Chapters
Transcript
Episode notes
Asynchronous Security Events For The Web
- Shared Signals provides an asynchronous, reliable transport for security events across internet parties using signed JWT tokens as the unit of communication.
- CAEP profiles those events for continuous session evaluation so services can react to changes like device noncompliance in real time.
Session Security As A Continuous Process
- CAEP treats a user session as continuous and non-prescriptive, defining events that matter to zero trust decisions across systems.
- That lets a receiver modulate access dynamically when conditions like device posture or credential compromise change.
Standards Reached Production And Big Tech Buy-In
- Final 1.0 releases for CAEP and Shared Signals were published, removing a major adoption barrier for vendors.
- Big platform adopters like Apple and Google are already integrating SSF in production or closed beta, accelerating momentum.