Identity at the Center

Atul Tulshibagwale, CTO of Signal and SSF/CAEP co-chair, brings updates on Shared Signals Framework and CAEP and their industry rollout. He covers production adoption by major providers, how SSF/CAEP enable continuous session and identity signals, plans for certification, and applying these standards to agentic identities. He also shares Signal’s CrowdStrike acquisition news and a lively Kenya safari anecdote.

This episode is sponsored by PlainID. Visit plainid.com/idac to learn more.In this sponsored episode, Jim McDonald and Jeff Steadman talk with Gal Helemski, CTO and co-founder of PlainID, about the evolving landscape of authorization. The conversation covers the transition from traditional roles and attributes to a modern policy-based access control (PBAC) approach. Gal explains how PlainID helps organizations centralize authorization logic, improve security posture, and simplify the management of access across complex hybrid and multi-cloud environments. The discussion also touches on the importance of visibility into who has access to what and the role of standards like Cedar and Rego in the future of authorization.Connect with Gal: https://www.linkedin.com/in/gal-helemski-b9542231/Learn more about PlainID: plainid.com/idacConnect with us on LinkedIn:Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/Visit the show on the web at idacpodcast.comTimestamps:00:00 Introduction to the Sponsor Spotlight02:15 Meet Gal Helemski from PlainID05:30 The shift from RBAC to PBAC10:45 Challenges with traditional authorization methods15:20 How PlainID centralizes authorization logic22:10 Integrating with existing identity providers28:45 The role of visibility and auditing in authorization35:30 Discussion on authorization standards: Cedar and Rego42:15 Future trends in identity and access management50:00 Final thoughts and where to learn moreKeywords:IDAC, Identity at the Center, Jeff Steadman, Jim McDonald, PlainID, Authorization, Policy-Based Access Control, PBAC, RBAC, Cybersecurity, IAM, Access Management, Gal Helemski, Identity Security

They celebrate 400 shows and trace how the program evolved from strategy and frameworks to cloud identity, governance, and PAM. Jim outlines a book project and using AI for writing and audio. The conversation highlights frictionless authentication trends, agentic identity and AI’s growing role. They reflect on growth, memorable moments, and future directions for identity technology.

Jeff Margolies, Chief Product and Strategy Officer at Saviynt and veteran identity leader, joins to explore AI's role in identity security. He discusses how AI streamlines manual identity tasks and the rise of Identity Security Posture Management. He also covers governing AI agents, provenance for audits, combating deepfakes, and why posture-first strategies matter.

Martin Kuppinger, principal analyst at KuppingerCole and identity expert, discusses AI agents and the growing disillusionment with AI in regulated industries. He explores why agents differ from traditional workload identities. Short takes cover governance and shadow agents, the identity fabric as a capability-based approach, and using telemetry to cut over-entitlements.

Charles John, director of operational resilience at RSM, brings crisis management and business continuity expertise. Rich Servillas, director in cyber response, leads ransomware and cloud intrusion recoveries. They discuss identity as a fragile operational dependency. Topics include building continuity plans, early incident actions, attacker tactics using credentials, reducing standing privilege, out-of-band communication, and cyber insurance gaps.

In this lively discussion, Rebecca Archambault, a Gartner analyst focused on identity and access management, joins hosts Jeff and Jim for an interactive game show. They explore fun and pressing identity topics, with audience votes determining favorites. Key highlights include the buzzword 'agentic identity,' effective strategies for navigating vendor halls, and the true purpose of analyst 1:1 sessions. Listeners also hear about AI risks, managing non-human identities, and the most common vendor lies, all wrapped in a lighthearted, engaging atmosphere.

Indus Khaitan, CEO of Redblock, has a rich background in programming and identity management from his time at Oracle. He discusses how Redblock utilizes AI and computer vision to tackle the challenges of disconnected applications in identity management. Indus emphasizes the urgency of securing the 'long tail' of applications and positions Redblock as a crucial 'DoorDash' for identity fulfillment. They explore the safety of AI processes, quick onboarding through short video training, and Indus's passion for flying planes.

In this installment, Sarah Clark, Chief Product Officer at Hopae, shares her journey from Mastercard to building digital identity infrastructure. She delves into how government-issued digital IDs can combat fraud and enhance user experiences. Sarah highlights global trends, with the EU leading in adoption and mandates, while also discussing mobile driver's licenses in the US. The conversation takes a heartfelt turn as she talks about her personal passion for dog rescue and rainforest conservation. Get ready for insights into identity, security, and compassion!

Ian Glazer, an identity expert and co-founder of the Digital Identity Advancement Foundation, joins the discussion at the Gartner IAM Summit 2025. He introduces the transformative concept of Continuous Identity, emphasizing the need for real-time data and contextual signals in identity management. The conversation dives into the evolving role of identity practitioners, the challenges of traditional governance models, and the impact of AI on automation. Ian also shares insights on practitioner community building and lighter moments from the conference, making for an engaging and enlightening chat.