The Identity Jedi Show: Where Identity Meets Strategy

Karl McGuinness has spent more than 25 years in identity, from client-server and Active Directory to building identity providers in healthcare, and was an early employee and Chief Architect at Okta as it became the standard for cloud identity. Now an investor and advisor to agentic identity startups, he joins David Lee to talk about the layer he thinks is missing from every enterprise identity stack.

Agents aren't humans and they aren't workloads. They act on someone's behalf, keep running after the laptop closes, and cross every boundary we drew around sessions and tokens. Karl explains why a vaulted credential is the wrong answer, why an LLM can propose a plan but can't be the authority that approves it, and what a "mission" layer for delegated authority could look like.

They also get into the authorization debt agents are about to collect on, why gateways and proxies are only a first step, how MCP and ID-JAG moved faster than any standard either of them has seen, what practitioners can do today, and where identity and security land in two years.

Read Karl's writing at https://karlmcguinness.com/

This episode is sponsored by Gartner.

CHAPTERS

0:00 Intro

8:29 Meet Karl McGuinness

11:49 Break glass: identity lessons from healthcare

15:52 Agents aren't humans, and they aren't workloads

18:34 The missing mission layer

29:16 Authorization debt and the SaaS incentive problem

39:17 Standards at agent speed: MCP and ID-JAG

43:05 Can customers drive the urgency?

44:18 What practitioners can do today

48:51 Why coding agents got there first

56:19 When the app layer moves into the agent

58:38 Two years out: identity and security blur

1:02:40 Closing

theidentityjedi.com

New episodes every other Wednesday.

Rohit Agnihotri, VP of Identity and Access Management at one of the largest insurance companies in the US and host of the Identity Navigator podcast, joins David Lee for a conversation with no script and no prep. Just two practitioners who have lived through every era of identity, talking about where it goes next.

SOX gave us IGA. The cloud forced us to rethink access. Now AI is making us start from first principles: what is an agent, what is autonomy, what is intent? Rohit and David get into IGA and PAM converging into one platform, why founders are nervous when a hyperscaler's "good enough" is free, and how AI reopens the build-versus-buy debate that CFOs are about to start asking about.

They also cover why information is cheap but expertise isn't, why you have to embrace the chaos, the most common mistake identity leaders make (talking business in the tech room and tech in the business room), and why identity is still the best place to start a career.

"You can be frugal, but you cannot be cheap."

This episode is sponsored by Gartner.

Register with code IAM21P2 and save $400 on the standard rate.

Explore Conference

CHAPTERS

0:00 Intro

7:52 Meet Rohit Agnihotri

10:01 Identity's inflection points: SOX, cloud, and AI

13:46 IGA and PAM converge into a platform

18:16 The founder's dilemma: fast exits and "good enough"

20:44 Build vs. buy in the AI era

28:56 Frugal, not cheap

34:15 Strategy first: cutting through the acronym soup

41:55 Information is cheap, expertise isn't

44:37 Embrace the chaos

53:47 Why identity is the place to build a career

58:20 Closing

Listen to Rohit on Identity Navigator, available on Spotify and all major podcast platforms.

theidentityjedi.com

New episodes every other Wednesday.

Your IAM program covers 35 critical apps. The company runs 550. Brad Kirkpatrick has heard that pitch more than once, and his answer never changes: if the other 515 have identities, they're in scope.

Brad has run global-scale identity programs as a practitioner and advised dozens of companies across industries as a consultant. His new book, The 7 Pillars of IAM Success, lays out the IAM Value Engine: identity that enables the business, strengthens security posture, and accelerates digital transformation.

This episode kicks off the Identity Jedi Show Author Series. We get into why you define value before you pick a tool, how to get a CFO to fund a program they'll never fully understand, where AI could finally fix connector sprawl, what an IAM degree should teach, and the Sunday night a missed contract renewal terminated an entire call center.

Plus: what writing a book really takes, and why agentic AI is breaking the identity playbook we've used for twenty years.

📘 The 7 Pillars of IAM Success: https://books.manuscripts.com/product/the-7-pillars-of-iam-success/

📬 Brad's newsletter, 7 Pillars Insider: https://7pillars.kit.com/signup

🔗 Connect with Brad: https://www.linkedin.com/in/bradkirkpatrick/

CHAPTERS

00:00 Cold open: so you want to write a book?

00:40 Welcome to the Identity Jedi Show

02:00 What writing a book really takes (and where AI fits)

05:15 Identity news: why AI agents break the old identity playbook

08:00 Kicking off the Author Series with Brad Kirkpatrick

10:30 The lessons that kept repeating across dozens of IAM programs

11:00 The IAM Value Engine: business, security, IT

13:30 Define value before you pick the technology

15:00 ITDR, ISPM, SSPM: how do the acronyms fit together?

17:30 Speaking the CFO's language with business use cases

20:00 "We cover 35 apps. We have 550."

22:00 AI as electricity, and the end of point-to-point connectors

24:30 How a new identity leader proves value

26:30 "No one is coming to save you"

28:00 Run IAM like a business inside the business

28:45 Be the emissary: listen before you pitch

31:45 The call center ride-along

33:30 Designing an IAM degree from scratch

38:00 Learning Unix, LDAP, and the identity lexicon the hard way

40:15 Writing the book: a 20-page outline before page one

42:30 6 to 8 AM every day, roughly 800 hours total

44:00 Why editing was the real nightmare

47:00 Working with a publisher and an author cohort

50:00 IAM horror story: terminating an entire call center

52:45 It always comes back to data and humans

53:30 Wrap-up

54:15 Closing thoughts

What's your IAM horror story? One sentence. Drop it in the comments.

🎙 Subscribe for more conversations on identity, AI, and leadership.

📰 The Identity Jedi Newsletter: https://www.theidentityjedi.com

🎧 Listen on all platforms: https://identityjedipodcast.com

#IdentityJedi #IAM #IdentitySecurity

Static policies were built for identities that do one predictable thing. AI agents break that model, chaining across sub-agents, borrowing permissions, and deciding on the fly. In this Identity Jedi Show conversation from Identiverse, David Lee sits down with Amit Saha, co-founder and CEO of Reva, on why runtime authorization is becoming a real requirement for agentic AI, and how you secure the action instead of trying to pre-write a policy for everything an agent might do.

We get into the delegation chains that quietly escalate privilege, why identity is only about 30 percent of the visibility you need, the move from policies to guardrails plus intent, and how you make an allow, deny, or defer decision fast enough to survive at machine scale. If you are trying to let agents move fast without handing them the keys, this one is for you.

Stay in the loop The Identity Jedi newsletter breaks down non-human identity, agentic AI security, and where identity is heading, in plain practitioner language. Subscribe: [newsletter link] Subscribe to the channel for more Identity Jedi Show conversations, and drop a comment with the one thing about securing AI agents that is keeping you up at night. What would you have to change in your own stack to let an agent move fast without handing it the keys?

The Other Side of AI (feat. Stephen Washington) — Special Edition, Live from Las Vegas

Everybody's talking agentic identity and AI security. This one's about the other side — the part that touches all of us. Live from Vegas for the pregame, I sat down with identity veteran and leader of people Stephen Washington (back for round two) to get real about what AI is doing to jobs, education, critical thinking, our kids, the planet, and our sense of what's even real anymore.

We get into why AI rewrites jobs instead of erasing them, the "you have to work the AI" truth, the hidden cost of every prompt, whether you can actually sue an agent, what this means for the next generation, and the AI research that reads like a sci-fi script. No script, no easy answers — just the conversation we need to be having.

The only way to beat the fear is to understand it. Let's get into it.

🌐 www.theidentityjedi.com — Subscribe & watch the full video on YouTube.

Be good to each other, be kind to each other, love each other. We out. ✌️

Your AI agents are doing things you didn't ask them to do. The question is: did you give them permission?

In this episode of The Identity Jedi Show, David Lee sits down with Matt Topper, President of Onboard.ID, to tackle one of the hardest problems in agentic AI: how do you give an agent enough freedom to be useful without giving it enough rope to burn your environment down?

They get into "authorization boundaries," the idea that agents should have limited agency with hard stops and an obligation to report back on what they did with the access you granted. Matt shares a wild real-world example: sub-agents that didn't have Supabase access, so they spun up Docker and a local database on their own to run a full test suite. Impressive? Absolutely. Terrifying without boundaries and audit trails? Also yes.

From there they connect the dots to zero trust fundamentals (least privilege, fine-grained per-transaction controls) and dig into whether SPIFFE and workload identity standards can extend to agents: unique identifiers, credentialing, and provenance through trusted hardware, signed packages, and org-owned repos. They also break down how agents should act on your behalf, whether that's OAuth tokens delegated from a user or enterprise-issued credentials.

Plus: why specs, constitutions, and a clear definition of done are the difference between an agent that ships and an agent that wanders off. And the tragic tale of the lost "Identity After Dark" recording from Identiverse Boston.

In this episode:
How authorization boundaries give agents agency without chaos | Why obligations and reporting are the missing piece of agent access | Mapping SPIFFE and workload identity to AI agents | OAuth, delegation, and enterprise tokens for agents | Spec-driven development: constitutions, scope, and definition of done | The real cost of agent tooling and where guardrails pay for themselves

Chapters:
00:00 Season Four Intro
00:29 Authorization Boundaries
02:14 Docker Surprise Demo
04:13 Obligations and Zero Trust
05:01 SPIFFE for Agents
07:54 OAuth and Credentialing
10:15 AI Native Building Specs
11:22 Agent Constitution and Scope
13:36 Tooling Costs and Guardrails
14:51 Identity After Dark Story
17:00 Wrap Up and Farewell

Connect with Matt Topper:
LinkedIn: https://www.linkedin.com/in/matttopper/
Onboard.ID: https://onboard.id/

Join the Identity Jedi community:
Newsletter: www.theidentityjedi.com

#IdentityJedi #AgenticAI #NonHumanIdentity #SPIFFE #ZeroTrust #IAM #AISecurity #Cybersecurity #WorkloadIdentity

The Co-Inventor of Tor on Why Your NHI Strategy Is Already Behind

Most organizations have spent the last 20 years getting really good at human identity. 2FA. Biometrics. Face ID. Ephemeral tokens. They did the work. And the whole time, they were quietly pushing every ounce of that compressed risk onto the non-human side of the house.

Service accounts with username and password. API keys that never rotate. Credentials hardcoded in pipelines. Long-lived tokens that were supposed to be temporary.

Eventually is here.

In this episode, David Lee sits down with David Goldschlag, CEO and co-founder of Aembit and one of the original inventors of onion routing — the technology that became Tor. With 20+ years building security companies, David G brings a perspective on non-human identity and AI agent security that very few people in this industry can match.

They get into why NHI is not a new problem but a neglected one, what it actually means to build a zero trust framework for AI agents, the concept of blended identity and why your existing IAM stack is only part of the answer, why workforce agents and customer agents are fundamentally different and why treating them the same is a mistake, and why data is still the new oil and why that matters more now than ever.

If your org is spinning up agents and hasn't had a real strategic conversation about what those agents can access, who they're acting on behalf of, and what happens when something goes wrong, this episode is exactly where you need to start.

Topics Covered

• The origins of Tor and why onion routing still matters 30 years later
• How Aembit went from "Okta for workloads" to purpose-built AI agent identity
• The three types of agents: autonomous, workforce, and customer-facing
• Blended identity and blended policy in practice
• Why ephemeral credentials are non-negotiable for agent access
• Zero trust for AI: the three pillars (identity, prompt security, data security)
• Non-repudiation in the age of agentic AI
• Why vibe coders are making the NHI problem exponentially harder
• Data security as the ultimate endpoint for every breach scenario

Stay ConnectedSubscribe to the Identity Jedi newsletter at theidentityjedi.comFollow on LinkedIn, YouTube, and SpotifyRate, review, and share if this episode hit different

In this episode of the Identity Jedi Show, David Lee sits down with Brook Lovatt — identity veteran, former CEO of Cloud Identity, and co-founder of Interrogate — to get into one of the most important and least-discussed problems in enterprise AI: what happens when an AI agent is incentivized to lie.

Brook and his co-founder Eric Moss have been running behavioral assurance tests on AI agents in the lab, and what they're finding should concern every security leader, auditor, and IAM practitioner paying attention to agentic AI.

What we get into:

• The healthcare claims adjudicator demo — why an AI agent denied a legitimate $72,000 treatment claim, blamed the doctor, and changed its story every time it was interrogated
• In-context scheming: what the Apollo Research paper revealed about AI agents scheming post-training when placed in a conflict of interest
• The Ship of Theseus problem applied to agentic identity — if you replace the LLM, the tools, or the context, is it still the same agent?
• Why non-human identity controls don't account for agents that change capability over time
• The ZIP code redlining demo: two identical mortgage applications, one ZIP code difference, denied every single time
• What Interrogate is actually building: interrogation + ablation testing, immutable audit trails, and compliance mapping to the EU AI Act
• Why the legal community is already saying if you're not collecting behavioral evidence, you're exposed
• Air Canada, Cigna, Workday — the AI lawsuits that are setting the precedent right now
• David's upcoming Identiverse talk on bias in AI — and why this conversation is part of it

Referenced in this episode:

• Apollo Research — In-Context Scheming paper https://arxiv.org/pdf/2412.04984
• Interrogait - https://www.interrogait.com/
• OIDF AI Identity Management Community Group — https://openid.net/cg/artificial-intelligence-identity-management-community-group/
• theidentityjedi.com — subscribe to the newsletter

AI agents don't follow rules — they follow intent. That makes every governance model your identity team built last year incomplete.

Guest: Ido Shlomo, Co-Founder of Token Security — one of the leading voices on non-human identity and AI agent security in the enterprise.

In this episode, Ido and I break down what most organizations are completely missing when it comes to securing AI agents — from why visibility has to come before policy, to why the identity stack your team built wasn't designed for something that makes its own decisions.

What you'll walk away with:

• Why your NHI strategy is already behind — and what to do about it
• The one concept that changes how you think about agent access forever
• You can't secure what you can't see — and most teams can't see it yet
• Why the old enterprise sales model is dead and what buyers actually want now

If this episode made you think differently about AI agent security, share it with your identity team.

Chapters:

0:00 Why AI Agents Break Traditional IAM1:32 Real Agent Examples From the Field3:40 How to Define and Classify an Agent6:31 What Agentic AI Means for Identity Teams13:15 Non-Human Identity, Tokens, and Autonomy14:41 Intent-Based Access Control Explained19:39 AI Agents as the New Operating Layer26:32 How Buyers Are Changing Because of AI41:00 AI Impact Predictions for Identity Security47:34 Real World Agent Story: Clare Hepburn's Agent

Connect:

• Newsletter + Digital Products: http://www.theidentityjedi.com/
• LinkedIn: https://www.linkedin.com/in/identityjedi/
• Guest — Token Security: https://www.token.security/

#IdentityJedi #IAM #IdentitySecurity #AgenticAI #NonHumanIdentity #CISO #ZeroTrust #IGA #TokenSecurity

David Lee kicks off season four of the award-winning Identity Jedi Show with a new theme and updates, previews a guest lineup spanning AI, leadership, authors, innovators, and startups. He explains a season focus on practitioner realities of running identity and access management programs—funding, proving value, team structure, day-to-day operations, and onboarding applications—alongside ongoing AI discussions, including productivity gains, product prototyping, startup speed to product-market fit, and security and agentic AI concerns. The first interview features practitioner Clarence Chase (Silika Solutions), who emphasizes IAM as a program requiring governance, outcome-based requirements, innovation, staging, and strong change management via business engagement roles. They discuss adoption, centralized visibility, identity’s security value, analytics for leadership buy-in, and a directory outage recovery.

David closes by recommending Jerich Beason’s leadership book, “Lead Better Sooner,” reading an excerpt, and inviting community engagement across YouTube, TikTok, and email.

The Identity Jedi Universe → http://www.theidentityjedi.com

Jerich Beason —> http://www.leadbettersooner.com

00:00 Season Four Kickoff00:47 Show Welcome and Hype01:58 Where to Find the Podcast03:10 Season Theme Practitioners05:08 AI Productivity and Risks11:53 TikTok Growth and Plans12:40 Meet Clarence Chase14:17 How They First Met18:21 Identity Program Essentials23:07 Change Management in Practice23:20 Business Engagement Team33:34 Product Mindset for Identity35:59 Defining and Proving Value37:42 Proving Identity Value39:24 Rapid Access Shutdown41:48 Identity Meets Security43:48 Retraining Identity Talent48:56 Leadership And Hiring53:04 Rapid Fire Team Design55:57 Identity Degree Blueprint01:02:25 Directory Outage Lessons01:06:48 Why Identity Matters01:10:04 Leadership Season Tease01:10:53 Book Excerpt And Wrap

Wrapping Up 2025: AI Advancements and Future of Identity Security | Identity Jedi Show

In the final episode of the Identity Jedi Show for 2025, host David reflects on the rollercoaster year in identity and AI, explaining his plans to release a video on 2026 trends later on. He encourages listeners to subscribe to the channel to not miss out on the upcoming content, including a top 10 highlights video. The episode features an insightful interview with Raz Rotenburg, CEO and co-founder of Fabrics, discussing AI's explosion in recent years, its impact on cybersecurity, the potential of AI in revolutionizing identity and access management, and the concerning speed at which AI-driven attacks can occur. David and Roz delve into how AI can automate and enhance security processes, reflecting on the need for the industry to adopt more sophisticated tools for real-time security. The episode concludes with David expressing gratitude to his audience, urging everyone to cherish every moment as we head into the new year. Don't miss this thought-provoking wrap-up of 2025 with exciting insights into the future of AI and identity security!

www.theidentityjedi.com

00:00 Introduction and Welcome00:46 Year-End Reflections and Upcoming Trends01:53 Housekeeping and Announcements02:16 Special Guest Interview Teaser02:55 AI and Identity Management Insights07:12 The Future of AI in Cybersecurity11:06 In-Depth AI Discussion with Special Guest33:25 The Exciting Potential of AI in Cybersecurity34:00 Sophistication and Speed of AI-Driven Attacks35:21 The Role of AI in Enhancing Defense Mechanisms38:24 Challenges in Identity and Access Management41:43 The Future of AI in Cybersecurity45:06 Personal Anecdotes and Industry Insights48:44 The Vision for AI-Driven Identity Security59:08 Closing Thoughts and Future Outlook

In this holiday-themed episode of The Identity Jedi Show, we delve into major developments in the identity security industry. Host David kicks things off with holiday greetings before diving into significant recent events, including a whopping $700 million series B funding, a billion-dollar acquisition, and an $11 billion buyout. He also emphasizes the importance of staying plugged into The Identity Jedi community. Later, David introduces special guest Lee Header for a no-holds-barred interview about the state of the identity and access management industry—discussing the persistent challenges and necessary improvements. David and Lee cover everything from the 'enterprise SSO tax' to the gaps in standards adoption, and the role of AI in the future of identity security. Don't miss this insightful and honest discussion, plus tips on how the industry can better serve both security experts and end-users. Stay tuned and let's make the most of this festive season!

https://saviynt.com/press-release/saviynt-raises-700m-in-kkr-led-round-to-establish-identity-security-as-the-foundation-for-the-ai-era

https://newsroom.ibm.com/2025-12-08-ibm-to-acquire-confluent-to-create-smart-data-platform-for-enterprise-generative-ai

https://veza.com/company/press-room/servicenow-to-expand-security-portfolio-with-acquisition-of-vezas-leading-ai-native-identity-security-platform/00:00 Holiday Greetings and Show Introduction00:24 Upcoming Topics Teaser01:55 Housekeeping and Announcements02:53 Big News in Identity Security06:37 IBM's Strategic Acquisition11:40 Interview with Lee Tschetetter14:37 Enterprise SSO Tax Discussion37:20 Exploring the Higher Ed Ecosystem38:26 The Role of Grad Students in Higher Ed Projects39:00 Shared Signals Framework and Its Importance39:38 Challenges in Information Sharing40:56 The Need for Human-Friendly Standards42:15 The Complexity of Security Standards49:58 Real-World Examples of Security Mishaps55:25 The Importance of User-Friendly Security01:09:47 The Future of Identity and Security01:11:47 Final Thoughts and Reflections

In this episode, David interviews Joe Palmer, Chief Innovation Officer, to discuss his journey from a developer to his current role. The conversation delves into the evolution of identity verification technology, the impact of digital transformation, and the importance of identity security in the modern era. Joe shares insights on the challenges and advancements in the identity verification industry, emphasizing the significance of detecting live identities amidst increasing digital threats. The interview also touches on the future of identity verification, including the proliferation of AI and digital identities, and what lies ahead for iPro's innovations. To wrap up, Joe discusses his personal interests and the joy of balancing work with family life.

Links

https://www.iproov.com/

https://www.theidentityjedi.com

00:00 Introduction and Welcome02:03 Joe Palmer's Journey: From Developer to Chief Innovation Officer07:43 The Evolution of Identity and Security18:43 Challenges and Innovations in Identity Verification29:22 Entrepreneurship and Industry Insights30:40 Future of Digital Identity and AI44:47 Exciting Developments at IProov49:21 Personal Insights and Conclusion

Identity is the heart of cybersecurity.In this episode of The Identity Jedi Show, we sit down with Dutch — former senior advisor at Raytheon and AWS, now VP of Cloud Services — and Joe Palmer, Chief Innovation Officer at iProov, to unpack how identity and security are converging faster than ever.Together, we explore:🔹 Why identity is the new security perimeter🔹 How biometrics and AI are reshaping trust in digital ecosystems🔹 The challenges of vendor consolidation and what it means for enterprise defenders🔹 How leaders can build resilient, identity-first security strategiesWhether you’re an Identity Architect, Security Engineer, or CISO, this roundtable delivers real-world insights from experts shaping the future of identity-driven cybersecurity.💬 Question for You: How do you see AI and biometrics changing your approach to identity security in the next 2 years? Drop your thoughts below 👇🏾🔔 Subscribe to The Identity Jedi Show — where we talk about the future of identity, security, and everything in between.Check out our episode sponsorhttps://www.iproov.com00:00 Introduction and Welcome00:34 Round Table Guest Introductions01:57 The Importance of Identity in Security05:57 Challenges in Identity Verification08:19 The Rise of Biometric Solutions19:28 Account Recovery and Social Engineering21:38 Industry Trends and Consolidation27:07 Problem-Solving and Empowerment in Security28:07 Technological Advancements and Deep Fakes28:59 The Evolution of Cloud Computing and Security32:00 Identity Verification and Digital IDs38:32 Balancing Security Platforms and Vendor Management44:07 The Importance of Identity in Security49:42 Final Thoughts and Parting Shots

Welcome back to the Identity Jedi Show! In this episode, host David Identity Jedi sits down with Rich Rhodes, Chief Information Security Officer at Choice Bank, for a candid and insightful conversation about leadership, team building, and the evolving world of identity security.

Episode Highlights:

• Rich’s journey from small-town Minnesota to the CISO seat
• The evolution of identity management to identity security
• Why people and process matter more than technology in cybersecurity
• Building and leading high-performing, people-first teams
• Lessons learned from mergers, acquisitions, and industry consolidation
• The importance of empathy, mentorship, and authentic leadership
• Navigating the challenges of cloud computing and disaster recovery
• Industry trends: platform consolidation, subscription models, and the rise of new players
• Spotlight: Yes ID — an Okta alternative for small businesses
• Quick-fire questions: best advice, favorite food spots, and travel dreams

Key Takeaways:

• Leadership is about empowering others, not just holding a title.
• The biggest challenges in identity security are still about people and process, not just technology.
• Team success comes from trust, clear expectations, and genuine care for each member.
• The industry is changing fast, but the fundamentals of good leadership remain the same.

Featured Guest:

• Rich Rhodes — CISO at Choice Bank, with decades of experience in IT, security, and team leadership.

Resources & Mentions:

• YeshID (Okta alternative for small businesses)
• Identity Jedi newsletter and blog
• Leovici gear (discount code: IdentityJedi)

Connect with Us:

• Subscribe to the Identity Jedi newsletter at http://theidentityjedi.com
• Send your questions for the upcoming mailbag episode: identityjedi@gmail.com
• Follow us on Spotify, YouTube, and your favorite podcast platforms

Thank you for tuning in! If you enjoyed this episode, please like, rate, and subscribe. Be good to each other, be kind to each, love each other, and we’ll see you next time on the Identity Jedi Show.

In this episode of the Identity Jedi Show, the host welcomes Jim DeSantis for an engaging interview. They discuss their unique paths in the identity field, share experiences with Active Directory, and explore the rapid development of AI technologies. The episode highlights the challenges and misconceptions around AI implementation in enterprises, the permanence of Active Directory in certain sectors, and the complexities of data management. Additionally, the host outlines recent major acquisitions in the identity space and speculates on the future of identity management as vendors strive for platform consolidation. The episode concludes with a reflection on the inevitable disruption AI will bring to various industries and the evolving role of service companies.

https://www.theidentityjedi.com

https://leovici.com/?ref=identityjedi

00:00 Introduction and Episode Overview01:02 Insert Intro Video/Music01:37 Housekeeping and Announcements04:11 Interview with Jim DeSantis06:19 Identity Management Challenges15:02 AI in Identity and Data Management29:44 Exploring AI Tools and Their Impact30:22 The Magic and Reality of Technology31:27 The Future of Software Development34:01 Challenges in Cybersecurity and SOC Integration35:13 The Cycles of Tech Platforms and Best Practices44:56 The Longevity of Active Directory51:43 The Year of Acquisitions in Identity56:36 Concluding Thoughts and Future Outlook

In this special sponsored episode of the Identity Jedi Show Podcast, host David discusses the intersection of AI and identity with Granville, the Chief Architect at http://strata.io/. They delve into the challenges and opportunities of implementing AI within enterprises, focusing on securing and auditing AI interactions and identity delegation. The conversation covers Strata's innovative solutions like MCP Bridge and their approach to enabling businesses to integrate AI while maintaining high levels of security and compliance. Granville shares his background in startups and security, and both he and David reflect on the evolution of AI and identity management. David also shares some of his personal thoughts and experiences, emphasizing the importance of intent-based access and future-proof identity orchestration.

www.strata.io

www.theidentityjedi.com

00:00 Introduction and Opening Remarks00:34 Welcome to the Identity Jedi Show00:42 Sponsorship and Show Details01:25 Engagement and Audience Interaction02:13 Introduction to the Sponsored Interview02:34 Meet Grandville, Chief Architect at Strata04:02 Grandville's Professional Journey04:39 Personal Interests and Hobbies07:27 Ohio State Football Fandom11:05 The Importance of Technical Background in Product Management13:47 Challenges in Security and Identity Management16:11 The Role of AI in Modern Enterprises25:29 Human-in-the-Loop Approval Systems28:35 The Excitement and Challenges of AI Development30:46 Complexity of AI Agent Interactions32:59 Authentication and Authorization Challenges34:35 Intent-Based Access: A New Paradigm39:13 Product Development Insights46:55 MCP Bridge and Enterprise Integration58:13 Future of AI and Identity01:02:57 Conclusion and Final Thoughts

Join us for a special episode of the Identity Jedi Show! After a short break, we're back with insightful conversations featuring our friends and identity experts Jen Cox and Aubrey Turner. In this episode, we discuss the journey of becoming friends through the identity field, share surprising anecdotes and challenges we've faced in our careers, explore exciting moments in identity, and examine the future role of AI in the industry. Tune in for some fun and candid chats, and stay until the end for updates on our upcoming live event in Austin! Don't forget to like, subscribe, and share your thoughts with us. #IdentityJediShow #IdentityManagement #AIInSecurity #Podcast

00:00 Welcome Back to the Identity Jedi Show

00:46 Upcoming Podcast Highlights and Special Guests

02:22 Meet the Guests: Jen Cox and Aubrey Turner

03:22 Home Renovation and Chat GPT

12:08 Surprising Customer Stories in Identity

17:11 Challenges in Modernizing Legacy Systems

24:32 Empathy in Identity Management

25:34 Favorite Moments in Identity

26:32 Community and Continuous Learning

28:47 Client Engagement and Success Stories

30:41 Funny Stories from the Field

34:31 Excitement and Concerns About AI

40:53 Future Plans and Live Events

42:15 Closing Remarks and Gratitude

In this episode of the Identity Jedi Show, we dive into the breaking news of Palo Alto's $25 billion acquisition of CyberArk. We discuss the implications of this major deal for the identity and security market and explore whether it marks the beginning of a trend towards consolidation in the industry. We also touch on key developments in identity security and the growing importance of managing machine identities in cloud environments, especially with the rise of AI agents. Tune in to hear our insights and what this could mean for the future of security and identity management.00:00 Introduction and Episode Overview00:49 Palo Alto's Acquisition of CyberArk03:01 The Impact on the Market05:05 CyberArk's Evolution and Future Prospects07:40 Broader Industry Implications09:14 Keyless NHI Federation and Machine Identities12:44 Conclusion and Final Thoughts

In this solo episode, host David Lee delves into the complex world of identity and access management (IAM) and the impending challenges as AI becomes more integrated into business operations. David discusses alarming statistics on identity-related cyber attacks, the evolution from perimeter defense to identity-focused security, and how AI is revolutionizing access management. He offers actionable insights on governance audits, behavioral analytics, and the critical need for AI governance policies. Whether you're a CISO, developer, or business leader, this episode is a must-watch for staying ahead in the rapidly evolving IAM landscape. Don't forget to like, rate, and subscribe for more in-depth analyses every Tuesday.00:00 Introduction and Shocking Statistics00:59 Podcast Housekeeping and Announcements03:00 The Current State of Identity and Access Management06:36 Challenges in Traditional Security Approaches14:33 The Role of AI and Machine Learning in Identity Management19:41 Implementing Zero Trust and Future Trends23:45 Market Growth and Compliance25:00 AI Revolution and Identity25:28 AI as the New Interface30:21 AI Agents and Identity Management Challenges34:38 Governance and Policy Recommendations39:48 Future of AI in Identity Management43:00 Final Thoughts and Call to ActionKey References and SourcesMarket ResearchPrecedence Research - Global IAM market: $23B (2025) to $66B (2034), 12.4% CAGR https://www.precedenceresearch.com/identity-and-access-management-marketFuture Market Insights - IAM projected $17B (2025) to $73B (2035), MFA adoption up 50% https://www.futuremarketinsights.com/reports/identity-and-access-management-marketVeritis - 78% had identity breaches, 30% use passkeys, 3:1 machine-to-human identities by 2025 https://www.veritis.com/blog/identity-and-access-management-trends/ Security ResearchSHI Resource Hub - 93% faced 2+ identity breaches, 84% had business impact https://blog.shi.com/cybersecurity/how-to-build-an-effective-iam-program-in-2025s-hybrid-landscape/Palo Alto Unit 42 - 5x increase in cloud security alerts in 2024 https://unit42.paloaltonetworks.com/2025-cloud-security-alert-trends/Avatier - Employees manage 191 passwords, 51% reuse work/personal passwords https://www.avatier.com/blog/biometrics-ai-the-future/ Standards & AnalysisCloud Security Alliance - AI/Zero Trust integration, Shadow Access risks https://cloudsecurityalliance.org/blog/2025/02/27/how-is-ai-strengthening-zero-trustTechTarget- 70% vendor consolidation, post-quantum crypto prep https://www.techtarget.com/searchsecurity/tip/Identity-and-access-management-trends-to-watchTrustBuilder - NIS2 requirements, FIDO2 standards, expert insights https://www.trustbuilder.com/en/identity-access-management-trends-innovations/ Recent BreachesBrightDefense - Oracle Cloud (140K+ tenants), PowerSchool (62M students) https://www.brightdefense.com/resources/recent-data-breaches/Tech.co- Yale Health (5.6M patients), Blue Shield (4.7M patients) https://tech.co/news/data-breaches-updated-list Additional SourcesForrester - 8 key IAM trends including deepfake detection https://www.forrester.com/report/the-top-trends-shaping-identity-and-access-management-in-2025/RES182132The Hacker News - Zero Trust evolution, AI implementation https://thehackernews.com/2025/07/assessing-role-of-ai-in-zero-trust.html