- monatlichErscheinungsrhythmus
- 36 mintypische Länge
- vor 6 Tagenletzte Folge
Welcome to "The Identity Navigator," your compass in the world of Identity and Access Management (IAM). Join us as we navigate the complexities of digital identity, security, and access control. Stay informed with expert insights, industry trends, and practical tips to safeguard your organization's digital assets. Whether you're new to IAM or a seasoned pro, tune in to unlock the strategies that will elevate your security posture. Subscribe to The Identity Navigator podcast and chart your course to secure, efficient IAM solutions.
Folgen
#45 - Should You Block AI Agents? OAuth, MCP, and Who Gets In
Should you block AI agents? This episode answers it from the identity chair, and it starts with MCP authorization explained from zero. If you've heard "MCP authentication" and "OAuth" in the same breath all year and never quite connected th
#44 - The Badge That Printed Itself: The SharePoint Token Forgery, Decoded (CVE-2026-55040)
The Badge That Printed Itself: A SharePoint TokenForgery, Decoded Word by Word One line from my morning threat intel digest: “CVE-2026-55040. Critical. CVSS 9.1. SharePoint on-prem authentication bypass, under active exploitation.” This epi
#43 - Verified, Authorized, and Compromised: The Return of the Air Gap
Three labs. Five breached companies. One testing vendor named Irregular. This summer handed identity and security practitioners a masterclass in what happens when AI agents hit environments that weren't built for them. Not through sophistic
#42 PulseAI and the Hard Question: What Is Your AI Actually Doing
Everyone is using AI. Almost nobody can prove what it’s doing. In this solo episode, we design a runtime AI governance platform from scratch on a whiteboard, and then meet PulseAI, the product IAM veteran Amit Masand built at IDMEXPRESS. Wi
#41 - IGA or IdP? Who Provisions the New App - OIM, SailPoint, Saviynt, Entra, Okta
Previously on The Identity Navigator (recommendedlistening before this episode): Episode 40: SCIM - The protocol that finally made provisioning grow up Every app you onboard forces a quiet architecture decision most teams never make explici
#40 SCIM - The Protocol That Finally Made Provisioning Grow Up
0-40% of SaaS accounts in the mid-2000s belonged to people who'd already left the company. Ghost accounts, quietly sitting there — and that sadly hasn't changed much today. This episode: where SCIM came from, what it actually solves, and wh
#39 Tokens — The Complete Story
The Complete Token Story Let me make you a promise: by the end of this episode, no one will be able to casually brush off the word “tokens” in front of you ever again. OAuth, Tokens, JWT, IAM, Identity, API Security, Zero Trust, Security Ar
#38 - The Basics of Workload Identity
In this episode of The Identity Navigator, Rohit explores workload identity from first principles: what it is, why it matters, and how it is reshaping modern identity security for microservices, Kubernetes, CI/CD pipelines, cloud workloads,
#37 - Identity Categorization Done Right
In this episode we explore together the “uncanny valley” of identity categorization, where taxonomy looks mature on paper but doesn’t meaningfully change controls in practice. We talk about Taxonomic Debt and control plane behind them. From
#36 - Your Face Belongs to Lensa
In late November 2022, a little-known app called Lensa went from obscurity to everywhere. Celebrities, influencers, and millions of ordinary people uploaded their selfies and got back stunning AI-generated portraits, fantasy warriors, Renai
#35 - How Stolen Sessions are Bypassing MFA and How to Finally Stop Them
Imagine this: Tuesday morning. Security dashboard green. MFA at 100%. Privileged accounts vaulted. Fortress built. Then an attacker logs in as your CFO via a stolen browser cookie. No password guess. No brute force. Your stack? Silent. We d
#34: Move 37: The Moment AI Stopped Playing by Human Rules
In March 2016, a machine made a move in the ancient game of Go that changed everything. A commentator, a world-class professional, watched it and said: "This is not a human move." Lee Sedol, one of the greatest Go players alive, took off hi
#33 How Good Is Your AI, Really?
Most AI projects don’t fail because the models are dumb. They fail because the business questions are. In this episode, we breaks down why “95% accuracy” has become the most dangerous comfort blanket in enterprise AI and what leaders should
#32 23 People and One Visionary
23 People and One Visionary: The Birthday Paradox Lesson Steve Jobs Understood The birthday paradox, the mathematical reality that just 23 people create a 50% probability of shared birthdays reveals something uncomfortable about leadership:
#31 Exposed – When Vault Becomes the Breach: Inside Cloud Secrets Heists
In this episode of The Identity Navigator, I dig into how my favorite cloud secrets managers—AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, Kubernetes Secrets, and HashiCorp Vault—can quietly turn into an attacker’s jackpot when
#30: The Consent Crisis
Who Really Owns Your Consent? From Messaging Apps to Payroll System In this episode we discuss how to build a privacy-first payment ecosystem and are we ready to challenge the convenience-first mindset that says “Just store the card, it’s e
#29 The Evolution of IGA Tools
Identity Governance & Administration didn’t arrive fully formed, it evolved. In this episode we walk through the journey of IGA. From homegrown scripts and spreadsheets to heavyweight platforms like Sun, Oracle, and CA. The rise of governan
# 28 Hello, I’m Root: When Entitlement Becomes Ego
Remember when smoking looked cool? For years in tech, holding root access was the same, a badge of honor, proof you were trusted, heroic, untouchable. In tech, we have our own “smoking”, permanent root/admin access. For years, being the eng
#27 Where Are the Aliens?
Have you ever wondered why we haven’t discovered alien life? And how does this connect to IAM maturity, systems thinking, and organizational psychology? In this episode, I dive deep into the Fermi Paradox, explore the complexities of IAM ma
#26 Bearer Tokens: From Briefcases to Browsers
This episode was inspired by Ozark: A crime drama where a financial advisor is pulled into the world of money laundering Ever wondered why simply holding a token grants you access—no passwords, no challenges, just pure possession? In this e
#25 Resource Mining - A pre-requisite that is never met
In the context of IAM, resource mining refers to theprocess of discovering, cataloging, and analyzing resources within an organization's environment to understand their structure, permissions, ownership, and access controls. The goal is oft
#24 Self-Healing IAM Systems - A Business Centric Framework
A self-healing IAM system enhances enterprise security by automating identity governance, mitigating operational risks, and ensuring adaptive security resilience. By leveraging this framework organizations cancreate dynamic, self-correcting
#23 Fractured Identity: An In-Depth Exploration
Fractured identity occurs when a single user is unintentionally associated with multiple distinct accounts across different systems or within the same system. This fragmentation can arise in several scenarios, such as customer service inter
#22 Unquestioned Assumptions
In this episode we understand what "Unquestioned Assumptions" are, why they are limiting and how to recognize them. At its core, these are beliefs, habits, or expectations we adopt without verifying their accuracy or relevance. They shape o
#21 Graph DB: A must have for intelligent IAM systems
In this episode, we take a deep dive into the role of graph databases in Identity and Access Management (IAM) and explore why they are becoming indispensable in modern IAM systems. For over 25 years, LDAP and relational databases have been
#20 Unlocking PKI: Why It's Not Yet Mainstream in Identity and Access Management
In this episode, we dive into the world of Public Key Infrastructure (PKI) and explore why it's not more widely adopted in the Identity and Access Management (IAM) space, despite being considered the gold standard of credential assurance by
#19 Beyond PAM for BeyondTrust - A new ITDR offering: Identity Security Insight
BeyondTrust mention reminds most of us of privileged access management. Interestingly on their website, the first thing they mentioned was "PAM Products and ITDR" BeyondTrust has multiple products in their product suite and the one of the n
#18 ITDR - A promising domain or just another fad
In this episode of the Identity Navigator podcast, we explore the multifaceted world of Identity Threat Detection and Response (ITDR). The episode delves into how various players in the market each bring their unique interpretations of ITDR
#17 Continuous Access Evaluation and Twosense - fascinating domain and a wonderful product
Some call it continuous MFA, some call it continuous access evaluation, but it's starting to become part of the enterprise security. This can tie back into NIST, Zero Trust Architecture or in PCI compliance. It’s just not a different form o
#16 PlainID and PBAC - An excellent solution to a very relevant problem
A deep dive into Authorization, Policy Based Access Control (PBAC) and how PlanID is solving the problem http://www.plainid.com Docs - https://docs.plainid.io Dev portal - https://docs.plainid.io/v1-api Integration hub - https://www.plainid
