Identity at the Center Identity At The Center #14: KuppingerCole Consumer Identity World Conference Part 1
Oct 2, 2019
Jim and Jeff dive into the KuppingerCole Consumer Identity World conference, exploring key workshops and discussions. They debate the impact of evolving IAM guidelines and ponder future protocols like UMA and decentralized identity. The duo examines the imbalance in spending on breach prevention versus detection, highlighting AI's role in enhancing security. They also share insights from a breach response workshop and reflect on the importance of effective media communication during crises. Their conference takeaways include food praise and networking gems.
AI Snips
Chapters
Transcript
Episode notes
IAM Learning Curve And IDPro Body Of Knowledge
- IDPro aims to shorten IAM onboarding by creating a Body of Knowledge to teach core concepts faster.
- Jim and Jeff noted it can take 5–10 years to feel proficient, often due to product-focused starts.
Keep IAM Guidance Dynamic
- Avoid rigid 'best practices' docs; update guidance frequently to match changing standards like NIST's stance on SMS OTPs.
- Treat any body of knowledge as a living document, not a one-time mandate.
No Obvious Successor To Current Protocols
- No single protocol clearly replaces SAML/OAuth/OpenID; UMA and decentralized identity are discussed but not definitive.
- The industry will likely shift to something new over the next decade, beyond today's dominant systems.