#382 - Sponsor Spotlight - HYPR

#382 - Sponsor Spotlight - HYPR

This episode is sponsored by HYPR. Visit hypr.com/idac to learn more.

In this episode from Authenticate 2025, Jim McDonald and Jeff Steadman are joined by Bojan Simic, Co-Founder and CEO of HYPR, for a sponsored discussion on the evolving landscape of identity and security.

Bojan shares his journey from software engineer to cybersecurity leader and dives into the core mission of HYPR: providing fast, consistent, and secure identity controls that complement existing investments. The conversation explores the major themes from the conference, including the push for passkey adoption at scale and the challenge of securely authenticating AI agents.

A key focus of the discussion is the concept of "Know Your Employee" (KYE) in a continuous manner, a critical strategy for today's remote and hybrid workforces. Bojan explains how the old paradigm of one-time verification is failing, especially in the face of sophisticated, AI-powered social engineering attacks like those used by Scattered Spider. They discuss the issue of "identity sprawl" across multiple IDPs and why consolidation isn't always the answer. Instead, Bojan advocates for a flexible, best-of-breed approach that provides a consistent authentication experience and leverages existing security tools.


Connect with Bojan: https://www.linkedin.com/in/bojansimic/

Learn more about HYPR: https://www.hypr.com/idac


Connect with us on LinkedIn:

Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

Visit the show on the web at idacpodcast.com


Chapter Timestamps:

00:00 - Introduction at Authenticate 2025

00:23 - Sponsored Episode Welcome: Bojan Simic, CEO of HYPR

01:11 - How Bojan Simic Got into Identity and Cybersecurity

02:10 - The Elevator Pitch for HYPR

04:03 - The Buzz at Authenticate 2025: Passkeys and Securing AI Agents

05:29 - The Trend of Continuous "Know Your Employee" (KYE)

07:33 - Is Your MFA Program Enough Anymore?

09:44 - Hackers Don't Break In, They Log In: The Scattered Spider Threat

11:19 - How AI is Scaling Social Engineering Attacks Globally

13:08 - When a Breach Happens, Who's on the Hook? IT, Security, or HR?

16:23 - What is the Right Solution for Identity Practitioners?

17:05 - The Critical Role of Internal Marketing for Technology Adoption

22:27 - The Problem with Identity Sprawl and the Fallacy of IDP Consolidation

25:47 - When is it Time to Move On From Your Existing Identity Tools?

28:16 - The Role of Document-Based Identity Verification in the Enterprise

32:31 - What Makes HYPR's Approach Unique?

35:33 - How Do You Measure the Success of an Identity Solution?

36:39 - HYPR's Philosophy: Never Leave a User Stranded

39:00 - Authentication as a Tier Zero, Always-On Capability

40:05 - Is Identity Part of Your Disaster Recovery Plan?

41:36 - From the Ring to the C-Suite: Bojan's Past as a Competitive Boxer

47:03 - How to Learn More About HYPR


Keywords:

IDAC, Identity at the Center, Jeff Steadman, Jim McDonald, Bojan Simic, HYPR, Passkeys, Know Your Employee, KYE, Continuous Identity, Identity Verification, Authenticate 2025, Phishing Resistant, Social Engineering, Scattered Spider, AI Security, Identity Sprawl, Passwordless Authentication, FIDO, MFA, IDP Consolidation, Zero Trust, Cybersecurity, IAM, Identity and Access Management, Enterprise Security

Jaksot(392)

#240 - Authenticate 2023: Biometrics with Stephanie Shuckers, Professor at Clarkson University and Director of the Center for Identification Technology Research

#240 - Authenticate 2023: Biometrics with Stephanie Shuckers, Professor at Clarkson University and Director of the Center for Identification Technology Research

In this episode of the Identity at the Center Podcast, Jim McDonald and Jeff Steadman discuss the fascinating world of biometrics with special guest Stephanie Shuckers, Professor at Clarkson University and Director of the Center for Identification Technology Research (CiTeR). Stephanie provides insights into her work at CiTeR and her journey into the field of biometrics. She explains various types of biometrics, including voice biometrics, and addresses concerns about privacy and biases. The conversation delves into the technical aspects of biometrics, exploring how it works behind the scenes and addressing the topic of deepfakes. Stephanie also shares her thoughts on backup plans when biometrics fail and the challenges of biometric performance. The episode concludes on a lighter note with a discussion about alternative authentication methods and the intriguing "dead finger problem." Connect with Stephanie: https://www.linkedin.com/in/stephanie-schuckers-13a44a9b/ Center for Identification Technology Research (CiTeR): citer.clarkson.edu CiTeR YouTube Chanel: https://www.youtube.com/@citer2285 Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

25 Loka 202356min

#239 - Authenticate 2023: Machine Identity with David Mahdi of Transmit Security

#239 - Authenticate 2023: Machine Identity with David Mahdi of Transmit Security

In this episode of the Identity at the Center Podcast, hosts Jim McDonald and Jeff Steadman are joined by David Mahdi, CIO for Transmit Security, to discuss machine identity management. David shares insights into his role as CIO at Transmit Security and explains the concept of machine identities. They explore the differences between machine accounts and machine identities and delve into the importance of matching machine accounts to machine identities to avoid potential issues during human identity events. The conversation also touches on the need for multi-factor authentication for machine accounts and the impact of AI in this area. To wrap up on a lighter note, David shares his experience with the Star Wars Rise of the Resistance at Disneyland in California. Connect with David: https://www.linkedin.com/in/dmahdi/ Learn more about Transmit Security: https://transmitsecurity.com/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

23 Loka 20231h 7min

#238 - Oktane, Identity Week, and Navigate Thoughts & Authenticate Preview

#238 - Oktane, Identity Week, and Navigate Thoughts & Authenticate Preview

In this episode, Jim and Jeff discuss various topics including thoughts from the recent Oktane, Identity Week America, and SailPoint Navigate conferences. The hosts also provide a preview of their Authenticate 2023 keynote live show and reveal the scheduled guests, including Daniel Grube from TikTok, Christiaan Brand from Google, and Mahendar Madhavan from Ebay. The episode concludes on a lighter note with a discussion about best and worst airports and the best thing they ate that week. Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

16 Loka 202344min

#237 - OAuth 2.0 Step Up Authentication Challenge Protocol with Vittorio Bertocci

#237 - OAuth 2.0 Step Up Authentication Challenge Protocol with Vittorio Bertocci

Jim and Jeff talk with Vittorio Bertocci, Principal Architect at Auth0, an Okta product unit, about the new OAuth 2.0 Step Up Authentication Challenge Protocol (RFC9470), his health, and the first things we will do with Apple Vision Pro. RFC 9470 - OAuth 2.0 Step Up Authentication Challenge Protocol: https://www.rfc-editor.org/rfc/rfc9470.html Step Up from Lighthearted Joke to RFC Homage by Brian Campell: https://www.pingidentity.com/en/resources/blog/post/vittorio-bertocci-identity-community-contributions.html Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

9 Loka 202336min

#236 - Identity Week America 2023: Ian Glazer & Steve Hutchison

#236 - Identity Week America 2023: Ian Glazer & Steve Hutchison

In this episode of the Identity at the Center Podcast recorded live at the Identity Week America 2023 conference, Jeff is joined by guest co-host Ian Glazer of Weave Identity and Steve Hutchison, Director of Security Architecture at the Mitsubishi Bank of Tokyo. The main topics discussed include Hutch's entry into the field of identity and his role as a director of security architecture, his involvement with IDPro along with Ian, the panels at Identity Week America, the latest happenings with Ping and ForgeRock, predictions for big acquisitions, the direction of Microsoft Entra, and the current buzz surrounding IDPro, including a discussion on the upcoming CIAM BOK article written by Ian. The episode concludes on a lighter note with Hutch educating us about Dungeons & Dragons. Connect with Hutch: https://www.linkedin.com/in/sehutchinson/ Connect with Ian: https://www.linkedin.com/in/iglazer/ Weave Identity: https://weaveidentity.com/ IDPro: https://idpro.org/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

6 Loka 20231h 7min

#235 - Identity Week America 2023: Molly Taylor & Jonny Drape-Comyn of Identity Week America

#235 - Identity Week America 2023: Molly Taylor & Jonny Drape-Comyn of Identity Week America

In this episode of the Identity at the Center Podcast, Jeff is joined by Molly Taylor, Conference Producer for Identity Week America & Asia, and Jonny Drape-Comyn, Sales and Exhibition Manager for Identity Week America. They dive into various topics related to Identity Week, including the backgrounds of Molly and Johnny, the target audience of the conference, the planning process, the role of government in past conferences, and the future of Identity Week. They also touch on the location of booths and the exciting UK food scene. Tune in to gain insights into the world of identity and learn more about this engaging conference. Connect with Molly: https://www.linkedin.com/in/molly-taylor-fagan-2b657920a/ Connect with Jonny: https://www.linkedin.com/in/jonathandrapecomyn/ Identity Week America: https://www.terrapinn.com/exhibition/identity-week-america/index.stm Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

5 Loka 202323min

#234 - Identity Week America 2023: Jeff Reich of the Identity Defined Security Alliance

#234 - Identity Week America 2023: Jeff Reich of the Identity Defined Security Alliance

In this episode of the Identity at the Center Podcast, Jeff interviews Jeff Reich, the Executive Director of the Identity Defined Security Alliance (IDSA), at the 2023 Identity Week America conference. They discuss the latest updates from the IDSA, including Cybersecurity Awareness Month in October, collaboration with the Secure Identity Alliance, and the upcoming Identity Management Day on April 9th, 2024. The conversation also explores the value of attending conferences like Identity Week America, particularly in terms of gaining insights from industry experts and networking opportunities. Jeff Reich shares his experience with government involvement in identity security, considering the significant government attendance at the conference. The episode wraps up with a lighthearted question about the "best worst thing" happening in identity. Connect with Jeff Reich: https://www.linkedin.com/in/jreich/ Learn more about the IDSA: https://www.idsalliance.org/ Learn more about the SIA: https://secureidentityalliance.org/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

4 Loka 202332min

 #233 - Another Garbage Plate of IAM

#233 - Another Garbage Plate of IAM

In this episode, Jim and Jeff serve up a "garbage plate" of IAM (Identity and Access Management) topics. They discussed Jeff's week 1 Chicago Bears pick, Delta's SkyMiles program changes, their YouTube Channel, and the upcoming Oktane and Identity Week America events. They also touch on the issue of fragmented identity data, referencing an article by Lasse Andersen, CEO of IndyKite. Forbes Article discussed: https://www.forbes.com/sites/forbestechcouncil/2023/09/06/fragmented-identity-a-modern-business-nightmare/ Identity Week America - use code IDAC30 for a 30% discount on your conference pass: https://www.terrapinn.com/exhibition/identity-week-america/index.stm Use the code OKTNIDAC30 for 30% off your Oktane 2023 registration at https://www.okta.com/oktane/ Authenticate Conference - use code IDAC15PODCAST for a 15% discount on your registration fee: https://authenticatecon.com/event/authenticate-2023/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

2 Loka 202347min