#382 - Sponsor Spotlight - HYPR

#382 - Sponsor Spotlight - HYPR

This episode is sponsored by HYPR. Visit hypr.com/idac to learn more.

In this episode from Authenticate 2025, Jim McDonald and Jeff Steadman are joined by Bojan Simic, Co-Founder and CEO of HYPR, for a sponsored discussion on the evolving landscape of identity and security.

Bojan shares his journey from software engineer to cybersecurity leader and dives into the core mission of HYPR: providing fast, consistent, and secure identity controls that complement existing investments. The conversation explores the major themes from the conference, including the push for passkey adoption at scale and the challenge of securely authenticating AI agents.

A key focus of the discussion is the concept of "Know Your Employee" (KYE) in a continuous manner, a critical strategy for today's remote and hybrid workforces. Bojan explains how the old paradigm of one-time verification is failing, especially in the face of sophisticated, AI-powered social engineering attacks like those used by Scattered Spider. They discuss the issue of "identity sprawl" across multiple IDPs and why consolidation isn't always the answer. Instead, Bojan advocates for a flexible, best-of-breed approach that provides a consistent authentication experience and leverages existing security tools.


Connect with Bojan: https://www.linkedin.com/in/bojansimic/

Learn more about HYPR: https://www.hypr.com/idac


Connect with us on LinkedIn:

Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

Visit the show on the web at idacpodcast.com


Chapter Timestamps:

00:00 - Introduction at Authenticate 2025

00:23 - Sponsored Episode Welcome: Bojan Simic, CEO of HYPR

01:11 - How Bojan Simic Got into Identity and Cybersecurity

02:10 - The Elevator Pitch for HYPR

04:03 - The Buzz at Authenticate 2025: Passkeys and Securing AI Agents

05:29 - The Trend of Continuous "Know Your Employee" (KYE)

07:33 - Is Your MFA Program Enough Anymore?

09:44 - Hackers Don't Break In, They Log In: The Scattered Spider Threat

11:19 - How AI is Scaling Social Engineering Attacks Globally

13:08 - When a Breach Happens, Who's on the Hook? IT, Security, or HR?

16:23 - What is the Right Solution for Identity Practitioners?

17:05 - The Critical Role of Internal Marketing for Technology Adoption

22:27 - The Problem with Identity Sprawl and the Fallacy of IDP Consolidation

25:47 - When is it Time to Move On From Your Existing Identity Tools?

28:16 - The Role of Document-Based Identity Verification in the Enterprise

32:31 - What Makes HYPR's Approach Unique?

35:33 - How Do You Measure the Success of an Identity Solution?

36:39 - HYPR's Philosophy: Never Leave a User Stranded

39:00 - Authentication as a Tier Zero, Always-On Capability

40:05 - Is Identity Part of Your Disaster Recovery Plan?

41:36 - From the Ring to the C-Suite: Bojan's Past as a Competitive Boxer

47:03 - How to Learn More About HYPR


Keywords:

IDAC, Identity at the Center, Jeff Steadman, Jim McDonald, Bojan Simic, HYPR, Passkeys, Know Your Employee, KYE, Continuous Identity, Identity Verification, Authenticate 2025, Phishing Resistant, Social Engineering, Scattered Spider, AI Security, Identity Sprawl, Passwordless Authentication, FIDO, MFA, IDP Consolidation, Zero Trust, Cybersecurity, IAM, Identity and Access Management, Enterprise Security

Jaksot(393)

#225 - Authenticate 2023 Preview with Andrew Shikiar of the FIDO Alliance

#225 - Authenticate 2023 Preview with Andrew Shikiar of the FIDO Alliance

In this episode of the Identity at the Center Podcast, Jim and Jeff welcome Andrew Shikiar, Executive Director & CMO of FIDO Alliance, for his sixth appearance on the show. They discuss the upcoming Authenticate 2023 conference, including its key themes, tracks, and speakers. Andrew also talks about the progress made by FIDO over the last year, the impact of FIDO's UX guidelines, and what's next for FIDO and the FIDO Alliance. The episode ends on a lighter note with a question about playing golf against an actor or musician. Connect with Andrew: https://www.linkedin.com/in/andrewshikiar/ Learn more about the FIDO Alliance: https://fidoalliance.org/ FIDO UX Guidelines: https://fidoalliance.org/ux-guidelines/ Cybersecurity Midwest Summit 2023: https://whova.com/web/2sOogdl3cIdo76LNOJrtUFRNXxvO%40kakipZlQHyewIA%3D/ Identity Week America - use code IDAC30 for a 30% discount on your conference pass: https://www.terrapinn.com/exhibition/identity-week-america/index.stm Authenticate Conference - use code IDAC15PODCAST for a 15% discount on your registration fee: https://authenticatecon.com/event/authenticate-2023/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

7 Elo 202359min

#224 - Exploring the Latest Trends and Developments in IAM with David Lee, The Identity Jedi

#224 - Exploring the Latest Trends and Developments in IAM with David Lee, The Identity Jedi

In this episode of the Identity at the Center Podcast, Jim and Jeff talk with David Lee, the Identity Jedi, about the latest trends and developments in IAM. They discuss how David got into IAM, The Identity Jedi newsletter, and his recently published book. They also pick his brain about a range of topics, including ITDR, Microsoft's work with Entra, Thoma Bravo's collection of Digital Identity companies, and the hottest technologies in the IAM space. The episode ends on a lighter note, with a discussion about the color of David's Identity Jedi lightsaber. Tune in to find out which color he chooses! Connect with David: https://www.linkedin.com/in/identityjedi/ Check out David’s book “The Only One In The Room: The Unwritten Rules of Being Black In Tech”: https://www.barnesandnoble.com/w/the-only-one-in-the-room-david-lee/1143684588?ean=9781312534155 The Identity Jedi: https://www.theidentityjedi.com/ Authenticate Conference: Use code IDAC15PODCAST for 15% off your registration fees. Learn more about the Authenticate conference: https://authenticatecon.com/event/authenticate-2023/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

31 Heinä 20231h 6min

#223 - CIAM with Cassio Sampaio of Okta

#223 - CIAM with Cassio Sampaio of Okta

In this episode of the Identity at the Center podcast, Jim and Jeff talk to Cassio Sampaio, who runs product for Customer Identity at Okta. They discuss CIAM, which stands for Customer Identity and Access Management, and its importance in today's digital landscape. They cover topics such as the difference between CIAM and traditional employee-focused identity and access management, self-service, common challenges businesses face when implementing a CIAM capability, the role of artificial intelligence and machine learning in CIAM, and the future of CIAM. Cassio also gives advice to businesses that are just starting to explore implementing a CIAM solution. The episode ends on a lighter note with all three recommending non-IT books for listeners to check out to help them with their IAM or professional lives. Connect with Cassio: https://www.linkedin.com/in/csampaio/ Learn more about Okta: https://www.okta.com/ Okta Secure Sign-In Trends Report: https://www.okta.com/blog/2023/06/secure-sign-in-trends-report/ Introducing Auth0 CRAPTCHAs!: https://auth0.com/blog/introducing-auth0-craptchas/ The Password Game: https://neal.fun/password-game/ Thinking Fast and Slow (book recommendation): https://www.amazon.com/Thinking-Fast-Slow-Daniel-Kahneman/dp/0374533555 Outliers: The Story of Success (book recommendation): https://www.amazon.com/Outliers-Story-Success-Malcolm-Gladwell/dp/0316017930 One Minute Manager (book recommendation): https://www.amazon.com/Minute-Manager-Kenneth-Blanchard-Ph-D/dp/074350917X Authenticate Conference: Use code IDAC15PODCAST for 15% off your registration fees. Learn more about the Authenticate conference: https://authenticatecon.com/event/authenticate-2023/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

24 Heinä 20231h 17min

#222 - Identity Standards with Justin Richer of Bespoke Engineering

#222 - Identity Standards with Justin Richer of Bespoke Engineering

On this episode of the Identity at the Center podcast, Jim and Jeff are joined by Justin Richer, Security & Standards Architect and Founder of Bespoke Engineering. Justin shares how he got into IAM and his book, "OAuth2 in Action". He also introduces "Cards Against Identity" and discusses how OIDC would be different if it were written anew today. The conversation turns to GNAP (Grant Negotiation and Authorization Protocol) and closes with a question from listener Markus about “trust in HR” and implementing automation being more of a political issue than a technical one. Tune in to hear this fascinating conversation! Connect with Justin: https://www.linkedin.com/in/justinricher/ Learn more about Bespoke Engineering: https://bspk.io/ Why CSCW Applications Fail: Problems in the Design and Evaluation of Organizational Interfaces - https://www.cs.uml.edu/~holly/teaching/91550/spring2012/p85-grudin.pdf Book - OAuth2 in Action: https://www.manning.com/books/oauth-2-in-action GNAP: https://oauth.net/gnap/ Cards Against Identity: http://www.cardsagainstidentity.com Gridlock Boston: https://bspk.io/games/gridlock/ Checkout Psycliq: https://psycliq.com/ The Precious Cinnamon Roll: https://www.theonion.com/beautiful-cinnamon-roll-too-good-for-this-world-too-pu-1819576048 Authenticate Conference: Use code IDAC15PODCAST for 15% off your registration fees. Learn more about the Authenticate conference: https://authenticatecon.com/event/authenticate-2023/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

17 Heinä 20231h 29min

#221 - Identity Orchestration with Eric Olden of Strata Identity

#221 - Identity Orchestration with Eric Olden of Strata Identity

Jim and Jeff discuss identity orchestration with Eric Olden, CEO at Strata Identity. They cover how it decouples apps from IAM infrastructure, the concept of identity fabric, and examples of IAM orchestration. They also explore how organizations start with orchestration and how it is driven by multi-cloud and legacy systems. Finally, they discuss how AI will impact orchestration. Connect with Eric: https://www.linkedin.com/in/boughtnotsold/ Learn more about Strata Identity: https://www.strata.io/ Authenticate Conference: Use code IDAC15PODCAST for 15% off your registration fees Learn more about the Authenticate conference: https://authenticatecon.com/event/authenticate-2023/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

10 Heinä 20231h 2min

#220 - IAM Evolution Continuum with Martin Kuppinger of KuppingerCole Analysts AG

#220 - IAM Evolution Continuum with Martin Kuppinger of KuppingerCole Analysts AG

Jim talks with Martin Kuppinger, Founder and Principal Analyst at KuppingerCole, about the evolution of digital identity. They discuss highlights from the 2023 European Identity and Cloud Conference (EIC), as well as topics such as decentralized identity, identity verification, and authorization. Connect with Martin: https://www.linkedin.com/in/martinkuppinger/ Learn more about KuppingerCole: https://www.kuppingercole.com/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

3 Heinä 202358min

#219 - Identiverse 2023: Identiverse Themes with Ian Glazer of Weave Identity

#219 - Identiverse 2023: Identiverse Themes with Ian Glazer of Weave Identity

Jim and Jeff talk with Ian Glazer, Founder and President of Weave Identity, about the themes and topics of the Identiverse 2023 conference. Connect with Ian: https://www.linkedin.com/in/iglazer/ Weave Identity: https://weaveidentity.com/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

26 Kesä 20231h 8min

#218 - Identiverse 2023: *BAC with Gal Helemski of PlainID

#218 - Identiverse 2023: *BAC with Gal Helemski of PlainID

Jim and Jeff talk with Gal Helemski, Co-Founder & Chief Product Officer at PlainID, about the role, attribute, and policy-based access controls. Connect with Gal: https://www.linkedin.com/in/gal-helemski-b9542231 Learn more about PlainID: https://www.plainid.com/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

19 Kesä 202351min