#382 - Sponsor Spotlight - HYPR

#382 - Sponsor Spotlight - HYPR

This episode is sponsored by HYPR. Visit hypr.com/idac to learn more.

In this episode from Authenticate 2025, Jim McDonald and Jeff Steadman are joined by Bojan Simic, Co-Founder and CEO of HYPR, for a sponsored discussion on the evolving landscape of identity and security.

Bojan shares his journey from software engineer to cybersecurity leader and dives into the core mission of HYPR: providing fast, consistent, and secure identity controls that complement existing investments. The conversation explores the major themes from the conference, including the push for passkey adoption at scale and the challenge of securely authenticating AI agents.

A key focus of the discussion is the concept of "Know Your Employee" (KYE) in a continuous manner, a critical strategy for today's remote and hybrid workforces. Bojan explains how the old paradigm of one-time verification is failing, especially in the face of sophisticated, AI-powered social engineering attacks like those used by Scattered Spider. They discuss the issue of "identity sprawl" across multiple IDPs and why consolidation isn't always the answer. Instead, Bojan advocates for a flexible, best-of-breed approach that provides a consistent authentication experience and leverages existing security tools.


Connect with Bojan: https://www.linkedin.com/in/bojansimic/

Learn more about HYPR: https://www.hypr.com/idac


Connect with us on LinkedIn:

Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

Visit the show on the web at idacpodcast.com


Chapter Timestamps:

00:00 - Introduction at Authenticate 2025

00:23 - Sponsored Episode Welcome: Bojan Simic, CEO of HYPR

01:11 - How Bojan Simic Got into Identity and Cybersecurity

02:10 - The Elevator Pitch for HYPR

04:03 - The Buzz at Authenticate 2025: Passkeys and Securing AI Agents

05:29 - The Trend of Continuous "Know Your Employee" (KYE)

07:33 - Is Your MFA Program Enough Anymore?

09:44 - Hackers Don't Break In, They Log In: The Scattered Spider Threat

11:19 - How AI is Scaling Social Engineering Attacks Globally

13:08 - When a Breach Happens, Who's on the Hook? IT, Security, or HR?

16:23 - What is the Right Solution for Identity Practitioners?

17:05 - The Critical Role of Internal Marketing for Technology Adoption

22:27 - The Problem with Identity Sprawl and the Fallacy of IDP Consolidation

25:47 - When is it Time to Move On From Your Existing Identity Tools?

28:16 - The Role of Document-Based Identity Verification in the Enterprise

32:31 - What Makes HYPR's Approach Unique?

35:33 - How Do You Measure the Success of an Identity Solution?

36:39 - HYPR's Philosophy: Never Leave a User Stranded

39:00 - Authentication as a Tier Zero, Always-On Capability

40:05 - Is Identity Part of Your Disaster Recovery Plan?

41:36 - From the Ring to the C-Suite: Bojan's Past as a Competitive Boxer

47:03 - How to Learn More About HYPR


Keywords:

IDAC, Identity at the Center, Jeff Steadman, Jim McDonald, Bojan Simic, HYPR, Passkeys, Know Your Employee, KYE, Continuous Identity, Identity Verification, Authenticate 2025, Phishing Resistant, Social Engineering, Scattered Spider, AI Security, Identity Sprawl, Passwordless Authentication, FIDO, MFA, IDP Consolidation, Zero Trust, Cybersecurity, IAM, Identity and Access Management, Enterprise Security

Jaksot(392)

#112 - CIAM with Stephen Cox

#112 - CIAM with Stephen Cox

Jim and Jeff talk with Stephen Cox, Co-Founder and Chief Technology Officer at Strivacity, about customer or consumer IAM (CIAM) and things to consider for a rollout such as security, scale, and using a product versus open-source solution. Connect with Stephen on LinkedIn: https://www.linkedin.com/in/stephencox/ Learn more about Strivacity: https://strivacity.com/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter. Have a question for Jim and Jeff? Ask us here: https://anchor.fm/identity-at-the-center/message

20 Syys 202146min

#111 - Authenticate 2021 Conference Preview with Andrew Shikiar

#111 - Authenticate 2021 Conference Preview with Andrew Shikiar

Jim and Jeff talk with Andrew Shikiar, Executive Director of the FIDO Alliance, about the upcoming Authenticate 2021 Conference. Authenticate 2021 Conference: https://authenticatecon.com/ Learn more about the FIDO Alliance: https://FidoAlliance.org Connect with Andrew on LinkedIn: https://www.linkedin.com/in/andrewshikiar/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter. Have a question for Jim and Jeff? Ask us here: https://anchor.fm/identity-at-the-center/message

16 Syys 202112min

#110 - Microsoft Hybrid Identity with Gil Kirkpatrick

#110 - Microsoft Hybrid Identity with Gil Kirkpatrick

Jim and Jeff talk with Gil Kirkpatrick, Chief Architect at Semperis and 17-year Microsoft MVP for Active Directory and Enterprise Mobility, about how Microsoft approaches Hybrid Identity and what you should be thinking about when it comes to securing these identities. Connect with Gil on LinkedIn: https://www.linkedin.com/in/gil-kirkpatrick/ Learn more about Semperis: https://www.semperis.com/ Learn more about the Hybrid Identity Conference: https://www.hipconf.com/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter. Have a question for Jim and Jeff? Ask us here: https://anchor.fm/identity-at-the-center/message

13 Syys 202156min

#109 - Hacking MFA with Roger Grimes

#109 - Hacking MFA with Roger Grimes

Jim and Jeff talk with Roger Grimes, Data Driven Defense Evangelist at KnowBe4 about hacking MFA and some of the misconceptions people might have about the security it provides. Connect with Roger on LinkedIn: https://www.linkedin.com/in/rogeragrimes/ Webinar - Nuclear Ransomware: https://us02web.zoom.us/webinar/register/1016269776988/WN_gXRlL99_QcKbNTF8oMyiaQ Webinar - 12 Ways to Defeat Multi-Factor Authentication: https://info.knowbe4.com/webinar-12-ways-to-defeat-mfa-chnl Some of Roger's Books: Hacking Multifactor Authentication - https://www.amazon.com/Hacking-Multifactor-Authentication-Roger-Grimes/dp/1119650798 Cryptography Apocalypse - https://www.amazon.com/Cryptography-Apocalypse-Preparing-Quantum-Computing/dp/1119618193 A Data-Driven Computer Security Defense - https://www.amazon.com/Data-Driven-Computer-Security-Defense-Should/dp/1549836536/ Hacking the Hacker - https://www.amazon.com/Hacking-Hacker-Learn-Experts-Hackers/dp/1119396212/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter. Have a question for Jim and Jeff? Ask us here: https://anchor.fm/identity-at-the-center/message

6 Syys 20211h 10min

#108 - About Passwordless with Kurt Johnson

#108 - About Passwordless with Kurt Johnson

Jim and Jeff talk with Kurt Johnson, Vice President of Strategy & Business Development at Beyond Identity, about the ongoing maturity of authentication and getting to passwordless. Connect with Kurt on LinkedIn: https://www.linkedin.com/in/kurt-johnson-3aaaa5/ Learn more about Beyond Identity: https://www.beyondidentity.com/ Average Cost to Buy Access to a Compromised Company - $1,000: https://www.darkreading.com/threat-intelligence/average-cost-to-buy-access-to-a-compromised-company-1-000 Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter. Have a question for Jim and Jeff? Ask us here: https://anchor.fm/identity-at-the-center/message

30 Elo 20211h

#107 - Getting SASE & Identity Based Segmentation with Harry Sverdlove

#107 - Getting SASE & Identity Based Segmentation with Harry Sverdlove

Jim and Jeff talk with Harry Sverdlove, Chief Technologist at Zscaler, about Identity Based Segmentation, Secure Access Service Edge (SASE aka "Sassy"), and who wins in a battle between the Stay Puft Marshmallow Man and the Pillsbury Doughboy. Connect with Harry on LinkedIn: https://www.linkedin.com/in/harrysverdlove/ Three Styles of Identity-Based Segmentation: https://www.gartner.com/doc/reprints?id=1-255M0P9G&ct=210204&st=sb&__hstc=186049462.8bc3d35413990dfd42b08db4be9b8c69.1622565814766.1622565814766.1622565814766.1&__hssc=186049462.1.1622565814766&__hsfp=2831226065&hsCtaTracking=b43f6d2f-510e-4951-a934-13034bc35a79%7C018892a5-876f-4ba5-9c89-c21e3f3725fa Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter. Have a question for Jim and Jeff? Ask us here: https://anchor.fm/identity-at-the-center/message

23 Elo 202149min

#106 - Successful IAM with Martin Kuppinger

#106 - Successful IAM with Martin Kuppinger

Jim and Jeff talk with Martin Kuppinger, Founder and Principal Analyst at KuppingerCole, about things to consider on how to make your IAM programs and projects a success. Connect with Martin on LinkedIn: https://www.linkedin.com/in/martinkuppinger/ Learn more about KuppingerCole: https://www.kuppingercole.com/ KuppingerCole European Identity and Cloud Conference: https://www.kuppingercole.com/events/eic2021 KuppingerCole Key Success Factors for IAM Projects: https://bit.ly/37guZkv Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter. Have a question for Jim and Jeff? Ask us here: https://anchor.fm/identity-at-the-center/message

16 Elo 20211h 16min

#105 - Evangelizing IAM with Tom Malta

#105 - Evangelizing IAM with Tom Malta

Jim and Jeff talk with Tom Malta, CEO & Principal of IAM Experts, LLC, about his Identify Defined Security Alliance IAM Evangelist of the Year award, hybrid cloud identity management, and the adoption of password less authentication. Connect with Tom on LinkedIn: https://www.linkedin.com/in/identitymgmtexpert/ A Single Identity Management and Security Strategy for Hybrid Clouds: https://www.idsalliance.org/blog/2021/05/12/a-single-identity-management-and-security-strategy-for-hybrid-clouds/ Connect with Jim and Jeff on LinkedIn here: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show at www.IdentityAtTheCenter.comand follow @IDACPodcast on Twitter. Have a question for Jim and Jeff? Ask us here: https://anchor.fm/identity-at-the-center/message

9 Elo 202153min