#431 - Tectonic Shifts in Identity Security with Martin Kuppinger

Recorded live at EIC 2026 in Berlin, Jeff and Jim sit down with Martin Kuppinger, founder and distinguished analyst at KuppingerCole. They dig into the tectonic shifts AI is bringing to identity and security, the AI security fabric framework, why decentralized identity thinking may be essential for governing the agentic mesh, the ongoing debate over NHI terminology, what organizations can do tactically today, and what concerns Martin most about where the industry is heading by 2030.

Connect with Martin: https://www.linkedin.com/in/martinkuppinger/

Connect with us on LinkedIn:

Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

Visit the show on the web at http://idacpodcast.com

00:00 Introduction and Welcome

00:50 What a Distinguished Analyst Does

01:37 EIC 2026: Thought Leadership and Best Practice

04:17 Agentic AI: Non-Directed, Non-Deterministic Identity

08:22 Speed of Change: Tactical Now, Strategic Later

12:34 The AI Security Fabric: Five Capability Blocks

15:10 Identity Fabric Origins and Market Growth

18:27 Discovery as the Foundation for Governance

19:48 Governance, Explainability, and Organizational Gaps

22:00 Agent Lineage and Rethinking NHI Terminology

23:50 LLMs vs. Small Language Models

26:23 Is Agentic Identity a Genuinely New Problem?

32:29 Humanoid Robots and the Limits of AI Reasoning

37:05 Decentralized Identity, Trust Frameworks, and Signals

41:07 Identity Verification and Consent for Agents

48:42 What Concerns Martin About the Future of Identity

50:34 Favorite AI Application: Assisted Driving

55:00 Self-Driving Cars, Data, and Personal Privacy

Keywords: Martin Kuppinger, KuppingerCole, EIC 2026, EIC Berlin, agentic AI, AI security fabric, identity fabric, decentralized identity, AI governance, non-human identity, autonomous identity, dependent identity, agent lineage, explainability, MCP server, small language models, verifiable credentials, risk-based authorization, OT security, IDAC, Identity at the Center, Jeff Steadman, Jim McDonald, IAM, identity security