#350 - Sponsor Spotlight - SlashID

In this episode of the Identity at the Center podcast, host Jim McDonald welcomes Deneen DeFiore, Chief Information Security Officer at United Airlines. The episode delves into Deneen's career path in identity, her extensive experience at General Electric, and the evolution of identity and access management practices. The conversation transitions to her current role at United Airlines, highlighting her approach to integrating customer identity with enhanced trust and personalized experiences. The discussion also touches on building high-performing teams, the importance of professional development through conferences and certifications, and the balance between business and technical leadership. They conclude with some lighter notes on Cincinnati landmarks and local traditions. 00:00 Introduction and Housekeeping 01:16 Guest Introduction: Deneen DeFiori 01:37 Deneen's Identity Origin Story 04:11 Innovative Projects at GE 07:50 United Airlines and Customer Identity 12:35 Building a Winning Team 16:27 Professional Development and Certifications 19:58 Balancing Business and Technology 37:20 Future of Identity and Biometrics 40:01 Cincinnati Hallmarks and Farewell Connect with Deneen: https://www.linkedin.com/in/deneendefiore/ Attending Identity Week in America or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: http://terrapinn.com/IDWUS/Part-IDAC Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://register.hipconf.com/W7eVML Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast

9 Sep 202445min

In this sponsored episode of the Identity at the Center Podcast, hosts Jeff and Jim speak with Nitin Sonawane, Chief Product Officer and Co-Founder of Zilla Security. Nitin shares insights about disrupting the identity security and governance space with innovative solutions such as Zilla Universal Sync (ZUS) and how AI and ML can streamline and enhance access reviews and compliance. The discussion covers the evolution of identity governance, the integration challenges, and the novel approaches Zilla Security is adopting to make organizations more secure and efficient. They also touch upon the personal side, diving into Nitin's passion for astronomy and his impressive experiences with telescopic observations. Tune in for a deep dive into the future of identity governance and the potential of leveraging data for better security outcomes. 00:00 Introduction 01:21 Welcome to the Identity at the Center Podcast 01:55 Spotlight on Zilla Security 02:23 Meet Nitin Sonawane 03:36 The Role of a Chief Product Officer 04:44 Overview of Zilla Security 07:16 Challenges in Identity Governance 10:32 Innovations with Zilla Universal Sync (ZUS) 22:45 Future of AI in Identity Governance 33:16 Balancing Security and Compliance 34:43 The Role of Automation in Compliance 36:41 AI's Impact on Security and Compliance 39:14 Risk Management and Identity 40:59 Streamlining Access and Approvals 44:47 Leveraging Data for Risk Reduction 50:29 Future of Identity and AI 53:32 Astronomy and Identity 01:01:04 Conclusion and Contact Information Connect with Nitin: https://www.linkedin.com/in/nitin-sonawane-0743b/ Learn more about Zilla Security: https://zillasecurity.com/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and subscribe to our YouTube channel at idacpodcast.tv

5 Sep 20241h 2min

In this episode of the Identity at the Center podcast, Jeff and Jim discuss the intricacies of authentication with Andrew Shikiar, Executive Director and CEO of the FIDO Alliance. The conversation covers various aspects of authentication including different use cases, the importance of passkeys, and regional adoption trends. They also highlight the upcoming Authenticate 2024 conference in Carlsbad, California, emphasizing its unique value for identity experts and practitioners. Listeners are encouraged to take advantage of early bird pricing and discount codes for the event linked below. 00:00 Welcome to the Identity at the Center Podcast 01:36 Podcast Milestones and Schedule 02:42 Engaging with the Audience 04:35 Introducing the Guest: Andrew Shikiar 07:34 FIDO Alliance and Passkeys Overview 10:12 The Importance of Passwordless Authentication 18:23 Authenticate Conference Highlights 22:07 Conference Details and Registration 26:19 Networking and Conference Challenges 26:35 Session Tracks and Remote Participation 28:02 FIDO APAC Summit in Kuala Lumpur 29:38 Highlights of the Authenticate Conference 32:21 Identity Verification and Adjacent Technologies 34:28 Live Podcasts and Interactive Sessions 35:59 Fun Activities and Networking at Authenticate 39:52 Travel Experiences and Final Thoughts Connect with Andrew: https://www.linkedin.com/in/andrewshikiar/ Learn more about the FIDO Alliance: https://fidoalliance.org/ Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/ FIDO Alliance Shop - https://shop.fidoalliance.org/ - Use code IDAC10 for a discount on your purchase! Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

2 Sep 202451min

In this sponsored episode, Jim McDonald hosts Eric Woodruff, Senior Security Researcher at Semperis, to discuss the company's approach to identity security. They delve into Semperis' tools like Purple Knight and Forest Druid, focusing on their capabilities in detecting and mitigating Active Directory and Entra ID vulnerabilities. The conversation covers the critical role of prevention and response in ITDR, the impact of ransomware on Enterprise ID infrastructures, and the importance of ensuring a trusted state in Active Directory. They also touch on the upcoming Hybrid Identity Protection Conference and its significance for industry professionals. 00:00 Introduction and Sponsor Spotlight 02:15 Eric Woodruff's Background and Role at Semperis 05:22 Importance of Active Directory in Enterprises 06:45 Threats and Vulnerabilities in Active Directory 17:21 Tools and Solutions for Active Directory Security 22:41 Hybrid Identity Protection and Upcoming Conference 40:13 Closing Thoughts and Personal Anecdotes Learn more about Semperis: https://www.semperis.com/ Connect with Eric: https://www.linkedin.com/in/ericonidentity/ Meet Silver SAML: Golden SAML in the Cloud: https://www.semperis.com/blog/meet-silver-saml/ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://register.hipconf.com/W7eVML Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at idacpodcast.com and follow @IDACPodcast on Twitter.

28 Aug 202457min

In episode 300 of the Identity at the Center podcast, hosts Jeff and Jim celebrate their significant milestone by discussing the origins and future of the podcast. They delve into the complexities of identity management in educational settings and explore the philosophical underpinnings of the term 'identity at the center.' Highlighted questions from listeners cover topics like the effectiveness of Social Security Numbers for identity verification and the challenges of authenticating callers to the help desk. They also discuss their recent conference acceptances and plans for future episodes. The conversation shifts to the potential impacts of AI, decentralized identity, and the growing importance of identity in government services. 00:00 Introduction and Episode 300 Milestones 02:01 The Journey to YouTube 04:18 Becoming a 501c3 Nonprofit 07:18 Understanding Identity at the Center 09:37 Complexities of Identity in Education 12:43 Identity as the New Perimeter 18:20 Identity in Business and Government 27:15 Centralizing Identity Data for Success 28:21 Challenges in Higher Education IT Systems 30:01 Listener Question: Confirming Identity Over the Phone 30:31 Weaknesses in Caller Authentication 34:19 Best Practices for Identity Verification 47:48 Future of Identity and Access Management 51:23 Upcoming Conferences and Final Thoughts IDPro Body of Knowledge - Account Recovery (v3) by Dean Saxe: https://bok.idpro.org/article/id/64/ Attending Identity Week in America or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: http://terrapinn.com/IDWUS/Part-IDAC Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/ Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://register.hipconf.com/W7eVML Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast

26 Aug 202454min

In this episode of Identity at the Center podcast, hosts Jeff and Jim delve into Microsoft's approach to identity and access management with guest Merill Fernando, a product manager at Microsoft. Merill shares his journey into the identity space, the current state and future plans for Entra ID, and the importance of DevOps and governance in identity management. The conversation also touches on the potential of AI in security with the introduction of Security Copilot and the intricacies of managing non-human identities.00:00 Introduction and Greetings01:53 Concert Experience and Technology05:48 Travel and Work Updates07:54 Conference Announcements and Discount Codes11:22 Guest Introduction: Merrill Fernando12:08 Merrill's Journey into Identity18:54 Role and Responsibilities at Microsoft24:09 DevOps and Identity Management33:21 DevTestProd Environment Setup36:10 Challenges with Machine IDs in DevOps40:12 Understanding Service Principles42:42 Microsoft's Identity Governance and Administration50:25 The Role of AI in Identity Management56:15 Hiking as a Decompression Activity01:04:35 Final Thoughts and Wrap-UpConnect with Merill: https://www.linkedin.com/in/merill/Microsoft 365 / Entra DevOps Tenant Model: https://x.com/merill/status/1683783494324097025Attending Identity Week in America or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: http://terrapinn.com/IDWUS/Part-IDACAuthenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/Hybrid Identity Protection Conference (HIP Conf) - Use code IDACpod for 20% off: https://register.hipconf.com/W7eVMLConnect with us on LinkedIn:Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast

19 Aug 20241h 6min

In this episode of the Identity at the Center podcast, hosts Jeff and Jim delve into the complexities of creating effective RFPs (Request for Proposals) for Identity and Access Management (IAM) systems. They provide critical advice for both the customer and vendor sides, stressing the importance of defining clear objectives, understanding technical and business requirements, and avoiding an overwhelming level of detail that can detract from the RFP's usefulness. The hosts also advocate for combining software and services in a single RFP and highlight the value of open-ended questions to gather meaningful responses. Drawing from their experiences, Jeff and Jim discuss the pros and cons of RFPs, the importance of experience from both vendors and implementation partners, and offer strategies for managing the RFP process effectively. Thanks to listener Alfred in Canada for the great question! 00:00 Introduction and Casual Banter 02:09 Travel Adventures and Motorcycle Rally 05:07 Podcast Challenges and Listener Shoutouts 06:34 Upcoming Conferences and Events 09:57 Listener Question: Tips for a Smooth IAM RFP 22:00 Importance of Subject Knowledge22:15 The Positive Side of RFPs 24:06 Challenges with RFPs 25:39 Combining Software and Services in RFPs 26:58 Evaluating Implementation Partners 28:26 Experience Matters in RFP Responses 31:06 Tips for Effective RFPs 34:10 Personal Anecdote: A Scare and a Surprise Party 38:58 Upcoming Busy Schedule 40:05 Wrapping Up and Final Thoughts Attending Identity Week in Europe, America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: America: https://www.terrapinn.com/exhibition/identity-week-america Asia: https://www.terrapinn.com/exhibition/identity-week-asia/ Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast

12 Aug 202441min

In this episode, Jeff and Jim discuss various Identity and Access Management (IAM) topics with their guest, Chris Power, Senior Manager of IAM at Sallie Mae. They tackle the evolution and challenges of non-human identities, the potential sunsetting of Role-Based Access Control (RBAC) in favor of policy-based methods, and the organizational design of IAM teams and the importance of governance and cybersecurity measures. The episode rounds off with a light discussion about Marvel movie news, focusing on Robert Downey Jr.'s return to the Marvel universe as Dr. Doom. 00:00 Introduction and Casual Banter 2:07 Exploring Digital Identity Trends 5:01 Conference Highlights and Discount Codes 8:35 Introducing the Guest: Chris Power 12:11 Deep Dive into Non-Human Identities 29:20 The Future of RBAC in IAM 30:42 Challenges in HR Systems and RBAC 32:21 The Complexity of Implementing RBAC 33:23 Exploring Alternatives to RBAC 34:13 The Role of Attributes in Access Control 37:35 Policy-Based Access Control (PBAC) 42:59 Organizational Design in IAM 52:34 Future of IAM with AI and Big Data 55:55 Marvel Universe Discussion 63:42 Conclusion and Final Thoughts Connect with Chris: https://www.linkedin.com/in/jameschristopherpower/ Chris’ LinkedIn Post: https://www.linkedin.com/pulse/trying-something-new-chris-power-ysmdc/ Attending Identity Week in America, or Asia? Use our discount code IDAC30 for 30% off your registration fee! Learn more at: America: https://www.terrapinn.com/exhibition/identity-week-america Asia: https://www.terrapinn.com/exhibition/identity-week-asia/ Authenticate Conference - Use code IDAC15 for 15% off: https://authenticatecon.com/event/authenticate-2024-conference/ Connect with us on LinkedIn: Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Visit the show on the web at http://idacpodcast.com and watch at https://www.youtube.com/@idacpodcast

5 Aug 20241h 3min