Digital engagement is becoming increasingly pervasive and complex. While the modern Digital Enterprise offers a plethora of benefits including direct customer interactions, cost savings, increased employee productivity and new business models, areas such as Identity and Access Management (IAM), Governance, Security/Risk and Privacy often haven’t kept pace with the rapid digital advancements. In fact, many of the challenges faced decades ago in IAM/Security are still prevalent today including lack of integration of multiple incompatible identity stores, cumbersome password-based authentication, lack of consistent enforcement of security policies, the proliferation of personal data, difficultly scaling systems, lack of a solid trust foundation…While new solutions/technologies and standards are designed to  address these  and other issues, many of these core problems still persist at large organizations.

This session will focus on how IAM platforms are evolving to encompass more and more aspects of a complete IAM/IGA/PAM solution for organizations. Vendors such as Microsoft, Okta, CyberArk, Thoma Bravo’s IAM/IGA portfolio companies (Ping, ForgeRock, SailPoint), OpenText, IBM and others are taking big steps towards becoming complete integrated platform providers and will be evaluated as enterprise future state platforms.

At a minimum we expect enterprise future state IAM strategies to support new objects (customers, partners, services, “things”), increased scale, increased integration, and improved user experience (all users; developers, end-users, administrators, partners…) greater flexibility and the movement of resources to the cloud. 

These leaders will discuss, debate, address key questions and provide advice to our attendees. The focus will be on how large organizations architect and develop strategies in the Identity Management area that support the Digital Enterprise. This will include pragmatic advice for the enterprise and the overall industry as to how we might approach lingering challenges and how we might prepare for the expected future. This session will leverage the expertise of both the legends and the audience to better frame the problems and potential solutions for enterprises and the industry. If these problems were easy to solve, we wouldn’t be debating some of the same issues we were discussing 30 years ago.

The “legends” are the real leaders in this space from those who have built products and services to top industry analysts, thought leaders, visionaries and experienced practitioners in this area.  

He outlines the cultural shift required for Zero Trust, emphasizing no trust is given without verification, enhancing security across their vast network. Andrew discusses the integration of IAM, which streamlined user access while reinforcing control. He candidly addresses challenges, such as retrofitting these concepts into GM’s complex legacy systems. Success stories include thwarted attacks and improved operational efficiency. Andrew concludes with key takeaways on the strategic planning and employee buy-in that underscored their successful implementation, offering a valuable blueprint for similar enterprises.

This session focuses on key areas including step-up authorization mechanisms, which dynamically adjust security levels based on situational risk. The role of least privilege access strategies, ensuring users have access only to necessary resources, will also be discussed. Emphasis will be placed on the integration of real-time access decisions driven by contextual analytics, utilizing AI and machine learning for enhanced security. The session will explore the impact of these technologies in maintaining robust security protocols, alongside considerations for privacy and compliance in a complex digital environment. 

TechVision will describe processes and tools such as capability-based reference architectures that better position large enterprises to drive their suppliers, integrators, and internal resources to make better decisions and thoughtfully build out their foundation.  This session will include getting an end-user perspective on how this model works, lessons learned and recommendations for other organizations.