In everyday relationships, trust is not established through a single introduction or assumed to last forever. It develops through consistent behavior, clear boundaries, shared expectations, and accountability—and it changes when circumstances or behaviors change. Yet in the digital world, organizations often treat trust as a one-time decision: verify an identity, grant access, and assume the relationship remains trustworthy. As AI agents act on our behalf, fraudsters operate behind legitimate credentials, regulations demand greater accountability, and digital ecosystems become increasingly interconnected, our relationship with trust has become increasingly complicated. In this relatable, story-driven keynote, Tammy Klotz explores what identity leaders can learn from the way trust works in everyday relationships—from first impressions and warning signs to boundaries, delegation, betrayal, and rebuilding confidence.

Details coming soon!

Details coming soon!

Details coming soon!

Details coming soon!

AI agents increasingly act across clouds, applications, and organizational boundaries—often without clear ownership or effective identity controls. This session cuts through the noise surrounding emerging AI agent identity products and explains what organizations actually need to establish trust. Learn how cryptographically verifiable AI Passports, continuous authorization, runtime attestation, audit trails, and automated revocation can connect agents, models, and MCP servers to accountable owners and enforceable policies—without slowing AI adoption.

Details coming soon! 

Details coming soon! 

Authentication as we have known it is dead: a casualty of the generational change IAM is currently experiencing. Authentication is dead in a similar way SAML is dead but with meaningful differences. What lies ahead is more secure and delivers a better use experience. Ian Glazer, one of the industry’s leading experts in killing off parts of the industry is back for another victim. In this talk, Ian will discuss:
- why authentication as we know is dead
- why we continue to do it even though we know it is dead
- what replaces authentication
- what pieces we have today and which are missing
- how you can start today to deploy something far superior to authentication

Authentication is dead, but have no fear, what comes next is far far superior to what we have today.

As fraud grows more sophisticated and AI erodes traditional trust signals, the way we identify ourselves has never mattered more. Yet the basic act of proving who we are, or details about ourselves, hasn't kept pace, relying on physical documents and manual checks that fraudsters have learned to exploit. Verifiable digital credentials offer a solution, and isolated success stories have offered a glimpse at its potential - but technology alone hasn't been enough to drive adoption at scale.

FIDO Alliance CEO Andrew Shikiar draws a direct parallel to passkeys, which scaled from concept to over 5 billion in use in under five years. This was not achieved through technology alone, but through standardization, ecosystem alignment, usability guidance, and regulatory momentum working in concert. He will discuss how that same playbook is now being applied to digital credentials and what it will take to create an ecosystem the market can trust.

AI governance may not be a new concept, but it is rapidly gaining traction as organizations accelerate AI adoption while seeking to ensure its responsible, secure, and compliant use. Identity governance is a more established discipline—though often challenging to implement—that is taking on renewed importance with the emergence of agentic AI. While AI governance focuses on the overall purpose, oversight, and acceptable use of AI systems, identity governance manages the day-to-day administration of human and non-human identities, including AI agents, and their access to systems and data. This presentation explores how these complementary governance models work together to create an end-to-end governance lifecycle for agentic AI, enabling organizations to deploy AI safely, securely, and at scale.

The foundational premise of identity verification, that we can trust what we see, hear, and read, has officially collapsed. Generative AI has shattered that premise. Synthetic identities, deepfake video, cloned voices, and injection attacks have simultaneously lowered the barrier to sophisticated fraud and blurred the line between authentic and fabricated evidence. The unsettling reality is that the same technology fueling this new wave of fraud also offers our strongest defenses—and the winner in this contest is whoever adapts their identity infrastructure fastest.

Quantum computing threatens the cryptographic foundations that secure today’s identity credentials, authentication systems, and trusted services. At the same time, generative AI and autonomous agents are accelerating identity fraud through deepfakes, synthetic identities, and automated account takeovers, creating new challenges for maintaining trust in digital interactions. This presentation explores how organizations can prepare for these converging threats by adopting post-quantum cryptography and embracing crypto-agility. As governments move toward mandated migration by 2030-2035, resilient identity systems will require more than new algorithms. They must be designed to evolve as standards and threats change. By acting now, organizations can protect critical identity infrastructure and preserve trust in the post-quantum era.

Organizations are increasingly deploying AI agents to perform tasks that range from information retrieval and workflow automation to software development and cybersecurity operations. As these agentic systems become capable of taking autonomous actions, strong identity, authentication, and authorization, standards must be in place to manage risks of data exposure, unauthorized actions, compliance failures, and unpredictable autonomous behavior. 

To address these challenges NIST released a concept paper in February of 2026 titled "ACCELERATING THE ADOPTION OF SOFTWARE AND AI AGENT IDENTITY AND AUTHORIZATION." The paper received over 600 formal responses from across industry. This session will explore what NIST has learned from this feedback and how it has shaped a planned National Cybersecurity Center of Excellence project to demonstrate identification, authorization, and authentication of AI Agents.

Enterprise access models designed primarily for employees are being stretched by service accounts, automation, and emerging AI agents. Drawing on my experience implementing enterprise SSO and role-based access controls and building large-scale platforms across retail, financial services, and biotech, this session translates proven platform-engineering lessons into a practical identity roadmap.

Attendees will learn how to distinguish human, workload, and agent identities; separate authentication from authorization; apply least privilege; make access decisions observable; and establish ownership and lifecycle controls for non-human identities. The session will also examine common challenges such as role sprawl, standing privileges, weak auditability, and legacy access models.

Using vendor-neutral patterns and anonymized scenarios, participants will leave with a practical checklist for assessing their current identity architecture and preparing it for safer AI-enabled automation.

Most organizations cannot tell you how many cryptographic assets are in their environment right now. Not how many TLS certificates are active, not where their SSH keys are deployed, not which algorithms are running across their infrastructure. This gap exists because cryptographic identity has never had a single owner. Certificates belong to infrastructure. SSH keys belong to operations. Cryptographic configurations belong to nobody.

That invisibility has always been a risk. EO 14412 just made it an obligation.

Signed June 22, 2026, Executive Order 14412 requires federal agencies and covered contractors to transition to quantum-resistant cryptography by December 31, 2030. The FAR proposed rule is expected roughly six weeks after this event. But the order does not start with migration. It starts with inventory. You cannot migrate what you have not found.

This is where most PQC conversations fall apart. They focus on algorithms and standards while skipping the harder question: do you know what is in your environment? Across cloud, on-premises, hybrid, and air-gapped networks?

This session tackles that question from a practitioner's perspective.

Why cryptographic inventory is the hardest part of PQC readiness, and why most organizations underestimate the effort across connected and disconnected environments.

What discovery looks like when it must cover TLS certificates, SSH keys, and cryptographic algorithms across environments including air-gapped networks where standard tooling does not operate.

How to classify findings by quantum vulnerability and build a migration roadmap aligned with the 2030 and 2031 deadlines without disrupting operations.

Why this is a machine identity governance problem. Every non-human identity depends on cryptographic credentials, and those credentials are the first things that need to be quantum-safe.

Attendees leave with a practical methodology for cryptographic discovery and PQC readiness they can apply immediately.

As the demand for Artificial Intelligence (AI) and Non-Human Identity (NHI) management escalates, establishing standardized & robust trust frameworks specific to AI/NHI/Machine credentials is essential for systemic stability & potential growth. 

Exploring the intersection of regulatory change - or lack of, internal compliance, and governance considerations to be implemented to secure clients & therefore market confidence for AI-driven identity management. Rapid technological adaptation introduces severe compliance challenges, realistically requiring organizations to redefine legal liability for data loss and systemic errors due to AI/NHI/Machine error. To mitigate these emerging risks, organizations must develop deep institutional expertise in agent governance and deploy control systems tailored to autonomous entities. By analyzing emerging global standards and historical regulatory pitfalls, we can architect frameworks that prevent AI-driven fraud, protect consumer data, and foster market trust. Ultimately, proactive collaboration and standardized safety protocols will ensure that regulation acts as a foundation for innovation rather than a barrier. Finally, fostering a culture of partnership without over-reliance ensures humans maintain critical oversight, creating a more sustainable, secure, and productive hybrid ecosystem.

Details coming soon!

Details coming soon!

Details coming soon!

Details coming soon!