From AuthN to AuthZ: The Future of Identity
summary
Claims a new stack: Ipsy gives opinionated SSO profiles with conformance and session/account lifecycle levels 1–3 so enterprises can ask for “session level 2” instead of vague SAML; SCIM is powerful but stays mostly in Fortune 5000. Introduces OPC (OpenID Provider Commands) to push account lifecycle commands (delete, archive) directly to apps. Hello ships a free GitHub offboarding flow (offboarding delivers ~80% of directory value) and is prototyping EVP in Chrome for instant email verification. For agents proposes Agent O: URL identities, HTTP message signing, proof‑of‑possession and delegation because OAuth2 + DCR fails for dynamic public agents.
AI-written summary · about
chapters (10)
- 0:00Future of identity
- 2:24Enterprise identity challenges
- 4:33OpenID Provider Commands OPC
- 6:22B2C identity options
- 8:49Email verification protocol EVP
- 10:36Social login benefits and privacy concerns
- 11:01Agent identity standards
- 13:30Agent O Athos
- 16:03Identity predictions
- 17:11Q&A
related talks
01h 12mIdentity 2.0: the what, why and how of social and federated login
20mCIAM for AI: Authn/Authz for Agents
19mIdentity:The missing link in API security
35mIdentity and Access Management for the Decade Ahead
37mCustomer Identity for Modern Apps and APIs
05mAre you talking about Auth with and N or a Z?
36mTo Identity and Beyond
28mBuilding Identity for an Open Perimeter