WHAT’S HAPPENING THIS WEEK

Titans of the Industry

For so long, identity has been an afterthought in the security world. It wasn’t important to the business, and it wasn’t important to security. But over the last decade, my how we’ve grown as in industry. That’s in no small part to the dedication and enthusiasm of the 25 people listed in this year’s Identity 25 list. These are truly some Titans of the industry, and I’m honored to have had a number of them on the podcast and have maybe done an escape room or two with a couple of them..lol.

Can’t talk about this list without spending some time to talk about one specific person. Vittorio Bertucci.

Vitorrio was world-renowned within the identity space. I didn’t know him personally and had very few interactions with him, but his legend echoes in every corner of the web when it comes to identity. He is missed by many, and it’s awesome to see him listed here.

We often wait too late to praise people for the wonder and joy they bring into the world. The dedication they show to their craft. Let’s give people their flowers while they are here to enjoy them. So to every member of the Identity 25.

Thank You! Job Well Done!

Automation in Identity and Access Management — The Superhero We Didn’t Know We Needed!

“With great power comes great responsibility,” said a wise uncle in a Spandex-laden world. Well, in the throbbing vein of modern workplaces, that ‘great power’ is automation and our ‘responsibility’ is to ensure identity and access management (IAM) doesn’t turn into a villain’s playground.

The Secret Superpowers of Automation

Imagine every new hire getting their digital keys to the kingdom without some poor intern running around frantically (it's not an intern's job, but we’ve all been there). That’s automation in IAM for you — think Cupid, but instead of arrows, he shoots account credentials that never miss their target. 💘

But why stop at love at first login? Automation keeps the romance alive by ensuring account details are consistently minted (because who likes a maverick?). When accounts are created with the same tender loving care, spotting a rogue one is like finding a pineapple on pizza — it just sticks out (a controversial taste, I know).

A Crossover Event Better Than Any Cinematic Universe

Alright, so we have the Avengers of account creation, but what about their 'un-creation'? Here's where our superhero plot thickens! Imagine if Thor only knew how to smash with his hammer but couldn't hang it back up. Chaos!

Same goes for IAM automation (cue dramatic music). If you automate adding folks to groups with parties and confetti, make sure there's a system for when they leave, too. Don't be the host who forgets to plan for cleanup after the bash. Have your cake (automation), and eat it too (full implementation).

The Nemesis: Half-Baked Automation

Here’s a twist no one likes — a superhero without a plan for the sequel. If you automate halfheartedly, you're scripting a coupon for chaos. Nobody likes seeing half a movie, and no one appreciates half-automated systems (seriously, it’s like ghosting...rude).

For instance, that group assignment automation? Sweet! But do remember, when the party’s over, someone's got to turn off the lights. Automating the “unassignements” of groups keeps the hangover at bay. No one wants an ex-employee accidentally entering the secret base, right?

The Happy Ever After

"So, what's the endgame?" you ask, perched on the edge of your seat, popcorn forgotten (unless you're a multitasker). Simply put, automation in IAM is like having your own Jarvis. It lets you breathe easy, knowing that the system puts on capes and tights to handle the gritty stuff, while you...Netflix and chill?

By now, you should be feeling like Tony Stark in his lab — a few touches here and there, and voila! Magic (Tech magic, but still). Automating IAM is the to-do list that ticks itself off. And trust me, that’s the feel-good blockbuster everyone in IT is waiting for.

Saviynt and Microsoft

Here’s a team-up I didn't see coming. Saviynt and Microsoft working together around AI. Well..kind of. Savyint’s been selected for Microsoft’s Security Copilot program, and the results of this could be very interesting. I would love to see something substantial come out of this.

• Real RBAC analysis and role creation based on intelligence

• LLM type prompts to allow users to analyse entitlement data.

• Advisor type interaction, which can walk a user through configuring an IAM platform based on best practices.

The list is endless.

Good first step, Saviynt; now let’s see what you do with it.