Latest / Identity at the Center / #205 - 2023 Gartner US IAM Summit Review

Transcript

#205 - 2023 Gartner US IAM Summit Review · Identity at the Center

0:01
This is identity at the center. If it has anything to do with I
0:08
am this is the go-to podcast. So if you're a beginner or an
0:14
expert or anyone in between you've found your new home
0:18
welcome to Identity at the center.
0:21
Now your host Jim McDonald and Jeff Steadman, welcome to the
0:27
identity of the center podcast I'm Jeff and that's gem.
0:30
Hey Jim. Hey Jeff.
0:31
How are you? Not so bad yourself and I feel
0:35
like I've been seeing a lot of you lately, you sure have?
0:38
Why is that? I always in back to traveling
0:41
together and then this week we were at the Carter I am Summit
0:47
and we did a podcast on stage together which was fun, that was
0:52
the first time we've ever done that and then we had a fun event
0:57
that night. So we'll get to talk about all
0:59
that. Yeah we've been hanging tough
1:02
man. Yeah we've been on the road
1:04
quite a bit, kind of like the good old days but yeah Gartner
1:07
was fun this week and really that's why I think what this
1:09
episode is all about. Just kind of recapping our
1:11
experience from this week. So you and I were at Gartner
1:15
basically Monday, Tuesday, Wednesday.
1:18
And today is Friday, and this episode, we'll go live the
1:22
following Monday. So we'll be hearing this sort of
1:24
an in real time almost sort of for us but it was a crazy.
1:28
It was a cool experience man. I mean Definitely want to give a
1:30
shout-out to Henry, came Becky, they brought it to our session.
1:35
It was a good time and it was cool.
1:36
Doing that sort of podcast style session.
1:38
If you were there great, you saw it.
1:41
And you were part of it, if you weren't.
1:44
We're still hopeful maybe that we might be able to get the
1:46
recording at some point. But as of now, it is a kind of
1:49
had to be there or be square type of situation.
1:53
Yeah, I also think that even if we do, get the audio might not
1:57
be the best cleaners. Audio of any episode we've ever
2:02
published a new that Henriques, his mic was going in and out and
2:07
things like that. So it's just the way it is.
2:10
Yeah, I mean our fuse, there were a few Logistics issues but
2:13
I think the actual content and stuff like that was was pretty
2:16
good. We got some laughs in the room
2:18
and kind of put their put the had them put their thinking hats
2:22
on, including the one that I was looking forward to is Gartner
2:25
pay for play and Henry, K answering that.
2:28
And then there's a pie one of my favorite moments.
2:30
So is he answered what he answered and then before I die,
2:36
before we let him answer, I said, okay, you don't have to
2:38
convince me, you've got to convince the audience, right?
2:40
So all the people in the audience were asked afterwards.
2:43
So raise your hand. If you were convinced by
2:44
Henriques thing and about half the people raise their hands but
2:50
Henry Kay said, 97% looks good to me and then we moved on, I
2:54
really like that. Yeah, that was here, Audio Only
2:56
by it was clear, the audience's head of like mixed reactions on
2:59
that one. Yeah, if your audio only that
3:02
you would think the 97% really happened but yeah, it was.
3:06
So was that your favorite question?
3:08
I thought her pay for, I think that was the one they think I
3:10
was most looking forward to to see what the answer was.
3:13
I mean there were they were all fun.
3:15
I mean we had a good time you know listener questions came in
3:18
there was some really good ones about Thoma Bravo and what are
3:20
they doing and seeing what Enrique and Becky are, you know,
3:24
thought swear if I had to sum it up, they had a good answer but
3:28
they don't know either they do No either.
3:30
Yeah, exactly. Yeah, exactly.
3:32
We're all kind of wondering like, what's going on over
3:33
there? What about you?
3:35
Well, I don't know if it was my favorite question, my favorite
3:38
answer. So the question was, what was
3:40
your most embarrassing moment? I Becky was more than happy to
3:44
pass it over to Enrique but he told a hilarious story so I
3:50
don't want to spoil the here because I feel like this is
3:51
something you should go up to Enrique.
3:53
And ask about oh well that's going to kind of take the the
3:57
air out of my story then, so okay.
4:00
Fine. But every Valley is the best
4:02
question is the most it was? Yes, it was.
4:04
Definitely our end on a lighter note was definitely worth it.
4:09
If you see Henry K, ask him about the cut, the cheese story,
4:13
and I think that's how we worry, because no one's going to tell
4:15
it better than him. Right?
4:16
I think there's just kind of the way it was, but Welsh, he shared
4:19
a great story about that. Yeah, no, he definitely.
4:24
He definitely owned it. Yeah, we had a funny moment.
4:26
Speaking of cutting the cheese, we got a uber ride back.
4:31
I think it was that night and the Uber driver had fart mode in
4:36
his Tesla. I'd never heard of it.
4:39
But apparently like to Teslas, capable of like putting whoopee,
4:44
cushions, under any seat within the car and I could just imagine
4:49
like three or four year olds who are in the car and you know the
4:52
cars going around just doing the whoopee cushion under
4:55
everybody's sitting in the car and then just having a good ol
4:58
time. Yeah.
4:59
I Have to imagine because I have nieces and nephews that have
5:02
been in the car and I have demonstrated that feature as
5:06
part of the Tesla but it is a lot of fun.
5:09
I mean you entities working with the engineers and yeah and yeah
5:14
we were just we were crying laughing.
5:17
Yeah it was it was good times so interesting for sure.
5:22
I got to uh yeah I want to go back to our session will quit
5:24
because I thought you know, Enrique story was great about.
5:27
What's your most embarrassing moment?
5:28
I'm going to give a shout-out to Becky cuz She did the ultimate
5:31
pro move and said, oh, she didn't answer it.
5:34
She said, oh Henriques, got a great story and then just went
5:37
over to him. So hats off again to Becky for
5:42
that ultimate deflection. I thought that it was well
5:44
played. Yeah.
5:46
Well I you know, my overall impression of the session was
5:50
super positive looking around the audience and seeing so many
5:53
people who have been part of our professional pass, for the past,
5:56
you know, decade-plus and Consulting.
5:59
And We know who listen to the podcast, your former clients or
6:03
former colleagues and, you know, new people that were meeting on
6:09
an almost daily basis. And then folks coming up after
6:13
the session and saying, like and you guys did a really good job
6:17
asked a lot of tough questions because I don't really think of
6:19
identity that the center is like Face the Nation, right?
6:22
We are question. I wouldn't say they're softball
6:25
questions but they're, you know, not putting anybody on the spot.
6:28
I kind of feel like someone's question.
6:30
Things were tough questions and, you know, I think people really
6:34
appreciated that. It wasn't a, it wasn't a waste
6:38
of 30 minutes. It wasn't a big, you know, Bravo
6:41
Gartner pitch. Yeah.
6:43
And we asked questions that way that we thought, you know, they
6:46
you haven't heard Gartner analyst, answer, you know, a
6:49
dozen times already before, which is cool.
6:50
I think we did that. Well, you know, hopefully get
6:53
invited back to do something, you know, similar in the future,
6:55
which would be very cool. But yeah, I think we, I think we
6:58
had a good show and yeah. That's pretty much I think.
7:01
I'll go for 30 minutes. It went by really quickly and
7:06
yeah So then we have an event that night we went axe-throwing
7:12
which is super cool. Definitely got to give a shout
7:15
out to our SM OCTA, one Cosmos, they sponsor that entire thing.
7:20
We rent it out an entire place to do.
7:22
Ax throwing classic video games. There was food, there was a bar,
7:29
there was not a lot of shop talk, which was great.
7:31
It was just basically a bunch of people having fun listeners and
7:35
yeah, had a great turnout. So lots of folks attended which
7:37
is very cool. It was a very competitive night.
7:39
I think everybody did their thing and of Tuesday night so
7:43
understand if we weren't, you know, if you're unable to attend
7:45
that school, we had a good time anyway.
7:47
And I've discovered that, if the identity thing doesn't work out
7:51
in the podcasting, doesn't work out.
7:53
I'm a turn, professional actor. Or how did you do?
7:57
I did pretty good man. I definitely am not going to be
8:00
a professional Acts or but I had a fantastic time and I out I
8:05
also want to thank our sponsors are some In 1080P, as I think
8:10
the Special Touch in this was that, you know, it's kind of
8:13
like look, I'll says the identity of the sender podcast.
8:17
We've been doing this, you know, vendor-neutral, vendor agnostic
8:21
approach, and it works for us, right?
8:23
So having a sponsored event is kind of like a little concern of
8:27
how that would be perceived, but I think one of the things that
8:30
made it really were, was that the event there was, it wasn't
8:35
like a pressure pitch, right? It wasn't like, Like as I've
8:38
been on the customer side of things before getting into
8:41
Consulting and went to, you know, dinners or events held by
8:46
by vendors. And sometimes you get like that
8:49
at hard pitch, like when you're going to sign the paperwork to
8:52
buy our software and it's like, like, by the way, I've got a
8:54
condo, right? Yeah.
8:56
Yeah, exactly. It's kind of like that that kind
8:59
of pitch and it's like, there was none of that going on and
9:02
everybody was just free to enjoy themselves and free to through
9:06
the axes and play the video. Names and, you know, enjoy the
9:09
buffet and all that good stuff. So it was a great night.
9:12
Got to meet a lot of folks who listen to the show, I know some
9:17
people signed up and weren't able to make it.
9:20
I think you know that's the nature of the Beast and
9:23
certainly like anybody who wasn't able to attend still you
9:27
know, love to connect to some point in the future.
9:32
I'm sure we'll do something in the future.
9:33
I mean this isn't our last conference and you know there
9:36
are other last video where are we?
9:37
You thinking about your next one.
9:39
Usually people say this isn't my first rodeo, I think we, you
9:42
know, went well enough, we can say it's not our last Rodeo.
9:45
Yeah. Definitely.
9:47
What else about the conference itself?
9:48
I mean, we had a great session, we had a great event ourselves
9:51
but yeah, I think the session that the conference itself was
9:54
good. So the opening keynote kind of
9:57
kicked. All right, off with a bang, it
9:59
was lead like a wolf by Tina and you know, I hope I pronounce it
10:02
right. Basically, asking the question
10:05
of kind of like what kind of C so are your CIO.
10:08
Are you and there was a test to take in the app, on the web, all
10:13
the link in our show. You lots of people can kind of
10:15
take the test but, you know, the idea I think was it was
10:18
interesting that, you know, to see the different animals and
10:20
what her thought process was going into this.
10:23
You and I both took the test. Do you want to share?
10:26
What kind of CIO you are? Sure.
10:30
So the animals are, you know basically they give you after
10:36
you finish, you get a graphic. And there's the light side and
10:39
the dark side and on the both sides, there's three different
10:44
categories, power manipulation, and warfare.
10:47
So a light size like we're fairs that dolphin manipulation is
10:53
some kind of sad of bird. And power is like a sheep.
11:00
The Light Side means like you're, I guess like you're not
11:02
that aggressive. The dark side is power is a
11:06
lying manipulative. Shows the snake Warfare so
11:09
shark. So my approach to power was lion
11:14
which is basically positional and coercive power as well, so
11:20
horrible. I don't really think of myself
11:22
that way but you know, I guess I answered the questions, your
11:25
approach to manipulation wolf, your approach to Warfare Junior
11:29
wolf, which probably just keeps me barely on the dark side.
11:34
I guess I don't like to beat people up too much and Your
11:37
Extreme Animal profile wolf CIO which I think is like.
11:43
So wolf was like right in the center which meant I think
11:47
you're you're like the Jedi. You're on the light, you're
11:50
you're in the light but maybe you're in the gray or if you're
11:54
in the middle. Yeah.
11:56
I don't really know much about yet.
11:57
I saw. I don't know why I use that
11:58
analogy but I did. Yeah.
12:01
So I got wolf straight across the board and I was kind of
12:02
surprised with but I guess that's where you kind of want to
12:05
be. Is in the middle.
12:06
I think I was the idea right? Is to be cut.
12:07
Axl. But I was talking to people
12:10
after the you know, after the session about it I feel like
12:12
this is another area where context and audience matters.
12:15
There's a time to be a snake. I guess I don't throw I don't
12:19
feel like them because every time to be a snake but in the
12:21
concept of this test right a snake vs.
12:24
A dove or a sheep vs lion. You know, are you launch or
12:28
liability is essentially the sort of the thing but I would
12:32
have liked to seen a Jedi version of this, but I can
12:35
imagine Disney would be, you know, willing.
12:37
License out for stuff like that, but in the middle are the gray,
12:41
Jedi the wolf right. They're able to adapt and sort
12:44
of filter out and change. You know, what's needed.
12:47
So so I ended up being a wolf and that's the story and I'd be
12:52
curious to see what other people we know.
12:53
If they've taken the test, I think, Daniel mentioned, he was
12:56
a wolf. I'm curious, if we'll have a
12:59
link in our show notes, take the tests, hit us up on LinkedIn.
13:03
You know what you end up with have your surprise or that, or
13:05
maybe reach out to Tina, as you know, she's what I put this
13:08
together but I thought was really cool.
13:09
Great way to kike open up the conference was having something
13:12
like that right away and really all the key notes are great.
13:15
They were not so much technology Focus.
13:18
They were more on people, psychology, bias, inclusion,
13:24
diversity, things like that. There was plenty of technical
13:27
content. I think the key notes that a
13:28
good job of sort of You know, weighing up the other side of it
13:32
so it wasn't so, you know, focused on when he one specific
13:36
area, I think if you enter Gardener in the keynote was
13:40
about, you know, IGA or role management.
13:45
I'd be like this is garbage because the Keynotes is supposed
13:50
to open your mind about topics. You don't think about everyday.
13:53
So, to me, the sounds like, right on target, you know, you
13:57
don't want to be in the Keynote. To focus on your, your subject
14:03
for the conference. Yeah, it was good.
14:06
I enjoyed it. I will tell you that the the I
14:09
think it was I remember was end of day 1 or me as being of day
14:11
to there was a keynote and it was very emotional for some
14:15
people like people were crying in the bathrooms, things like
14:18
that. So it was definitely, you know,
14:20
you don't, I told Becky and Enrique this, like you're not
14:22
supposed to go to Gartner for the fields, but they brought it
14:25
this year. So, there was definitely some,
14:27
you know, some, some impact for for some Which is great.
14:30
I think that's, you know, it's one thing to go to a conference
14:33
and be like, oh, you know, I learned something.
14:36
There's another one. There's another level of
14:38
conference. I think we're it's oh I felt
14:40
something and it could be good, it can be bad but it's more
14:44
memorable. I think that way and maybe more
14:45
impactful and it's good to see content like that out there.
14:48
So I don't want to, I won't spoil it for folks, but there
14:50
was a there was a good one there.
14:51
And there were quite a few folks who I think took that kind of
14:55
message to heart that was there so good on you.
14:58
I think everything that Yeah, the way you described that is
15:02
great, and I think what might be coming through is that I didn't
15:06
get to attend the Keynotes. I spent the entire day Monday in
15:10
my bed, sick as a dog and actually, so in Texas, they have
15:16
these traveling nurses and the nurses will come to your room
15:19
and hook you up to an IV bag, and give you a me, no acids, and
15:26
like what's called steroid shots and stuff like that.
15:30
You know, you saw me the night before, right?
15:32
So I'd like your 10:00 10:30. I was fine.
15:35
We were having dinner, I had a I had two beers swear.
15:40
To got two beers, not a lot within a couple hours of sick as
15:45
a dog and I don't know if it was food poisoning or just whatever
15:49
ones in me. Just everyone else around.
15:51
You was fine, we everything was good.
15:54
Yeah. When you texted me that morning
15:55
was like oh here we go. Again, here comes another hey we
15:59
should go speak it. At a conference and Jim's going
16:01
to leave me hanging out to dry again.
16:02
But yeah from actually showed up to leave you out to dry but no,
16:06
no, I hey man if it wasn't for that, I'd be IV bag.
16:10
I'm sure I would have left you out to dry eyes, sorry to say,
16:15
well no, we would have been fine, but I'm glad you're
16:17
feeling better. You were and you were fine.
16:18
I think by Tuesday night, it seems like so let's just and I
16:22
felt great. Yeah, yeah that it was basically
16:25
the I think this third shot was the biggest thing so that takes
16:28
like the inflammation down Everything.
16:30
So you're getting your just wanted to get swollen jacked for
16:34
our session. Let's just be honest here.
16:35
Oh yeah, yeah for sure. So that's that.
16:39
You know, that's probably news. I don't think a lot of people
16:41
maybe would have caught that like on when we were doing our
16:43
session on stage. But yeah, I think it.
16:46
But everyone is a miraculous recovery.
16:48
Everyone saw your shoes. He had the whitest shoes.
16:51
No demand. They were blindingly, white is
16:53
what I heard from more than one person.
16:55
I actually went to Dick's Sporting Goods and I saw him.
16:58
I was like, those are the The shoes.
17:01
You got a scuff them up a little bit or something.
17:03
No way, man. No way.
17:06
Let's see what other sessions were good Becky.
17:09
Gave you a shoutout day three her her session around I am
17:14
having a see the table which is one of the questions that we
17:16
asked in our session. But I was very cool.
17:19
I missed it, because I was like, 3 minutes late to get it in and
17:22
I guess she she gave you a shout-out in the podcast show.
17:24
So thanks to Becky, you know. Hopefully, at some point, he's
17:26
my favorite analyst because of that, yes, it's right there.
17:30
No not well. So yeah a lot of respect to her
17:35
and I definitely appreciate the shout out but like her focus is
17:39
on how to run not a good. I am program or at least one of
17:43
our focuses and you got to admit that's you.
17:45
And I were like that's that's our motor will have our right in
17:50
our wheelhouse. Yep.
17:52
I saw a couple of her sessions and you know she's a good
17:53
speaker. I think it's one thing I envy
17:55
about why the Gartner folks is they are all really good
17:58
presenters and they come up with such Good content all the time.
18:01
And I don't want to feel like I'm kissing but here, but it was
18:03
a good conference. I enjoyed myself, I didn't
18:06
attend as many sessions as I normally would, because I was in
18:08
the hallway, having conversations with lots of
18:10
people, it was great. Lots of listeners kind of came
18:13
up, which is very cool and having conversation with vendors
18:16
and, you know, former clients and former colleagues, it felt a
18:19
little bit like a high school reunions to some degree.
18:22
Yeah. But it but it but a good version
18:24
of that maybe not the nightmare version that maybe some people
18:26
have and yeah, the exhibit hall was Lee well, laid out and they
18:31
had, you know, the cooking spawn.
18:35
That's all the Hands-On sort of like a cafe in the back.
18:38
And I saw a Ford Rock had like a coffee station.
18:43
Yeah, there was ice cream Adam party for, but the cookies in
18:46
the expo hall, those are legit good man.
18:48
So I definitely took part of that that was my lunch.
18:51
One day. I had a cookie when I was
18:52
talking to people and that's how I made it to dinner.
18:56
Nice. There was an article to that we
18:59
saw. I think is from venturebeat, and
19:01
yes, it wasn't ventured be. I'll have a link in our show
19:03
notes, but they're, you know, they kind of recap.
19:06
Some other themes that are out there.
19:07
Do you want to take us through that?
19:08
Jim sure. Sure was like the four major
19:11
themes. So the first one was avoiding
19:13
breeches with identity threat detection, and response.
19:17
Itd are so itg are actually I think during our session with
19:22
Andre came Becky, this was the thing that he brought up like
19:27
does the Game Changer technology where we had had go vets on the
19:31
podcast. Last Gartner session, where you
19:33
just kind of like, was starting. I felt like for me, my eyes were
19:37
just being open to ITT are and to me it's like this layering of
19:43
identity Intelligence on top of Ip technology and detection.
19:49
That has existed for a long time.
19:51
But when you layer identity on top of it, it becomes so much
19:54
more effective. Yeah, I kind of like it.
19:57
It's like what I thought you ba was going to become like 10
20:00
years ago. This is sort of like I still
20:02
feel it's like that evolution of taking data from systems you
20:05
have and doing identity things with it is the way I look at
20:09
very identity to it. Yeah, no.
20:12
I think you're exactly right. Except I think you'e be a fell
20:16
flat. And I think part of it was where
20:20
came in in the, in the cycle of it.
20:23
I think Philly guy, TD are sitting at a better Time.
20:26
Yeah I feel like I can be a was maybe a little bit too soon.
20:30
People were still maturing people who are still putting in
20:32
their IGA and Pam platforms and 10 years is a lawful long time,
20:36
right? To really see companies and
20:39
other organizations build out their identity capabilities.
20:42
Some. So maybe this is a better time.
20:44
I think there are certainly some good things that are coming
20:46
through that space that are pretty exciting.
20:49
So you and I were in Consulting when you EBA was kind of the
20:55
full Life cycle. I won't feel like it's dead at
20:57
this point and someone can come on the show and like, challenge
21:01
me on that and say, no, it's far from dead but nobody's talking
21:05
about it anymore. But the, the term I didn't eat
21:07
the center. So I schmatta Wala kind of like
21:10
coined this phrase and then I trademarked it and then we try
21:14
to really get take it back, you can have it.
21:19
But the idea was okay, connecting all these identities
21:22
systems, ueb a was a big part of that, but it was kind of a and
21:26
loon system that, you know, we said okay well now we've got to
21:29
build an interface from ueb a to SSO, the IGA, to Pam, If you
21:36
don't have this interface with him, it's like useless.
21:39
Like if all I can do is like throw up some dashboard, this is
21:42
oh this might be a problem. I mean, what good is that?
21:46
Well I think that's where we saw like that the lotion of what we
21:49
what some vendors were calling themselves as like Sim 2.0.
21:52
So Splunk and EXA beam and things like that.
21:56
Where? Yeah we had, you know, we as a
21:58
company we had built Integrations right between like
22:00
exit beam and sale point and actually Beeman centrify and
22:04
kind of things like that. Yeah, I mean it's otherwise you
22:08
got the data in different silos and you try to pull it into a
22:10
gym. Generic security incident event
22:14
monitor type approach. Now you've got, I think identity
22:16
is definitely taken a step forward and even those products
22:18
you've got Microsoft Sentinel, you know, as out their identity
22:22
just has kind of taken over. So it's gratifying to see us.
22:28
I feel like, okay, yeah, we were on the right track, maybe a
22:30
little bit too soon and certainly those other companies
22:33
are not hurting, right? They're doing really well and
22:34
they have great products. But as I A space.
22:37
I think now is a better time for organizations to really start to
22:40
look at the analytics component of their program and say okay.
22:45
Do we have the do we are we collecting the necessary data
22:48
and then what are we doing with it?
22:50
Seems like we're probably in a better position now for people
22:52
to actually start doing in the real world, instead of it being
22:55
maybe a little more theoretical So the next Summit theme was
23:00
identity for security should guide.
23:02
I am strategy. 100% agree what you know, when I was reading
23:09
this I was like, okay, are I think we have to be careful that
23:13
we don't pat ourselves on the back too much or or kind of
23:16
conflate are importance, but I don't think we are is it's
23:21
interesting. We met with C.
23:24
So, two weeks ago or week before last and you're talking about
23:30
defense in depth, it's like you never even hear about
23:33
defense-in-depth anymore. Now, it's all zero trust.
23:36
So the defense in depth strategy is about the idea that you have
23:39
the these layers of security Purity.
23:41
And that you'd have to have get past multiple layers of security
23:47
in order to perform a bad action.
23:50
Whereas your trust assumes your through there's layers and says,
23:54
we have to, you know, to secure the data.
23:57
In the database. We have to secure the database,
23:59
not stop the perpetrator at the firewall.
24:02
I think they're both relevant and that's why you know that the
24:07
that's why I was asking myself that question of okay, dude.
24:10
Are we? to wrapped around this identity
24:13
for security, identity is definitely Key piece, all of
24:18
this, but does that mean defense in depth as no value anymore?
24:23
Why don't they get? I don't think it.
24:24
Defense-in-depth has gone away. I think it's almost as soon.
24:27
If this point that you've got security like an onion, there's
24:31
different layers or Castle, right?
24:32
You've got different sort of defenses in place.
24:35
I think defense in depth is probably a marketing term just
24:37
like zero. Trust is it's part of your
24:39
strategy. I certainly agree.
24:42
Identity should be a very important part.
24:44
Is it the most important depends on who you are if you're 100
24:47
percent in the cloud and you don't have other layers of
24:50
security or as many layers of security.
24:52
Yeah, Maybe maybe it is the most important thing.
24:56
I also think, you know, we are in the identity industry so we
25:00
get it. There are way more people on the
25:03
outside of the eye. Dentist industry that probably
25:06
don't quite get it yet. You're kind of traditional, you
25:10
know, security folks, who are still, they grew up in the world
25:13
of firewalls and, you know, building perimeters and moats,
25:17
and vpns and things like that. And really just in the last, I
25:21
would say five to ten. Yours is when identity is really
25:24
started. Taking hold of.
25:25
Oh, this isn't just an operational functionality, it
25:30
should be part of our security strategy so it takes a while, I
25:33
think for that message to get out and, you know, for
25:35
organizations, especially, you know, maybe larger ones or ones
25:38
that aren't as agile to sort of shift around and start to move
25:41
around, priorities and Investments and things like
25:43
that, to, really take advantage of this new perimeter that we
25:47
call identity. It's not new for us, but it's
25:50
probably still new for a lot of people out there who just, you
25:52
know, then, I live and breathe it every day and they rely on
25:55
others within their organization or their, you know, their
25:57
networks to kind of help pull them up.
25:59
So I think getting the word out of still a good idea, for sure,
26:02
we certainly believe in it. We didn't name this podcast
26:05
with, you know, with all that in mind.
26:07
So maybe maybe a little bit preaching to the choir, but I
26:11
still think we still need to sing that song so people can
26:13
hear it that aren't as involved in a day in space.
26:16
Like we are. They're good feedback.
26:18
So the third Summit theme was Keem.
26:22
See IEM paves the way for to smarter strategies for enabling
26:28
identity fabric immunity. Yeah, and this is an area that
26:33
I'm interested in because I say, kind of mentioned this in our
26:37
kind of preview episode Cloud infrastructure.
26:40
Entitlement management key Morecambe or hornet.
26:42
However, the heck were pronouncing it.
26:45
I see the value for it. I don't know if people really
26:47
understand it yet. I think there were some head,
26:50
scratchers. There was a session on it.
26:53
I want to say day two, or maybe it's day three, and I caught a
26:56
couple people kind of Walk It Out and kind of like a what do
26:58
you think about that? And I think I kind of got a
27:00
little bit of a like a ASI. I'd look like that was
27:03
interesting. I'm not sure what I'm supposed
27:04
to do with it yet. So maybe this is sort of the
27:07
next space to kind of keep an eye out.
27:10
You know. I hear something like identity
27:11
fabric community and that sounds really cool.
27:13
And I also think I don't know what the heck that means.
27:16
So what does that even mean? I think we need to do a better
27:18
job of sort of figuring out what the message is there and maybe
27:22
more common language to be able to articulate.
27:25
It better again for the people who are not in the identity
27:28
space or maybe don't have as much experience in it or you
27:31
know Whatever it may be. So maybe this is something we
27:34
should do a show on a future. I know you.
27:35
And I have talked about in the past, you've talked to, like,
27:37
Jerry Gable right from from Strata.
27:39
And we've talked with John Morton from British if, you
27:41
know, to name a few, maybe it's an area that we come back on and
27:44
try to get maybe a little more detail and sort of demystify it
27:48
or, you know, level set it again.
27:50
Because I'm sure things have changed in the last six months
27:52
of a year or something like that since we've had those guys on
27:55
Yeah, I, you know, I think the thing is Keem is the question I
27:59
ask myself is wasn't this required before there's Cloud
28:02
infrastructure. So it's going out and
28:05
essentially, identifying, these are your over-provisioned
28:08
accounts. And I think what it does in
28:12
order to get that information is interrogates.
28:16
The logs that are available from the infrastructure vendor.
28:22
So Amazon or Microsoft, and it goes back and analyze, those and
28:27
spits out reports. And you can automate actions,
28:31
all kind of detective controls. So for me, I'm 100% open to
28:37
being convinced that I'm wrong here, is that chemo only covers
28:41
a portion of what you need to do re and it is essentially just
28:46
doing like, log aggregation analysis.
28:50
And I think about, you know, if you're running a cloud, you've
28:53
got to manage. Jenna's, you've got to manage
28:56
authentication, privileged access, things like that.
29:00
I don't think keeping really does those things.
29:03
So it's only, you know, part of the solution as far as the
29:07
solution that you kind of live without on the Enterprise, but I
29:11
think actually, we probably should have had Keen for the
29:14
Enterprise prior to Cloud infrastructure.
29:18
So yeah, definitely, definitely conversation for the future.
29:23
We've got a few shows lined. Up coming up in the next few
29:26
months. We're going to be talking about
29:28
Hakeem and Cloud infrastructure and best practices and all that
29:32
stuff. So the fourth and final General
29:36
theme was Journey time. I am orchestration delivers
29:41
better user experience. Yeah, that's a, that's a lot to
29:46
say in one sentence. So I think, really, the way I
29:49
take the takeaway I got from that is really again the see the
29:53
table, right? We're not designing things in
29:54
The Silo, if you're designing an experience, you need to make
29:58
sure you've got everything pull together.
30:00
It can't just be, hey, we're going to put single sign-on in
30:03
and be done with it. It's okay.
30:04
Well, what's the journey look like from a user?
30:06
This is probably more focused on the customer or consumer side of
30:08
things, but certainly on the Enterprise as well, right?
30:11
You don't want people looking for ways around your, your The
30:14
apparatus right from a security perspective.
30:16
So I think understanding what the stakeholders are.
30:19
And what is the cohesive vision of?
30:21
How do you want this to work and trying to be strategic around?
30:25
It is really kind of take away. I took from that from that
30:28
statement. Yeah, you know, I work for the
30:31
client where there were really focused on building custom
30:35
Journeys, that provided a good user experience for their
30:40
constituents variable called, constituents is kind of like the
30:44
external member population and really, it's about really
30:50
thinking through those Journeys. So, for example, I think the
30:54
example I was using the venturebeat Articles around
30:57
identity proofing, and doing the You know, the, you know, show
31:01
your passport and then do a selfie things like that, it has
31:06
to flow, it has to make sense to the user.
31:09
Has to be something that they're not going to abandon because
31:13
inappropriately placed like, all I want to do is buy a book.
31:17
And now you're asking me to show my passport, like that's the
31:22
that what you get for that, that giving up that much of your
31:26
private information is obviously not worth it in that scenario.
31:30
So I think it makes sense, I think at a high level like
31:34
again, these are themes, right? So it's how do you make
31:38
appropriate Journeys? Include I am workflows so that
31:43
you're building a better customer experience and not
31:46
worst. Customer experience by, you
31:49
know, yes, we're going to improve your security.
31:51
Yes, we have all this great technology has to be
31:54
appropriate. Has to make sense to the user,
31:57
has to be intuitive. Yeah, I think that's true for
31:59
everything, right? It's kind of make sense, just
32:02
because it's cool. Maybe it's a cool thing, but
32:04
maybe doesn't make sense for whatever you're trying to build
32:06
out there any final thoughts on the conference or we start to
32:10
wrap things up. I say we can wrap things up.
32:13
But you know, I gotta say like, you know, I wish I was able to
32:18
attend sessions due to my illness.
32:21
I wasn't able to but you know what, I could tell it being in
32:27
what was in Grapevine, Texas. Has, which is right near the
32:30
Dallas-Fort Worth Airport. The facility was really good.
32:36
Again, you get that bubble feeling like you get inside the
32:39
bubble and you almost don't want to leave the bowl and I think
32:45
that you can kind of get that in Vegas, but because Vegas has
32:48
such a draw to leave your Resort.
32:51
So, my understanding is that the next Gardener conference is not
32:55
going to happen until late next year, and it will be back in
32:58
Vegas. Yep, we'll be back at.
33:00
No, it won't be back in Vegas. It'll be back in Grapevine,
33:03
Texas. The same place.
33:04
So we were this time, same location, but it will not be for
33:08
another 18 months ish, it'll be at the end of 2024.
33:12
So plenty of time to prepare and you know, get ready for that.
33:18
Well, very cool. Alright.
33:21
So, That's a No-No later. Know what food could you eat the
33:25
most amount of sushi? I've eaten much Sushi.
33:30
Do you think you could put away in one setting a couple pounds
33:35
to the point where it's like, hums my Sushi?
33:38
Oh yeah. Definitely pounds of sushi.
33:40
Well, definitely pounds of sushi.
33:42
I mean I can be a probably two pounds of sushi without unlike a
33:48
regular weeknight after working out especially but There's a,
33:54
there's several foods that I could do, as you like,
33:56
Thanksgiving dinners, is another one where I could just sit there
34:00
and eat like three helpings of Thanksgiving dinner and being
34:04
such pain. It's not a good thing though.
34:07
Not good thing. What about you?
34:09
It's funny. You mention Thanksgiving thing I
34:10
never over, eat on Thanksgiving. I'm usually like a one plate and
34:14
done, and it's not even like that, that stacked or anything
34:17
like that. Well, I'm a simple, man, I'll
34:20
say something like chips, right? I can, I could certainly do a
34:24
bag of Doritos or you know, some chip variety snack variety.
34:28
I don't know if I get to two pounds of sushi or something
34:31
like that but you know, I'm more of a snacker type person.
34:35
You know. I think Oreos by the sleeve
34:37
should be the dietary like the should be like the you know the
34:41
serving size and its difficulty like one of those I'm more of a
34:44
muncher that kind of thing. So if you could have a robot
34:48
that would just sit there and like don't your Oreos for you
34:51
and feed them to you, would you do?
34:52
It a robot now because I think part of the joy is Duncan
34:56
yourself, right? You get a little bit of the milk
34:57
on your fingers and you kind of work through that.
35:00
Like, you know, I want, I got to do something to burn some of
35:04
those calories. I'll just keep getting rounder
35:05
and rounder. You do the dunking, right?
35:09
We'll end up like idiocracy the movie or something like that.
35:12
Yeah, I actually do like, do like Oreos.
35:16
Hmm, you got me thinking now, Jeff?
35:18
Yeah, what thinking desserts? It's only thinking like.
35:22
No metal objects, auklet. I mean things like M&M's
35:25
chocolate covered almonds like those kinds of things.
35:27
What about caramels? I don't know if I've ever had a
35:31
Carmelo. I think I picture it, but I
35:34
don't know if I think it's too chewy.
35:36
Probably maybe know they're not true at all.
35:38
Actually, but they are too messy.
35:41
The, the caramel is like, like, well, what is it looks
35:44
abandoned? What's that is like,
35:46
chocolate-covered caramels that what I'm thinking shark over
35:48
caramel and like bar form and the caramel is very loose.
35:53
So like if you bite it in the middle of the square it would
35:57
just run everywhere, okay? I think I know where talk about,
36:00
you know what, that's what it was called, but, yeah, those are
36:02
good. Yes.
36:04
And then the other employee like, Heath or Square bars.
36:08
I don't know about a he threw a score by.
36:10
I'm not a toughie type of person.
36:12
Oh yeah. You guess like, jammed up in
36:15
your teeth? Yeah, give me a Snickers bar,
36:17
I'll House Snickers bars. Like it's nobody's business.
36:21
How many Snickers bars? Do you think you could do an
36:24
unhealthy amount which is leave it that way?
36:27
So I got a funny story When I was in elementary school, it was
36:32
a parent-teacher night and I went with my dad and went to sit
36:38
with the teacher and she's like, I'd like to show you something.
36:41
Gets my dad walks back to my desk.
36:44
It was one of those old deaths were like flipped up and you can
36:47
put all your stuff and it was full of candy Rock.
36:57
But could you imagine Like a fifth grader, like such a sugar
37:01
high. Mmm.
37:02
You remember those that, like fundraiser packs of like M&M's,
37:05
were they like the boxes? We would do Eminem Shooters and
37:11
basically we'd buy a box like the little, you know, not not
37:15
the full box with all the all the different mini boxes in it.
37:17
But here's a box of atoms for fundraising and we would eat
37:20
them all at the same time. So you'd have a mouth full of an
37:24
entire package of M&M's. Yeah.
37:27
Could you imagine trying to teach Teach us after that or
37:31
match. If you got like all of a sudden
37:33
like really bad cough in here, like flew out of your mouth
37:37
gross. All right, that's a good spot.
37:39
Thanks Jim for bring us down a level again.
37:41
We're going to go ahead and leave it there.
37:44
Yeah, so as the great Bill Belichick, once said we're on to
37:47
Cincinnati. Next up, for us is identi verse
37:50
coming up at the end of May we have a special discount code for
37:54
all of our listeners. It's i d v Dash.
37:59
I see een 20. I'll have it in our show notes
38:03
so people want to grab it, they get 20% off the registration
38:05
which is very cool. So, I know a couple people
38:08
already taken advantage of it. It doesn't unfortunately, apply
38:11
if you've already registered, but if you haven't, you're late
38:12
to the game a little bit of Saving Grace that people can use
38:15
for that. So again, that will be
38:17
identified as coming up at the end of May, that is in Las
38:20
Vegas. So Jim, and I will see you
38:22
there. I think we're going to try to
38:23
plan another event for the for the kind of podcast.
38:26
Maybe this thing, couple kind of figure out what that looks like,
38:29
they That feels like a little bit tougher because if you don't
38:32
get in soon you kind of lose, you know, locations that are
38:35
kind of convenient and then you end up having to drive or get an
38:39
Uber or something like that. So we still got a full, it's
38:41
also be realistic. Vegas is going to be like 10
38:44
times more expensive than Grapevine Texas.
38:47
That's exactly. So if you're looking to sponsor,
38:50
hit us up, we'd love to partner up with folks.
38:53
Yeah, so let's go and leave it there for this week.
38:55
We're on the web ID c-- podcast.com.
38:58
We're on Twitter at, I Ideas. See podcast.
39:01
If you were lucky enough to get one of our fancy stickers at
39:04
Gartner, throw it on a laptop, throw it on somewhere, take a
39:07
picture, send it to me. Be happy to feature it on our on
39:10
our Twitter Channel. We're on Mastodon at idac
39:13
podcast at infosec dot exchange. Jim and I are always on
39:17
LinkedIn. Always talk with folks and happy
39:19
to connect with our listeners. And don't forget to like And
39:21
subscribe this. That's the best way that you can
39:23
help us out and, you know, keep us going with new episodes.
39:27
So with that, we'll go ahead and leave it for this week.
39:29
Jenna's always thinks your time. Glad to see you healthy and hail
39:33
at the end of the week compared to where we started.
39:35
And we'll talk with everyone in the next one.
39:39
You've been listening to Identity at the center.
39:42
We hope you've enjoyed the show, make sure to like rate and
39:46
review and we'll be back soon, but in the meantime hit the
39:50
website at identity at the center.com and find us on
39:54
Twitter at idac podcast. See you next at time on identity
40:01
at the center, at time on identity at the center,