Latest / Identity at the Center / #321 - Sponsor Spotlight - MightyID

Transcript

#321 - Sponsor Spotlight - MightyID · Identity at the Center

0:00
Identity can be an asset, you know, it can be a security
0:04
mechanism, it can, you know it, it can be so many different
0:08
things. And so when you have all this
0:10
information from, you know, backing it up and holding it, it
0:13
becomes something that is, is pretty useful.
0:17
So we're looking at ways that we can take that information and
0:21
and give it, present it to our customers, their information and
0:25
present to our customers in ways that is is even more useful for
0:28
them. This is identity at the center
0:37
if it has anything to do with IAM.
0:40
This is the go to podcast now your hosts Jim McDonald and Jeff
0:46
Steadman. Welcome to the Identity at the
0:55
Center podcast. I'm Jim McDonald and we are
0:58
having a special sponsor spotlight episode today.
1:02
I've got Chris Steinke here on from Mighty ID and he's going to
1:08
tell us all about their exciting solution.
1:10
But before we get into the contents of this episode, I want
1:15
to let everyone know these are special sponsor episodes that
1:19
are created in collaboration with our sponsor, in this case,
1:24
my DID to dive more deeply into their viewpoints and specific
1:29
solutions in the IM marketplace. To make this crystal clear, the
1:34
sponsored episode it's a little bit different than our normal
1:37
episodes, but they flow very much in the same way.
1:41
Now what the sponsor spotlight episodes allow us to do is
1:45
provide you with, you know, in depth insights and expert
1:49
perspectives straight from the sources, straight from the
1:52
vendors themselves. And we get to hear about their
1:55
solutions. A lot of our listeners have told
1:59
us that they kind of treat these like first sales calls, right?
2:02
They can, you know, hear about a solution and figure out whether
2:06
or not it makes sense for them to to look at said solutions.
2:09
So like I said, I've got Chris Donkey on from my DID Chris,
2:14
welcome to the show. Hey Jim, thanks for having me.
2:17
I've been looking forward to coming on and chatting with you
2:18
guys. Been big fans of the of the show
2:20
for a while. That's awesome.
2:23
I've been really looking forward to it as well.
2:25
Really interested in your solution.
2:27
The more that we've talked in preparation for the show, the
2:30
more excited I've gotten. And we're going to talk a lot
2:32
about I am resilience today. But before we kind of get into
2:36
the meat of things, it would not be us if we didn't start the
2:41
show by asking how you got into identity access management in
2:45
the 1st place. So kind of tell us about your
2:47
journey. How did you get into IM?
2:49
Did it pick you or did you pick it?
2:52
Probably a little bit of both. Started a long time ago in the
2:56
Galaxy far, far away when I was in the Marine Corps.
3:00
And I started working inside the technology field and the
3:06
emerging security field. Back when I started, there
3:09
wasn't a specific job around information or IT security, but
3:13
you had to, you know, secure IDs and you had to have, you know,
3:17
access and, and security and methods like that.
3:22
And then it, it, it moved into, after I got out of the military,
3:25
moved into working inside companies like Lucent
3:28
Technologies, moving into American Express, other brands
3:33
like Zell and, and now I'm here with my DID.
3:36
And those journeys have taken me through multiple roles around
3:40
security, around infrastructure, around cloud, around application
3:44
development. And every, every one of those
3:46
roles, either I had responsibility for the identity
3:49
and access management environment, or I somehow
3:53
touched the identity environment or had something to do with it.
3:56
And, and like your podcast says, identity was always at, is
3:59
always at the center of, of what I've done.
4:01
So that's that's really the, the brief story of of how I've got
4:05
here. Yeah, I feel like we hit the
4:07
bull's eye with the the name of the podcast.
4:09
Yeah, I think so too. A1 take wonder if you will.
4:13
So, yeah, yeah. So I think if there's anything
4:18
in the world that's going to teach you about being resilient,
4:21
it's being a Marine. But you, you've mentioned a kind
4:26
of an interesting path and now you're at my DID, you're the
4:30
chief operating officer there. Tell us what my DID.
4:33
Does what? What did you guys bring to the
4:35
table? Right.
4:36
So my DID is really focused on solving the problem of
4:41
resiliency for your identity platform and your your identity
4:46
and access management. Think of it as, you know, not
4:50
just backup and recovery, but the ability to have flexibility,
4:55
the ability to have migration capabilities, the ability to
5:00
have failover across your identity platform or platforms.
5:05
You know, really today having the ability to bounce back.
5:09
You've got so many threats out there related to identity
5:13
spaces. You hear it on, on your podcast
5:15
quite often. The, the statistic that is
5:19
quoted around like 80% or so of security tax have a vector
5:24
through identity. And and so one of those attacks
5:27
is your identity system and your identity is not being available.
5:31
And so when you think about that, how do you make that
5:35
recoverable? How do you make that be able to
5:38
absorb an attack, bounce back from an attack?
5:42
And we provide a solution that allows you to not only back up
5:46
your environment, but quickly recover in, in an emergency, in,
5:50
in the face of a ransomware attack or in the face of a, some
5:55
type of operational issue. Our solution also focuses on
6:00
removing things like vendor lock in.
6:02
If you're, you know, if you feel like I've lived this in the past
6:05
where you know, you're worried about, Hey, I, I don't want to
6:08
move from a very complex platform that I've spent
6:11
thousands of hours configuring. And what we make that a lot
6:14
easier. We take that from something
6:16
that, that, that takes, you know, hundreds, if not thousands
6:20
of hours to do and we settle that into, you know, a fraction
6:25
of the time by being able to migrate from one identity
6:28
platform to the next. And then you know, with that
6:30
we've we've seen and work with our customers where they can do
6:35
a failover with that and failover between one identity
6:38
platform to another identity platform and and essentially
6:41
doing like a rapid migration in the event of a of a true
6:45
disaster regarding their identity platform.
6:49
So those are those are really the the three spaces that we
6:52
work in and solve around resiliency for our customers.
6:57
I think resiliency is on the tip of everyone's tongue now.
7:00
I actually interviewed David Monty from Transfer Security on
7:06
the episode that dropped just right prior to this one.
7:10
And, you know, that's one of the topics you want to talk about.
7:13
It's like this is on the mind of Cisos and CIOs around the world,
7:20
right? Is, you know, we need resiliency
7:23
in all of our IT systems. And at the core of all that,
7:26
what makes it all work is identity systems.
7:29
Without the identity infrastructure, you can't get
7:32
into IT systems. So and he hit on.
7:36
There's so much unpacked with what you talked about there.
7:38
But before we start unpacking it, I've got to ask you one of
7:43
the the question. I'm sure it's on everybody
7:46
minds, which is how did you come up with the name mighty Idi?
7:51
Love it by the way. Well, it, it really, it really
7:54
summarizes the fact that we're small but mighty.
7:58
But, but really, when you think about it, the ID is like we
8:02
talked about earlier at the center.
8:04
And it is, it is, it is how business gets done.
8:08
It is how work gets done. And it is something that is
8:11
very, very important. And, and because of that, it's,
8:16
it's mighty and, and you want to make it strong, you want to make
8:19
it, you know, impermeable, you want to make it secure.
8:22
And so there's kind of a dual meaning to that.
8:24
We we think of ourselves as a small but mighty team, but that
8:28
the ID is also a very mighty component of your environment
8:32
and so we we combine it together to come up with mighty.
8:36
ID that, that's pretty cool. I like that original story.
8:40
So tell me, Chris, if you know, if folks want to find out more
8:45
about Mighty ID, what do they do?
8:48
What do you recommend that they do?
8:51
Oh yeah, Just come visit us over at mightyid.com.
8:55
Especially for those listening to the show, they can go to
8:57
myid.com/IDAC. You can, we've got a special
9:03
white paper that's there too that they can download called,
9:06
you know, 6 questions to ask your identity provider, your,
9:10
your IDP and, and those are really centered on the, you
9:13
know, what if something bad happens when things go wrong,
9:17
you should be thinking ahead about what are those things that
9:19
could go wrong and what to ask your identity provider.
9:22
Because whether it's a security attack, whether it's an
9:26
operational issue, whether it's a misconfiguration, how are you
9:29
going to handle those situations around your identities?
9:32
And so we'd like to make sure that people are informed are
9:36
thinking about those questions. So download the white paper.
9:39
Bonus points if you want to go sign up for a demo and we'll
9:42
send you some cool swag. That's cool.
9:45
Yeah, we're always up in this industry.
9:49
Everybody's up for a little bit of free swag.
9:51
So, but I'm really excited about that white paper that you
9:53
mentioned, like the six questions.
9:55
I I want to know what those questions are.
9:57
I'm going to go out there and, and get that white paper because
10:00
I think if you, if you have these six questions on there,
10:04
you know, they're really in depth and solid.
10:07
If you're going out to RFP and looking at an IDP solution, like
10:10
include those questions, if you have an IDP, ask your existing
10:15
IDP those questions and you know, make sure they can be
10:20
answered. So that's what I would
10:22
recommend. Go out there, look at what the
10:24
questions are, see if they make sense for you, see if they
10:27
resonate with you. So, Chris, I wanted to know a
10:32
little bit more about what makes Mighty ID unique.
10:38
So what makes us unique is really the, a little bit of, of
10:42
the background of us is, you know, we started, we were spun
10:45
out of a security company called Tevora.
10:49
It's a security consulting company.
10:51
So we really started with the security in mind and, and, and
10:56
how, you know, how we approach things.
10:59
Next is really our architecture. Architecture is built to scale.
11:04
We scale up to millions and millions of ID's and and objects
11:09
and applications and attributes. And so that makes us unique.
11:13
Also on top of that, you know the, the options that we have
11:19
for what, whether it's a dedicated or a kind of shared
11:25
environment, we have those types of options for our product too,
11:28
which make us unique. Then when you get to just how,
11:31
how our product functions, we have another set of unique
11:34
capabilities. Sure, you can do backup and
11:36
recovery and there are other products out there that do that,
11:40
but we also do migration where, where you can move from one
11:44
identity platform to another identity platform.
11:47
That's something that saves our customers thousands of hours and
11:51
let alone the headaches and risks of migrations.
11:53
I, I remember back in the day when, you know, just doing
11:58
e-mail migrations or other types of migrations and you would use
12:02
the, you know, the software for that.
12:03
And that was always a little bit of stressful.
12:07
So Can you imagine identities and all your applications that
12:10
are tied to that and all your access as tied to that?
12:13
So, so we make the migrations easier and then we also do
12:17
failover which allows you to use two different ID PS in a a
12:22
disaster type scenario. So those are the things that
12:25
make us unique. Yeah, yeah, I, I'll, I'll admit,
12:29
I thought I had a gotcha question for you, which was
12:32
going to be around, you know, this term resilience means a lot
12:36
of things as you're laying out here.
12:38
But I, I kind of thought of it in terms of the ability to
12:42
recover from a quote UN quote, a disaster.
12:47
And my gotcha question was going to be we're in the, you know,
12:50
most talking about cloud ID. PS Here you know ping Okta
12:55
antra. Why do we need to back them up?
13:01
Well, you know, first of all, everyone makes that that initial
13:05
assumption that it's in the cloud and it's always available.
13:08
But you know, as you know, it's that the service could be
13:12
available, but it doesn't mean that everything you've built and
13:15
configured is going to be 100% available and in there and how
13:19
you expected it, right. So those providers give you
13:23
essentially a bucket to put your stuff in.
13:26
And, and so if something goes wrong, whether operationally,
13:30
you know, I've, I've lived this first hand and maybe some people
13:33
in your audience have too. Maybe you have where, you know,
13:36
good intentions, you go in there to run a script to, to remove
13:40
users or clean some things up. And that script actually, no
13:43
matter how, how well you had it peer reviewed and everything
13:46
like that, it's, it ends up taking out, you know, a whole
13:51
bunch of users or a whole bunch of access or something.
13:55
And what do you do and how do you find that?
13:57
And how do you recover from that, right?
13:59
That, that has nothing to do with with, with whether it's in
14:02
the cloud or not, right? And, but that's still a
14:04
resiliency factor of being able to quickly recover from that,
14:09
you know, whether it's it's something like ransomware where,
14:12
you know, being able to recover from or step out of the way of a
14:18
ransomware event, or if, heaven forbid, there's a, that the
14:24
identity provider has a bad, has a bad operational event happened
14:29
to them, right. And, and you have to move out of
14:32
the way of, of, of that. So there are, there are those
14:36
types of scenarios. And, and really what it comes
14:37
down to is, is that shared accountability model that a lot
14:42
of people just don't always think about when it went.
14:45
They, they know it's there or they, they know it's in the
14:48
contract, but they just believe that while it's up there with,
14:52
it's an always, always available service.
14:54
They're, they're, you know, they're running on a cloud
14:57
environment, they're in AWS or something like that.
15:00
And it's, it's always going to be there.
15:02
It's never going to have a problem, right?
15:04
And and our customers have recognized the fact that there
15:08
is a huge risk there and that risk is they have to be able to,
15:12
you know, take accountability to recover and and you know, bounce
15:17
back from those types of issues. Yeah.
15:20
I mean, you know, it's this whole shared responsibility
15:23
model right in the cloud. I think you brought up a couple
15:28
interesting scenarios, which is that people make mistakes.
15:32
And by the way, I'll tell you that I've never run a script
15:35
that screwed up production, never.
15:38
But people make mistakes. And then the other thing that
15:42
you brought up was the ransomware attack, which I think
15:44
is, you know, I think ransomware was like, you know, at least,
15:51
you know, I think my, my immature self used to think
15:55
ransomware was like some hocus pocus thing that happens.
16:00
And a lot of times is someone gets a credential by phishing or
16:05
social engineering, or if they buy it from the dark web and now
16:09
they're onto your network And, you know, maybe they spread some
16:14
kind of virus that gets on to an administrator's computer, locks
16:19
them out. And then they connect to the IDP
16:24
credentialize, authenticate in an appropriate normal fashion,
16:29
and then just start changing configurations in your, you
16:33
know, IDP tenant. And whose fault was that?
16:38
Is that the IDP's fault? Because you, you know, you
16:42
authenticated in a way that that appeared normal.
16:45
You had the username, you had the password.
16:47
Maybe you're able to complete the MFA because if you're using
16:52
Ubikeys or something and or, or whatever the reason is you're
16:56
able to, to authenticate and now you start changing settings.
17:01
Now if you don't have a backup of those settings, you can't
17:04
restore them. I mean, do you really want to be
17:06
having to call Microsoft to say, restore all my settings through
17:09
my my Antra instance and I've got 25,000 users who can't log
17:16
in anymore? Like you want to have some
17:20
insurance policies to that, right?
17:22
And that's what a lot of this is about.
17:24
Right. And, and in many ways, they're
17:25
not going to be able to restore all that configuration to, to
17:29
the level that that you had said it or in your scenario, you
17:33
know, and as you were saying, sure, if, if that, if that
17:36
attack vector was in through the IDP, it's their fault, right?
17:40
If if someone broke in through, the IDP hacked in through that
17:43
through. Through their through their back
17:47
channel. Then then, yeah, that's, that's
17:49
on their end of it. But if it, if it's they called
17:51
your help desk and social engineered their way in because
17:55
that never happened. And, and what do you do then?
17:59
And and so that's, that's really where you're taking control and
18:04
you're getting control of that environment and you're having
18:07
it's just, it's it's like what you and I talked about before.
18:11
It's just the, the good old days of having those backups, right?
18:15
But in this type of scenario, you can rapidly recover, you can
18:19
recover in minutes. You can, you know, our, our
18:22
abilities allow you to recover down to the individual attribute
18:26
to individual user, the individual, you know, if you
18:29
just need to recover something like that, if you run a script
18:31
that you know, deleted everyone's, you know, something,
18:35
an attribute on the user that is all their phone numbers, you can
18:38
recover all the phone numbers, right?
18:39
That's not necessarily a big critical thing, but it, it, it
18:43
still can be a big headache. I mean, I, I've, I've, like I
18:46
said earlier, I, I live that nightmare where we had the, the
18:49
entire C level and senior executive leadership accounts
18:54
removed by accident through inherent script.
18:57
And I would have loved to have, this is many years ago before
19:00
Mighty ID existed. And it was part of the reason
19:02
the, the, the passion project that is Mighty ID and why I'm
19:05
here. But you know, I wish I would
19:08
have had something like that, that I could have recovered from
19:11
in minutes instead of spending hours trying to reassess what
19:15
happened and, and how do we build those accounts back and so
19:19
on and so forth. Well, yeah, if you're an
19:21
administrator and of an IDP, this is like a little bit of an
19:26
insurance policy from the ransomware perspective.
19:30
To me, that's the, that's the new disaster, that's the new
19:34
earthquake or the new tornado. Like, you know, you mentioned
19:39
the scenario like, OK, the IDP, like the data center goes down.
19:42
The IDP is in that's kind of the ID, that is kind of the ID PS
19:47
situation to restore from. And, and when you look at like
19:51
Amazon with their, you know, their different availability
19:54
zones sometimes like you don't, if you configure things
19:57
properly, you don't have to worry about that.
19:59
This doesn't save you from, you know, poor practices in your
20:03
identity management where somehow you cough up an ID or.
20:07
You know, you get compromised in a ransomware attack.
20:11
You could very well be running into the situation where you'd
20:15
be really happy if you have a backup.
20:19
So that's that's the backup side of things.
20:21
But you mentioned a few others. So the migration vendor lock in,
20:27
I would imagine that the organizations that get most
20:32
excited about this are mid size to large organizations where
20:36
they've got pretty big instances, even though like from
20:39
an enter ID perspective, I think like it's got to be 90% of
20:43
companies from enter ID of all sizes now.
20:46
But when you get into that very large organization and this
20:51
seems like a tool where they could be doing mergers and
20:54
acquisitions and, you know, buying a larger company or
20:59
smaller company and having to migrate them from whatever their
21:03
IDP is to whatever your corporate standard is, a
21:06
divestiture where you need to carve them out and get them
21:09
running on to their own instance.
21:11
Is that kind of what you're talking about here?
21:13
Yeah, Yeah, that's exactly what we're talking about.
21:15
There's obviously a few different scenarios that you can
21:18
use that this, you know, migration feature for because we
21:21
look at migration as, as two things.
21:23
You can migrate between the same identity platform, just two
21:27
different instances or you migrate between two different
21:31
vendor platforms, right. So how we, how we've built the
21:35
product and how our, our users or our, our customers have given
21:40
us feedback and are using it is exactly that.
21:42
They're using it for mergers and acquisitions, divestitures.
21:46
They're, they're using it to make test environments.
21:50
They're using it to test their, their BCDR plans, right.
21:54
I mean, you go from a tabletop exercise, which is great in
21:57
theory, but to actually be able to restore a tenant and test it
22:02
and, and you know, really know that it works in, in, you know,
22:07
in, in real time is, is, is pretty powerful.
22:11
And and then you've got those big strategic projects where
22:14
you're talking about a company that wants to move from one
22:17
platform to another or a company that says, hey, we, we want to
22:21
move our Siam onto a different platform for diversity of
22:28
capabilities. So we don't have all of our debt
22:31
identities on one platform from a risk perspective.
22:35
So we might put our customer identities on one platform and
22:38
use our enterprise internal identities on another platform,
22:41
but we need to split those out, right?
22:43
So let's migrate those off. So, so there's a lot of
22:46
different use cases for how our migration capabilities get used
22:49
by customers. And we, we learn new things
22:51
everyday from them. We learn, we get new feedback
22:53
from them and, and, and how we develop.
22:55
And we've got some pretty cool ideas in our in our future road
22:58
map for that too. Kind of feels to me like there's
23:03
one kind of like the main feature, which is, yeah, I
23:08
always go back to Veritas backup exact.
23:11
That was like the the backup to tape platform that I used for so
23:16
many years. I remember like going out of
23:20
style, backing up the tape and shipping tapes to off site
23:24
locations. And you picture some, like mine
23:27
under the earth that you're storing your tapes and like it's
23:31
cooled and everything but that. That's a really old analogy,
23:36
right? But it has to show my age really
23:40
early. But I'm kind of like picturing
23:43
this as like the main features, like the ability to back up and
23:48
to restore. But I'm also seeing this as like
23:52
a tool because you've got the ability with this thing to do
23:57
the migrations. I also could see a scenario
24:00
where you're using this mighty ID to say, all right, we're
24:05
going to migrate configurations from, you know, pre production
24:10
environments to production rather than kind of the stare
24:14
and compare, which I know a lot of right words.
24:18
And So what I mean by that is that they don't have an
24:20
automated way to take configurations from earlier
24:24
environments to, you know, closer to production.
24:28
And so to me, that's like a huge benefit.
24:33
Well, it is, it is. And you can, you know, it, it
24:35
gives you that ability to, you know, build and and destroy
24:40
environments and, you know, use those identities in an
24:44
environment for those purposes. And like I said, there's once
24:49
you have that, once you have that data, the configuration
24:51
data and you want to build a, another tenant or, you know,
24:55
another IDP like that, it's, it's pretty easy, right?
24:58
And you can just put it out there.
25:01
And it, it's, it's always interesting to see the different
25:04
use cases and different scenarios which our customers
25:07
like to like to use it. And and like I said before, they
25:10
they give us great ideas all the time.
25:13
You dropped the a a term on me when you you and I were chatting
25:18
earlier. You called it change 360.
25:21
Oh yeah, yeah, yeah. Yeah, I just wrote that down and
25:24
I didn't tell you. I was going to ask you about it
25:25
but it was Change 360. Yes, Change 360, I'm, I'm glad
25:29
you brought that up. So change 360 is one of our key
25:34
capabilities around being able to identify changes inside your
25:40
configuration of your tenant and being able to trace that back to
25:43
a patient zero. So now that we're backing up
25:47
your tenant and you're, you're generally doing backups in a
25:50
regular manner. Some of our some of our
25:53
customers like to do it daily or weekly.
25:57
We have the ability to do it continuously and we recommend
26:00
just just let it run continuously and do it in an
26:02
incremental continuous backup. Anytime there's a change that's
26:05
done, it automatically backs it up.
26:07
But anytime that change is done, is back backs up, you can, you
26:10
can be alerted to that change and you can go investigate it
26:13
and investigating it and see was that, was that something that
26:18
should have happened? Was that something you can
26:19
reconcile that if you want against the change record.
26:22
Hey, was that, was that an authorized change?
26:24
You can go back and, and see how far back did that change go to?
26:29
Does it tie back to a specific user?
26:31
Right. And so as you're keeping those
26:34
incremental backups and keeping, keeping it over time, you can
26:37
eventually through our Change 360 capability, create a, a
26:40
timeline map of changes on a user and buy a user.
26:47
So it, it, it turns into a really powerful investigative
26:50
tool. You know, our customers think
26:53
it's pretty cool. They like, they like to play
26:55
around with it and use it a lot. We, we've got some, some new
26:59
features coming up around it, new enhancements coming up
27:02
around it in the future. So look for some announcements
27:05
coming out around what we're going to do differently and add
27:08
on to change 360. But it's it's, it's really
27:10
powerful, really insightful and great tool.
27:15
Yeah, it sounds like a really powerful feature and I just want
27:19
to remind folks that if you're interested in learning more
27:24
about the my DID platform, my DI, d.com/IDC, there's a white
27:30
paper out there. You can get a demo, sign up for
27:34
a demo and they're also send you some some cool swag.
27:40
One of the things I wanted to ask you, Chris, is you know, you
27:43
guys work with a lot of customers.
27:47
How did they measure their success with your platform?
27:53
Yeah. So measuring success obviously
27:55
is is around a lot of those different user stories of the
27:59
product right around backup and recovery.
28:01
So there's different measures of success around that compared to
28:05
migration. The failover measure of success
28:08
is kind of similar to that of the backup and recovery, but the
28:13
first measure. RTO.
28:14
Yeah, is around RTO. So the first ones around RTO and
28:18
being able to recover quickly in the in the event of a of a some
28:23
type of failure or issue. The the second measure, the
28:29
second measure of success is, you know, project based measure
28:33
of success. How, how quickly and how, how,
28:36
how you can de scope risk in your projects around things
28:41
like, you know, migrating around projects like, you know,
28:46
divestitures or acquisitions and things like that.
28:49
Because those all you know, all those things are going to have
28:51
risks associated with them. They're going to have project
28:53
timelines are going to have costs.
28:55
So those measures of success reduce those costs, reduce those
28:58
timelines, reduce the, the risks and even the risks around
29:03
operational issues that can happen because of that project.
29:06
So you're, you're working now with this, with the Mighty ID
29:09
and a tool that automates these things and, and you know,
29:12
significantly reduces the risks around human error and just the
29:16
manual work involved with it. And, and the, the, the failover
29:21
piece of our component is, is measured in, in a sense of very
29:24
similar to RTO. When you get into some of our
29:27
other features like our Change 360 and our new features that'll
29:30
be coming out here in the next few months around our health
29:34
check and dashboarding health check capabilities.
29:36
There's going to be, you know, success measures.
29:41
Obviously the Change 360 success measure is around, you know,
29:44
security investigations even, and even change management like
29:47
being able to understand what changes are happening.
29:50
Our, our, our health health check capabilities will
29:54
obviously enable success measures around, you know, the
29:59
health of your tenant and, and the configuration of your tenant
30:02
in the way of do you have, you know, you know, best practices
30:07
applied? Do you have things like, you
30:09
know, MFA enabled for all your applications or, you know, do
30:13
you have, you know, too many users with administrative
30:17
privileges and things like that? So those are other additional,
30:20
you know, capabilities that will help give, you know,
30:23
administrative and and and other pieces of information for for
30:28
users to to measure. So obviously your Mighty ID
30:33
solution is built around allowing customers or helping
30:37
customers be more resilient. How is Mighty ID resilient?
30:41
Like are you guys in a globally diverse and a failover
30:47
configuration? How?
30:48
How are you managing that? Yeah, I'm glad, I'm glad you
30:52
asked that. You know, we, we touched on that
30:53
earlier, I believe a little bit. But you know, we do operate in
30:57
a, you know, in AWS in both regions in the US and we operate
31:01
in, in Europe and Canada. And so we, you know, we have
31:06
diversity in our, in our, in our architecture there.
31:10
And then, you know, besides having all, all the built in,
31:14
you know, diversity in the architecture and resiliency
31:18
built in there, we also run our, our backups and, and back it
31:24
backing up ourselves in a different cloud in Azure.
31:28
So we're, we're about making sure we're resilient around our
31:33
architecture and how our application operates so that,
31:36
you know, we're not going to fall prey even to the issue of
31:40
a, of a, of a huge cloud failure or something like that.
31:45
That's that sounds good. What is the future for my DID?
31:50
Where? Where are you taking the
31:51
product? You know that that's an
31:54
interesting question. You know, our, our product is,
31:56
is focused around resiliency and I think we can go multiple
32:00
places. We can continue to grow the
32:04
product in the way of how do we cover more identity platforms.
32:08
And that's, that's a natural kind of growth trajectory for
32:12
us. It can be a little tricky
32:14
sometimes because the more you start to grow all those identity
32:18
platforms, it's just it, you know, it becomes a lot of work
32:22
to keep parity and to keep, you know, everything running that
32:25
way. So we have to be, we have to be
32:27
smart about it and we really, we really try to listen to, you
32:30
know, perspective customers and our customers needs on where
32:34
that, you know, where we should drive that piece of it.
32:38
You know, the other piece of it is, is really how do we, how do
32:40
we help enable the security story and the change management
32:45
story and, and, and the what, what we would call the, the
32:51
health and metrics story of, of, you know, identities overall.
32:57
And so that's, that's where we're taking this because we
33:00
really look at, you know, the identity can be an asset.
33:05
You know, it can be a security mechanism.
33:08
It can, you know, it, it can be so many different things.
33:11
And so when you have all this information from, you know,
33:14
backing it up and holding it, it becomes something that is, is
33:18
pretty useful. So we're looking at ways that we
33:21
can take that information and and give it, present it to our
33:26
customers, their information and present it to our customers in
33:29
ways that is is even more useful for them.
33:33
Sounds pretty exciting. Yeah, I expect you just rattle
33:36
off products, but I think you made a good point there.
33:38
It's just like that's really not easy to maintain and that's
33:43
probably not the right way to to go about it, right?
33:47
Is it better to be broad and shallow, or is it better to be,
33:52
you know, more narrow but deep? That, that, that.
33:55
That's your. Customers who are on your
33:57
platform in those areas, they want you to go deeper and
34:00
deeper. They do, they do.
34:02
And and that is, you know, and we certainly want want to be
34:06
there with them and sometimes you can and sometimes you can,
34:10
you know, it it all depends on what you're able to access
34:13
inside that vendors platform. So what and how you can access
34:17
inside of Okta, inside of Ventra or paying or, or IBM or, you
34:22
know, to start going down the list.
34:25
And, and you know, we're, when you're doing that, you can go
34:28
deep and deep and deep and deep and, and we, we will always try
34:33
to meet our customers needs in that space.
34:36
But it is a dilemma and there's a balance that we have to strike
34:38
because there's always going to be customers out there that are
34:40
on some other platform and they want that backup and recovery
34:44
capability too. So, you know, it's, it's, it's a
34:48
constant, you know, push and pull, tug of war, so to speak,
34:52
within our, within our strategy. So let's be clear, what are the
34:56
the platforms that you currently support the?
34:59
So, so today, yeah, we support ACTA, Microsoft, Entra and Ping
35:05
ping one and and you know, we've got, we've got other ones in the
35:10
in the road map in the future. You know, we're even looking at
35:11
the big boys like, you know, AWS and Google.
35:15
And should we be looking at doing things like that?
35:17
Because we, we've heard from our customers that even our
35:20
customers that have Microsoft or have Ping or have Octa, they're
35:24
looking at these other platforms, maybe not just as a
35:27
replacement, but they're looking at these as augmentation.
35:30
Because I, I don't, you know, although some companies and some
35:33
of our customer strategy is to have a single identity provider,
35:36
like I said earlier, some are thinking about, some are
35:39
thinking about splitting them up, some are, some are accepting
35:42
that a hybrid identity platform is, is better for them, even
35:47
though there's a little bit more overhead in the management and
35:50
so forth. So that's where we can really
35:53
provide value too, because we can help back up and recover
35:57
both of their platforms or all of their platforms and they can
35:59
have one, one tool to do that. Well, it's not just ID PS.
36:04
I mean, you know, you could kind of extend into the IGA market.
36:09
You can look at privileged access management.
36:11
There's a bunch of other ITIIM spaces that are maturing.
36:15
I mean, you know, it's certainly when it comes to ID PS it's like
36:22
if it goes down even for 5 minutes and people can't log in,
36:26
that's a major issue. Usually from provisioning
36:28
standpoint, it's not. But there are a lot of large
36:32
organizations that have whole teams managing those IGA
36:35
platforms. And I bet you there are a lot of
36:38
times where people would like to go back and see what was the
36:41
configuration before we've rolled all these changes in or
36:44
what were all these changes like.
36:46
Let's run a a differential. You know, I could definitely see
36:51
that. Yeah, yeah, yeah.
36:53
So Chris, before we wrap things up, I wanted to talk to you
36:56
about the Gardner I Am Summit. When this episode drops, the the
36:59
Summit is only a few days away. For those who haven't
37:02
registered, by the way, we do have a discount code.
37:05
It's IDAC 375, save you 375 on your registration fees.
37:11
Chris, are you guys going to have a Mighty ID booth on the
37:14
Expo floor? We sure are and we look forward
37:18
to having everyone stop by and see us.
37:19
We'll be there. I'll be there Monday, Tuesday
37:23
and Wednesday. So stop by and say hi.
37:24
We'd love to talk to you, tell you more about what we do and,
37:27
and hear hear from you too. Like these are great
37:31
opportunities for us to not only interact with with with everyone
37:36
in the community, but a lot of times too.
37:39
We hear some of the pain points, we hear we get great ideas and
37:43
and we collaborate with everyone there to come up with new ideas
37:48
and come up with new solutions. Some of some of the features in
37:51
our products today have come directly from collaborations
37:54
like that. So love to hear from you.
37:55
Stop on by and hopefully I'll see you there too, Jim.
37:59
I love that. That's like a very good
38:01
perspective and it's a unique opportunity for folks.
38:05
Like how often do you have an opportunity where you can go to
38:08
somebody, whether or not you use their product, give them your
38:11
ideas and potentially end up seeing them come to fruition.
38:15
So I definitely encourage everyone to to take the time to
38:19
swing by the booth. Chris wanted to take us out on
38:25
the letter notice kind of tradition here at the Identity
38:27
of Center podcast. And you and I, we're sports
38:31
dads. I was a baseball coach and dad
38:33
for many years. Now you are on the on the
38:38
lacrosse side with your son and he's doing some big tournaments.
38:42
One of the things you mentioned to me was that lacrosse, and by
38:46
the way, when you said this, you said lacrosse builds resilience.
38:50
And I just pictured what you meant was the guys hitting each
38:54
other with the sticks. And I'm not even sure if that's
38:56
what you call them sticks or what.
38:58
I've seen some of those those tournaments on TV and it's not a
39:03
gentle sport and the guys aren't padded up as much as they are in
39:07
football. So I mean, you got to be, you
39:11
got to be pretty resilient to do that part.
39:15
You got to be willing to take, Yeah, you got to be willing to
39:18
take a few hits. You know, you know, I, I, I grew
39:20
up playing hockey and, and soccer and baseball.
39:24
I didn't play lacrosse, but I started, I, I gained an interest
39:28
in it when my son started gaining an interest in it at
39:31
about nine years old. He's, he's 14 now.
39:33
So he's been playing for about 5 years.
39:35
And quickly into the sport he, he realized he didn't like
39:40
running a lot. He likes playing and playing
39:43
around, but he just didn't like having to run a lot.
39:46
And it's a, it's a run a lot sport.
39:48
I mean, you are running all the time.
39:51
And, and so he, he decided to switch to goalie as a lot of
39:56
goalies, if you talk to a lot of goalies in lacrosse, the reason
39:58
they moved into goalies is because either one, they were
40:01
the younger brother and their older brother put them in goal
40:04
at home and would just shoot on them or they didn't, they didn't
40:09
like running. And so, you know, he falls into
40:12
that other category, not running.
40:13
And so he started playing goalie and quickly learned that it's a
40:17
it's a very, very difficult position.
40:19
It's even. More difficult than than the
40:21
other the you know, the other positions on the field and, and
40:25
goalie in general. When you think about something
40:27
like, you know, soccer goalies or, you know, hockey goalies and
40:32
things like that, that it's, it's, it's different than any
40:34
other position on the team. And, and it's a very, it can be
40:38
very high stress position because all eyes are on you at
40:41
that moment when someone's taking a shot.
40:43
And, and in a, in a sport like lacrosse, that the lacrosse
40:47
goalie, a good goalie is generally 5560%, you know, save
40:52
average. And that can be pretty tough
40:54
when you're thinking that, you know, just about every other
40:57
shot on you is going to go in the goal no matter what you do,
41:01
no matter how hard you try it, It can be like that.
41:04
Now, that's not always the case for all of them, but you know,
41:07
that's, that's generally how it goes.
41:08
So building up that mental resiliency is a, is a big thing.
41:13
And, and he and I have worked on that a lot.
41:15
And I've, I've learned a lot about myself, learned a lot
41:17
about him and learned a lot about just the idea of
41:20
resiliency overall. And it's how it's become such a,
41:23
a big concept in technology and security.
41:27
I mean, I've seen, you know, all the old BCDR and, and, and
41:32
whatever concepts and terms and, and teams are now becoming
41:36
resiliency teams. the IT operation teams are becoming
41:39
resilient IT resiliency teams. I've even seen security
41:42
resiliency teams. So resiliency is becoming a
41:45
very, you know, kind of strong concept and in the technology
41:50
world and the security world. And, and so, you know, and then
41:54
in my personal world, I live this, you know, almost every day
41:57
with my son on how he becomes more resilient as as a goalie
42:01
and learning how to, you know, bounce back and, and you know,
42:05
be stronger again. And, and you know, whether
42:09
whether someone's, you know, cranking on him at, you know,
42:11
from 30 feet away and it with a 7080 mile mile an hour shot.
42:16
And, you know, he's either got to be able to just stand there
42:19
and take it, not be afraid of it.
42:20
And, you know, or it could, you know, that person could put it
42:24
right on the right spot and shoot it by and he's got to be
42:26
OK, like, all right, then get going to get it next time.
42:29
So, you know, the whole idea of resiliency is just something
42:33
that has become a a strong kind of center in my life.
42:37
And it just, I think it really just is a focus on how how we
42:41
just become better every day. Yeah, I mean, I think youth
42:46
sports is full of, you know, the popular term nowadays is
42:50
teachable moments. Teachable moments.
42:56
I remember coaching, you know, 8-9 year olds and I'm crying
43:01
after they struck out. And I would not in the moment,
43:05
you know, after the game or at the practice the next day, just
43:08
say, unless you're crying when your teammates strike out, I
43:12
don't want you crying when you strike out.
43:15
It's a team game, man. It's not about you.
43:18
And so I think if you, you know, if you want to try to drive a
43:24
certain kind of thinking that's, you know, there's there's a lot
43:28
of opportunities and being a coach to young people is like
43:33
such a privilege. It really is to really mold
43:38
them. You know, I, I agree and, and
43:41
you know, especially the, the concept, I know it seems like
43:44
we're overusing it, but the concept of resiliency is, is so
43:47
important. Even, you know, even more so
43:49
today, because when you think about the environment our kids
43:52
are growing up in, you know, I, I just think about it like, you
43:56
know, he's got a, he's got a smartphone, he's got social
43:58
media, he's got all this other pressure around them, things
44:01
that I didn't even think about when I was growing up, right?
44:04
And how do you be resilient and in, in the face of all those
44:07
pressures and in the face of all that stress and, and
44:10
expectations and, and, you know, just be able to, you know, put,
44:14
you know, move forward every day and, and make yourself just a
44:18
little bit better every day and, and push out all the noise, You
44:22
know, like you said, and, and life is a team sport And, and
44:26
it's not always just about you and, and resiliency isn't just
44:29
about how you cope, cope with it yourself.
44:32
It's how you cope as a team and with the people around you and
44:35
the people you have and the type of people you have around you,
44:38
right. So that, that's also very, very
44:41
important. And that's what, you know, he
44:43
loves about it too. It's his team.
44:44
It's his, you know, he loves being around his team.
44:47
You know, even when it, if they don't win, they do it as a team.
44:51
So it's it's, it's great to see. Great, great points, Great
44:56
discussion. Chris, I really appreciate you
44:58
coming on the show today. Really enjoyed this discussion.
45:04
Again, I think you mentioned you're good with people find you
45:07
on LinkedIn searching you up and just connecting to you.
45:12
I'm open to the same thing. So if you're a listener of this
45:14
podcast, especially committed to this point in the show, please
45:18
look me up on LinkedIn, send a connection and know Jeff is of
45:21
the same mindset. Mighty ID can be found on the
45:25
web of mightyid.com/adac. If you're interested in getting
45:31
that white paper as well as signing up for a demo and and
45:35
enjoying some swag. Also look for Mighty ID.
45:41
Look for their booth at the actual Hall Gardner IM Summit if
45:44
you're there next week. And the Identity Center podcast
45:48
is available on all of your podcast listening platforms.
45:52
Well as on YouTube, go to idacpodcast.tv.
45:57
Our website isidacpodcast.com. If you get an opportunity to
46:02
give us a like a five star review, any of the good stuff,
46:07
we certainly would appreciate it.
46:08
It helps us get the word out and more people to find the show for
46:12
now. Thanks for listening and we'll
46:14
see you all on the next one. You've been listening to
46:19
Identity at the Center. We hope you've enjoyed the show.
46:23
Make sure to like, rate and review, and we'll be back soon.
46:27
But in the meantime, hit the website at
46:30
identity@thecenter.com. See you next time on Identity at
46:36
the Center.