Shows / The Identity Blueprint

The Identity Blueprint
Enterprise identity and access management isn't a product you buy — it's a program you build. The Identity Blueprint covers the full spectrum: seven-phase IAM frameworks, zero trust architecture, JIT access, FIDO2 passkeys, identity governance, and the operational models that hold up at enterprise scale. Built for practitioners who are past the basics. Hosted by Ernie and Josée.
Episodes
The Identity BlueprintNon-Human Identities & AI Agent Governance
Send us Fan Mail Modern enterprise security perimeters face an unsustainable operational imbalance: non-human identities now outnumber human employees by more…
The Identity BlueprintThe Identities Nobody Hired
Send us Fan Mail The modern enterprise runs on a massive, invisible workforce that outnumbers human employees by up to 100 to 1—yet not a single one has an HR…
The Identity BlueprintThe Serverless Branch Office Playbook — No More Excuses
Send us Fan Mail A serverless branch office isn't a leap of faith — every service running on that local server, printing, DHCP, DNS, provisioning, even the…
The Identity BlueprintThe Business Case for Killing Active Directory
Send us Fan Mail Most organizations think keeping Active Directory around is the cheaper, safer option. It's actually the more expensive one — they're paying…
The Identity BlueprintWhy You Must Kill Your Certificate Authority
Send us Fan Mail You can migrate every user to the cloud and retire every workload, and Active Directory still won't go away — because two systems, your…
The Identity BlueprintThe Silent Killer of Active Directory Removal
Send us Fan Mail Why is DNS the silent killer you don't see coming? Because the applications that kill your migration never touched DNS in the first place — so…
The Identity BlueprintWhat Actually Breaks When You Migrate GPOs
Send us Fan Mail Ask to move one workload slider to Intune — just the Wi-Fi policy — and Microsoft silently drags your entire antivirus and BitLocker…
The Identity BlueprintHow to Govern 40 Isolated OT Tenants Centrally
Send us Fan Mail Your identity governance model works perfectly for IT. Point it at OT, and it can shut down a pipeline, crash a controller, or worse — because…
The Identity BlueprintWhy Your Web Firewall Is an Inside Threat
Send us Fan Mail The attacker never had a password. They just asked a piece of hardware a simple question, and it handed over the keys to 700 storage buckets —…
The Identity BlueprintSecure Your Infrastructure Without Service Accounts
Send us Fan Mail For twenty years, every server and every application in your environment had a password somewhere — a service account, a computer account —…
The Identity BlueprintDay One of an M&A. Okta and Ping, Bloodhounds Sniffing Out Hidden Risk.
Send us Fan Mail You just merged networks with a company that might already be compromised — and they can't tell you, because they don't know either. That's…
The Identity BlueprintDay One of the M&A. Okta and Ping Solve Day One Access Differently.
Send us Fan Mail This episode gives you the exact mechanics for achieving day-one cross-org access with Okta and Ping: how to bridge an acquired company's…
The Identity BlueprintEvery M&A Deal Carries Inherited Risk. Here's How Microsoft Entra Secures It.
Send us Fan Mail This episode gives you the actual playbook for the risk you inherit in an M&A deal: how to migrate overlapping access groups without a naming…
The Identity BlueprintDay One of the M&A. How Does Integration Start on Microsoft Entra?
Send us Fan Mail This episode gives you the exact integration mechanics for Day One of an M&A: how to bring an acquired company's identities into your Entra ID…
The Identity BlueprintOkta and Ping Promise Freedom From Active Directory. Do They Deliver?
Send us Fan Mail By the end of this episode, you'll know exactly how Okta and Ping handle the same identity challenges Microsoft solves with Entra — so you can…
The Identity BlueprintYou Can Fire Active Directory. Can You Take the Keys Back?
Send us Fan Mail By the end of this episode, you'll know exactly how a source-of-authority cutover happens without service disruption, and how to lock down…
The Identity BlueprintThe Cloud Quietly Fired Active Directory
Send us Fan Mail This episode gives you a working, accurate model of hybrid identity in 2026: where authority actually lives, how it's protected end to end…
The Identity BlueprintIdentity Program Operations and Metrics
Send us Fan Mail Your dashboard says everything is fine. Intrusion detection normal. Firewall active. MFA compliance at 98%. Meanwhile, somewhere in your…
The Identity BlueprintPlanning Successful Identity Management Rollouts
Send us Fan Mail The most dangerous assumption in any identity rollout is that the hard part is technical. It isn't. The hard part is the manager who needs…
The Identity BlueprintThe Nine Layers of Identity Architecture
Send us Fan Mail Most organizations buy identity technology one piece at a time. A directory here. An MFA solution there. A PAM tool when the auditors ask for…
The Identity BlueprintSecuring Identities from Hire to Fire
Send us Fan Mail Your employee submitted their resignation on Friday. By Monday morning their access was still fully active. Every system. Every application…
The Identity BlueprintWhy Identity Governance Must Lead Technology
Send us Fan Mail Season 1, Episode 4: You automated your practices. You accelerated your procedures. Yet you're still failing your audits. Your platform isn't…
The Identity BlueprintIdentity Strategy and Target State Design
Send us Fan Mail Season 1, Episode 3: Identity isn't a technology problem. It's a strategy problem. And until your executive team agrees on where you're going…
The Identity BlueprintExecuting a Ruthless Identity Security Autopsy
Send us Fan Mail Season 1, Episode 2: You can spend millions securing the front door. Vault-grade authentication. Biometric access controls. Armed monitoring…
The Identity BlueprintThe Seven Phase Identity Security Blueprint
Send us Fan Mail Season 1, Episode 1: One forgotten password. One orphaned VPN account with no MFA. That's all it took to shut down half the fuel supply of the…