SGNL @ Identiverse 2024

Tuesday, May 28, 2024 2:00—2:50 PM
Mariposa 8
Join Eve Maler, founder of Venn Factory, as she moderates this panel on everything you ever wanted to know about authorization (but were never authorized to ask). We will leave no stone unturned as our quintet of industry experts takes us through a brief history of authorization, from ACLs to Policies, Graphs, and more. We will touch on the latest happening in the standards community from OpenID AuthZEN to OAuth, ALFA, and Zanzibar. The panel will then delve into three key topics: authorization’s "distributedness"; its temporality - whether admin-time, runtime, or event-time is the path to follow; and stateful vs stateless authorization designs.
We will leave ample time for a Q&A with you, the audience, so come prepared and armed with your questions.

Wed, May 29, 2024 11:40 AM — 12:30 PM
Joshua 10
It has been a busy few years with CAEP! The announcements from companies like Okta and Apple speak to the hype being real with increased adoption and interoperability. So, what its the hype all about? Join us for a panel discussion with subject matter experts from Microsoft, SGNL, Cisco, and The Walt Disney Company. We’ll dive into the impact this has on digital identities and how, through security, user experience and productivity is streamlined and constantly improving/evolving. You’ll learn how CAEP can help achieve a higher level of security for users, IdP’s and systems. We’ll provide insights into what opportunities may lie ahead, as well as, implementation best practices with some Q&A . We’ll discuss the newest developments in the OpenID Foundation Shared Signals working group and what you can do to help accelerate the adoption of CAEP…so we can get closer to the goal of zero-trust using open and interoperable standards.

Thu, May 30, 2024 2:00—2:25 PM
Joshua 6
Even if you are transitioning rapidly to strong authentication such as phishing resistant MFA or passkeys, there is a good chance that login sessions are hijacked post authentication, or there may be insiders who abuse their access for personal gain or other malicious intent. The real question is: What can you do to ensure that such incidents do not result in catastrophe? Dynamic, fine-grained authorization that enables zero-standing access is a promising approach, but making it work at enterprise scale requires multiple innovative technologies. Hear from Atul Tulshibagwale (SGNL) and Mark Neiswinger (The Walt Disney Company) on how you can implement zero standing privileges rapidly, without disrupting existing identity investments.