All things IAM
The identity access management (IAM) industry has spent two decades optimising for a world where identity requests arrive at human timescales. A user logs in, makes a request, and—hours or…
Identity and access management systems have operated under a fundamental assumption for decades: the entities requiring access are human. They log in during working hours, follow organisational hierarchies, and respect…
Microsoft’s Entra Identity Platform represents one of the first significant efforts by a major cloud provider to explicitly extend identity governance infrastructure to accommodate AI agents and non-human identities. The…
Mergers and acquisitions in the identity and access management space have long tracked the evolution of security threats and organisational priorities. Over the past decade, M&A activity in IAM has…
Microsoft’s ongoing enhancements to Entra (formerly Azure AD) represent a significant market signal: major platform providers are beginning to treat agentic identity as a first-class governance problem rather than a…
Public Key Infrastructure (PKI) is foundational to cryptographic security — it’s how systems establish trust, authenticate identities, and secure communications. For human users, PKI is primarily invisible: a certificate bundled…
Biometric security research has consistently documented a gap between how human users operate and how AI agents function within enterprise systems. That gap is widening, and it reveals a critical…
Identity and access management (IAM) systems were architected around a fundamental assumption: that principals requesting access are human users operating during business hours, following documented workflows, and maintaining relatively stable…
Private Public Key Infrastructure (PKI) has emerged as a critical layer in securing non-human identities, particularly as organisations scale their deployment of machine identity principals across cloud, on-premises, and hybrid…
The convergence of AI deployment and identity governance has created an acute problem that traditional IAM solutions were never designed to solve. AI agents operate at machine speed — making…
The traditional identity and access management stack was designed for a world of human users with relatively predictable behaviour patterns. IAM systems assume users authenticate once per session, operate within…
Financial services organizations operate under particularly stringent regulatory requirements: SOX compliance, data residency mandates, audit logging obligations, and risk management frameworks that mandate control over every system touching customer data.…