All things IAM
Imagine discovering that your most critical business systems are being accessed by agents whose identities you can’t audit, whose permissions you can’t validate, and whose actions you can’t track. This…
The premise of identity governance has always been straightforward: know who has access to what, enforce least-privilege principles, and audit access decisions. But this framework was built for human organizational…
For years, identity governance meant “assign roles at provisioning time and audit them quarterly.” This static approach worked for human users and traditional service accounts because access patterns were relatively…
Enterprise security frameworks have long operated on a fundamental assumption: identity is tied to individual people or, at most, service accounts running under human-assigned roles. These models worked because access…
For nearly two decades, identity and access management systems were designed around a single model: human users authenticating to request resources. But the rapid deployment of AI agents into enterprise…
The identity access management (IAM) industry has spent two decades optimising for a world where identity requests arrive at human timescales. A user logs in, makes a request, and—hours or…
Identity and access management systems have operated under a fundamental assumption for decades: the entities requiring access are human. They log in during working hours, follow organisational hierarchies, and respect…
Microsoft’s Entra Identity Platform represents one of the first significant efforts by a major cloud provider to explicitly extend identity governance infrastructure to accommodate AI agents and non-human identities. The…
Machine identity management—the governance of certificates, keys, and credentials used by non-human systems, services, and AI agents—has emerged as one of the highest-leverage security problems in modern enterprise infrastructure. Yet…
Mergers and acquisitions in the identity and access management (IAM) space have always been indicators of where the security market perceives the highest-value problems. When large enterprises acquire smaller specialist…
Mergers and acquisitions in the identity and access management space have long tracked the evolution of security threats and organisational priorities. Over the past decade, M&A activity in IAM has…
Microsoft’s ongoing enhancements to Entra (formerly Azure AD) represent a significant market signal: major platform providers are beginning to treat agentic identity as a first-class governance problem rather than a…