# From The Chief Identity Officer


## Posts

- [IGA Is Going Continuous. Connectivity Decides Whether It Delivers.](https://fromthecido.com/iga-continuous-governance-connectivity/): Continuous governance only reaches apps your IGA can read and write. Everywhere else, an event becomes a ticket. Continuous is a coverage number, not a cadence.
- [The IGA → NHI Conundrum: Ownership Without Execution Is Governance on Paper](https://fromthecido.com/iga-nhi-ownership-vs-execution/): Vendors just solved who owns a non-human identity. None solved whether that owner can reach the system to act — ownership without execution is paperwork.
- [The Password Was Never the Point: PAM's Shift From Managing Accounts to Governing Access to Privilege](https://fromthecido.com/password-was-never-the-point/): Vaulting secures credentials at rest, but breaches happen in use. PAM's real shift is governing sessions, not accounts, for humans and AI agents alike.
- [First-Class or Ephemeral Is the Wrong Fight](https://fromthecido.com/first-class-ephemeral-wrong-fight/): AI agents need a governed identity and a scoped, disposable credential — not one or the other. Your auditor, not a vendor roadmap, settles the definition.
- [We Didn't Close the Skills Gap. We Financed It.](https://fromthecido.com/skills-gap-financed-not-closed/): AI agents didn't close the cybersecurity skills gap, they financed it. The collateral is insecure code and unowned agent identities, and identity is on track to become the new COBOL.
- [How to Extend Entra Provisioning to Apps Without SCIM or API](https://fromthecido.com/how-to-extend-entra-provisioning-to-apps-without-scim-or-api/): You've built your identity program around Microsoft Entra ID. It's your authority for users. It handles authentication.
- [AI Use Cases for IAM and the Pending Risk Wall](https://fromthecido.com/ai-use-cases-for-iam-and-the-pending-risk-wall/): Over the last few months of 2025, I had several conversations with CISOs and Identity teams about AI and IAM use cases.
- [The Next IGA Revolution: How IGA is Going to Change in 2026 to Scale Faster and Easier](https://fromthecido.com/the-next-iga-revolution-how-iga-is-going-to-change-in-2026-to-scale-faster-and-easier/): You may be looking at your 2026 budget and trying to plan your Identity Governance and Administration (IGA) priorities.
- [It's time we had a chat....](https://fromthecido.com/its-time-we-had-a-chat/): It’s funny, whenever I hear that I have flashbacks to someone getting ready to tell me I’m in trouble for something.
- [My Agentic Journey: The journey to seamless, secure AI / Identity integration](https://fromthecido.com/my-agentic-journey-the-journey-to-seamless-secure-ai-identity-integration/): Over the last 3-6 months, I’ve had a ton of conversations around Secrets and Non-Human Identities (NHI), governance, authentication, and authorization with many of them leading to the inevitable AI overlay of the same topic.
- [Identity Week 2025 Recap](https://fromthecido.com/identity-week-2025-recap/): What a week! My first time attending, and being able to speak, at Identity Week was awesome.
- [Simplifying the Complex for Dynamic Authorization: Just ask the question to get a response](https://fromthecido.com/simplifying-the-complex-for-dynamic-authorization-just-ask-the-question-to-get-a-response/): As we go into 2025, I’ve seen a number of different articles and posts around what is going to be critical this year in IAM.
- [IAM Program Red Flags and Path Forward](https://fromthecido.com/iam-program-red-flags-and-path-forward/): When starting an evaluation of an IAM program, what are some of the common red flags I look for in evaluating the maturity and strength of the IAM capability. See some common pitfalls and solutions to address these common red flags.
- [Improving IGA Visibility Through New and Modern Tools and Methods](https://fromthecido.com/improving-iga-visibility-through-new-and-modern-tools-and-methods/): See how changing definition of connected and new tools and methods are helping improve success of IGA deployments
- [Changing the Narrative about IAM and its Impact](https://fromthecido.com/changing-the-narrative-about-iam-and-its-impact/): To shift away from security, IAM needs to change the narrative of how it is communicated to the business. This starts with messaging. See how some simple communication techniques can help shift the focus of IAM from a Security tool to a business enabler.
- [Founders Update - From the CIdO](https://fromthecido.com/founders-update-from-the-cido/): How do we start rethinking IAM and how it can be better utilized in our organizations. This is my call to arms and why. See why the CIdO, why now, and how we rethink IAM.
- [IAM Implementations and the Sacred Timeline](https://fromthecido.com/iam-implementations-and-the-sacred-timeline/): How do we realign moving targets into our IAM program without interrupting business? See how you can achieve success purging individual branches back into the IAM timeline.
- [Identity First Modeling](https://fromthecido.com/identity-first-modeling/): How do we move Identity beyond just a security tool. Read more to see Identity First vs Identity First Security.
- [Attesting to Whats Not There: The shifting paradigm of audit and compliance with ZSP / JIT PAM](https://fromthecido.com/attesting-to-whats-not-there-the-shifting-paradigm-of-audit-and-compliance-with-zsp-jit-pam/): How do we audit accounts and privileges when they are assigned as needed? This discusses the shifting audit and compliance requirements with ZSP/JIT and PAM.
- [History Repeats Itself - My View of the CrowdStrike Incident](https://fromthecido.com/history-repeats-itself-my-view-of-the-crowdstrike-incident/): There has been a ton of commentary, analysis, and responses regarding the CrowdStrike incident that happened on July 19, 2024.
- [Removing the Stigma of Social Logins](https://fromthecido.com/removing-the-stigma-of-social-logins/): How do we remove the stigma associated with social logins and trust them as a viable alternative to local password storage.
- [Pull-Through Identity Modeling: One Identity to Rule Them All](https://fromthecido.com/pull-through-identity-modeling-one-identity-to-rule-them-all/): I’ve worked on a lot of Identity and Access Management (IAM) projects over the years. The goal is always to centralize the IAM infrastructure.
- [Lifting and Leadership](https://fromthecido.com/lifting-and-leadership/): Leadership is an exercise in energy management and physics. See how you can use the lifting mentality to establish yourself and be more effective in your organization.
- [Identity Governance and Newton's Laws of Motion](https://fromthecido.com/identity-governance-and-newtons-laws-of-motion/): Identity and Access Management (IAM) is complex.
- [Can I Integrate My API Gateway with My Authentication Provider.....](https://fromthecido.com/can-i-integrate-my-api-gateway-with-my-authentication-provider/): Integrating disparate cloud infrastructure and authentication providers can be done. This post looks at integrating Oracle OCI API Gateway with ForgeRock Identity Cloud.
- [Strong Foundations Build Strong Houses](https://fromthecido.com/strong-foundations-build-strong-houses/): I was at #identiverse last week and had a ton of good conversations with attendees and vendors.
- [Solution Selling to get your IAM Budget](https://fromthecido.com/solution-selling-to-get-your-iam-budget/): We all need to be sellers at some point to get our IAM budgets approved. Use this approach to help you get your next IAM budget approved.
- [You can't have no in your heart - collaborative approaches to secure design](https://fromthecido.com/you-cant-have-no-in-your-heart-collaborative-approaches-to-secure-design/): To engage with our customers, we need to collaborate more and less 'no' in requests.
- [Moving to Password Less](https://fromthecido.com/moving-to-password-less/): Resetting expectations to password less when implementing passwordless.
- [Which vendor IAM Solution is Best?](https://fromthecido.com/which-vendor-iam-solution-is-best/): I do a lot of general advisory work and calls with customers, partners, colleagues and commonly am asked the direct questions: What is the best vendor for my IAM program (insert IGA, AM, PAM, etc.
- [Multifactor Authentication...the downfall of security](https://fromthecido.com/multifactor-authentication-the-downfall-of-security/): With MFA becoming more utilized, why do we keep seeing breaches where MFA has been enabled?

## Pages

- [Contact](https://fromthecido.com/contact/): Drop a note to the team if you have questions, feedback, or suggestions for future topics.
- [About](https://fromthecido.com/about-me/): This site is my personal space to share ideas, research, and perspectives on Identity and Access Management (IAM), cybersecurity, AI, and the future of identity.
- [Home](https://fromthecido.com/): Find all our posts and insights in the list below.

## Optional

- [Agent (MCP protocol)](websites-agents.hostinger.com/fromthecido.com/mcp)

[comment]: # (Generated by Hostinger Tools Plugin)