San Francisco · November 3, 2027 · Hyatt Regency San Francisco
Short, sharp and interactive: keynotes and case studies from practitioners, live panels you vote in, peer roundtables on the problems you name, and two hours of structured networking by design.
All times PDT. Speaker lineup and agenda announcement coming November 2026. Sign up for the full lineup drop announcement below!
Beat the rush and join us early for complimentary barista-made coffee and breakfast.
Kick off the day with a welcome from your MC and a look at what's ahead.
Identity has become one of the biggest security risks facing organizations. As machine identities grow rapidly and AI agents begin acting on behalf of people, traditional approaches to identity and access are no longer enough.
This keynote explores why identity is now central to enterprise security, what's driving this change, and how organizations can prepare for 2027.
Government-backed and industry digital identity schemes are moving into mainstream private-sector use. This keynote unpacks where adoption really stands, the practical requirements of taking part, and how verified digital identity reshapes onboarding and fraud reduction, and the trade-offs on the way.
Autonomous AI agents are now provisioning access, calling APIs, and making decisions on users' behalf, yet most organizations have no framework to govern them. This panel brings together security leaders wrestling with the non-human identity governance vacuum: how to authenticate, authorize, monitor, and revoke identities that never sleep, multiply fast, and increasingly act on their own.
With passkeys crossing into the mainstream and a large majority of enterprises now deploying them, passwordless is no longer aspirational. In this case study, a practitioner walks through a real phishing-resistant authentication rollout: the pilot, the pushback, the edge cases (shared devices, legacy apps, deskless workers), and the measurable impact on help-desk load and account takeover.
Recharge with refreshments and structured networking with your peers.
A hands-on, interactive session working through a real identity and access scenario as a room. Details announced soon.
Standing privileges remain the fastest path from a single compromised credential to full breach. This case study details how one organization re-architected privileged access management inside a zero-trust model and wired it into identity threat detection and response (ITDR), moving from static admin accounts to just-in-time access with live detection of identity-based attacks.
With deepfake-driven identity fraud surging sharply in 2026 and synthetic-voice attacks targeting help desks and executives, traditional verification is failing. In this case study, a leader shares how their organization hardened identity proofing and high-risk transactions against generative-AI impersonation across the contact center, executive workflows, and customer onboarding.
NIST's post-quantum standards are final and migration deadlines are now set, but identity systems (certificates, tokens, signing keys) are among the hardest things to make crypto-agile. Harvest now, decrypt later makes this urgent even before quantum computers arrive. This panel maps a realistic path from crypto-inventory to migration for the identity stack specifically.
Small-group, discussion-based sessions where you'll work through real identity and access challenges with peers in similar roles. Roundtable topics will be announced soon.
Enjoy a complimentary lunch while connecting with fellow attendees.
Put your knowledge to the test in this fast-paced quiz covering real-world trivia, key concepts, and emerging trends. Compete for bragging rights (and a travel voucher) as the top scorer takes the crown.
Most organizations don't have one IAM problem. They have a decade of them stitched together: legacy directories, M&A leftovers, siloed cloud IAM, and a team too stretched to fix it properly. This case study follows a practitioner who consolidated a genuinely fragmented identity estate without a green-field budget or headcount, showing what got prioritized, what got cut, and how they built internal buy-in to sustain it.
As biometrics and behavioral signals become core to authentication, the hardest questions are no longer technical but ethical: consent, bias, proportionality, and what happens when identity data is compromised. This closing keynote argues that durable identity security is as much cultural as technical, and lays out how to embed privacy-respecting, identity-first thinking across the whole organization.
Every organization is fighting the same three constraints (integration, budget, and skills) while the threat surface keeps expanding. This interactive session puts the strategic trade-offs directly to the room, using live voting to surface where the audience really stands versus where the market says they should be, then debating the gaps.
Wrap-up of the day's key takeaways, and your chance to win some epic prizes.
Unwind with your peers for a couple of drinks on us!
That's a wrap on the 2027 series. See you in Sydney for 2028.
Short, sharp and interactive by design. No slide-after-slide days.
Solo stage time from a practitioner or an invited expert, framing where the discipline is heading.
Three or four leaders comparing programmes directly, moderated to stay concrete rather than abstract.
Small-group peer discussion on a single named problem, with no audience and no slides.
Curated, opted-in meetings between practitioners and the partners they choose to meet, scheduled around the programme so nobody misses a session.
Two hours of the day given to breakfast, lunch and drinks by design, so the conversations started in the room carry on outside it.
Global perspectives on identity and digital trust featuring localized experts and region-specific, tailored agendas curated by IAM leaders facing the same challenges as you.
