WSO2

IAM systems are reaching their limits as autonomous agents execute transactions, chain decisions, and move across enterprise and partner boundaries at machine speed without clear attribution or governance. This creates structural failure, not incremental risk. Addressing it requires re-architecting IAM around agent identity, enabling ephemeral trust, verifiable delegation, and machine-native auditability across APIs, federation, and distributed environments.

John Tolbert, Director of Research and Principal Analyst at KuppingerCole Analysts will draw on his recent Leadership Compass reports on CIAM and B2B IAM to explore how AI agent interactions are reshaping both domains, highlight unresolved architectural gaps in current IAM platforms, and examine why existing delegation, audit, and licensing models fail under agent-driven workloads.

Ayesha Dissanayaka, Associate Director and Lead Architect for Agent Identity at WSO 2 will focus on the practical side of this transformation, addressing how to secure agentic workflows, implement identity for autonomous systems, and build scalable, governance-driven architectures that enable trusted machine-to-machine interactions across complex enterprise environments.

Everything we do in the digital world, is done by our digital representation of the physical world. Asanka Abeysinghe of WSO2 invented the idea of the "digital double" - a replication of people and things in a digital ecosystem.

He is a guest on our videocast and discusses with Martin Kuppinger how the digital double can become a reality, its benefits and how it relates to consumer identity management.

CIAM solutions often come packed with features that could be used to improve consumer experiences, which is key to success in the digital era. However, in most cases, organizations that deploy CIAM products or use cloud-hosted CIAM services are under-utilizing the capabilities, which leads to poor customer experiences. Join CIAM experts from KuppingerCole Analysts and WSO2 to discuss how best to integrate information securely from across the organization to achieve a unified view of a customer. They will explore the tools that can help to deliver a good omnichannel customer experience and deliver real-time customer analytics.

John Tolbert, Lead Analyst at KuppingerCole Analysts will look at the CIAM landscape and discuss ways in which organizations can effectively use CIAM to get more value from their investments and deliver optimal user experiences. Bob Bentley, Director of IAM Product Marketing at WSO2 will detail WSO2’s vision and current CIAM solutions aimed at helping to get organizations up and running easily and provide a clear path towards optimized CIAM as their project matures and scales up.

Companies and organizations have strategic decisions to make at the Customer Identity & Access Management (CIAM) front. First, they have to decide whether to invest into a dedicated CIAM solution or to build on existing infrastructure. If there is already a foundation, what should be their next steps to have a mature CIAM strategy in place? If they do not have a CIAM solution, where do they start? Applications, systems, identities tend to be siloed while as a business grows, it’s imperative they are cohesive and well-integrated in order to provide a superior customer experience.

SAML, OpenID, OpenID Connect, WS-Federation all support identity federation – cross domain authentication. But, can we always expect all the parties in a connected environment to support SAML, OpenID or OpenID Connect? Most of the federation systems we see today are in silos. It can be a silo of SAML federation, a silo of OpenID Connect federation or a silo of OpenID federation. Even in a given federation silo how do you scale with increasing number of service providers and identity providers? Each service provider has to trust each identity provider and this leads into the Spaghetti Identity anti-pattern.

Federation Silos and Spaghetti Identity are two anti-patterns that need to be addressed. This talk presents benefits, risks and challenges in a connected identity environment.