’ve been thinking about this retrospective since about thirty minutes after Identiverse ended.
I originally planned to wait until the presentation slides and session recordings were released so I could revisit my notes and write something more comprehensive. That hasn’t happened yet, so after finishing my internal work summary, it was finally time to sit down and reflect on what stood out.
Sometimes a little distance is helpful. It lets you remember what actually mattered.
I Should Have Arrived Sunday
The first lesson happened before the conference even started.
I should have flown in Sunday.
Previous notes from past conferences said I had “arrived too early.” What I really meant was that I should have arrived later Sunday—not Monday morning.
That meant I completely missed IdentiBeer.
For anyone who hasn’t been, IdentiBeer isn’t just another social event. It’s where consultants, practitioners, standards contributors, and builders start comparing notes before the conference officially begins. You get a preview of where the industry is heading before the keynote ever starts.
Ironically, years ago this was the event that convinced me I actually belonged in the identity community.
Missing it meant Monday became a much steeper on-ramp.
Identiverse Has Its Own Agenda
I came to Las Vegas with my own list of topics I wanted to explore.
Identiverse had other plans.
Attending Identiverse feels like running from the beach into the ocean. You can certainly have a direction, but eventually the current decides whether you’re swimming with it or fighting it.
This year the current was impossible to miss.
AI. Everywhere.
Every hallway conversation.
Every keynote.
Every vendor.
Every architectural discussion.
Fortunately, AI was already on my list—I just didn’t expect it to consume nearly every conversation.
The Biggest Technical Theme
The most valuable idea I kept hearing throughout the week was surprisingly simple:
AI should never have standing access.
Least privilege suddenly becomes much more important when autonomous agents can act continuously instead of waiting for a human to click a button.
That idea showed up repeatedly through different lenses:
- AI identities need different security models than human identities.
- Traditional RBAC isn’t enough.
- Identity architecture needs to evolve before AI adoption outruns governance.
- Agent identities deserve the same attention we’ve spent years giving workforce identities.
I came home with plenty of ideas I’m now trying to translate into conversations with our application security and architecture teams.
The Best Conversations Weren’t Always On Stage
Some of the best learning happened between sessions.
Hallway conversations.
Breakfasts.
Small dinners.
Informal meetups.
Those conversations often became more valuable than another sixty-slide presentation.
One realization that continues to reinforce itself every year is that the Identity community is remarkably willing to share ideas. The smartest people in the room aren’t protecting secrets—they’re comparing experiences.
That’s where the real value of conferences lives.
Sessions That Stood Out
Several speakers left a lasting impression.
John Kemp provided one of the clearest product-owner perspectives I’ve heard on AI identities and how managing AI differs fundamentally from managing human identities.
Stephen “Hutch” Hutchinson quickly became one of my favorite discoveries of the conference. His discussions around IAM and ITDR were practical, grounded, and refreshingly free of marketing language. Sometimes experience shows, and it certainly did here.
Sean O’Dell and Ian Glazer showed why there is something called the “Identerati” and they are it.
I also found sessions on passwordless onboarding, help desk verification, Active Directory risk, and AI architecture valuable—not because they had all the answers, but because they pushed the conversations forward.
Many of them deserved another thirty minutes.
Giving My First Identiverse Presentation
Thursday was a blur.
It was my first time presenting at Identiverse, which made everything else fade into the background.
Looking back, the presentation itself wasn’t the biggest takeaway.
The confidence was.
Standing in front of peers and contributing something meaningful to the community reinforced something I’ve slowly realized over the past few years:
I belong here.
Final Thoughts
Identiverse 2026 wasn’t my favorite Identiverse.
But it may have been the most meaningful.
I left with new ideas around AI, least privilege, and identity architecture.
More importantly, I left with greater confidence about where I want my career to continue growing.
That’s ultimately what makes a conference successful.
Not the keynotes.
Not the vendor hall.
Not the casino.
It’s whether you return home thinking differently than when you arrived.
For me, Identiverse 2026 absolutely accomplished that.
Leave a Reply