Identity Day

Dagen leds av Johanna Samuelson – en erfaren och engagerande konferencier som med skärpa, värme och humor guidar dig genom programmet.

Vem bestämmer när AI:n börjar agera?

Idag kan AI inte bara skriva texter, utan även fatta beslut och utföra handlingar. Men hur vet vi att det sker på rätt sätt? I den här sessionen visar Yubico hur vi säkerställer mänsklig kontroll i en automatiserad värld. Vi tittar på hur fysisk säkerhetsteknik kan användas för att godkänna viktiga beslut och skapa tydligt ansvar. Lär dig hur vi bygger tillit till AI genom att alltid hålla människan ”i loopen”.

Runtime, Inline, Real-Time: Securing Identity in the AI-Attack Era


Ending the age-old assumption that defenders have time to respond, frontier AI attacks now compress the kill chain into minutes — chaining misconfigurations at machine speed, without hesitation or fatigue. Detection turns forensic. Patching and access reviews simply can’t keep up.
What stops the attack is access itself, the one checkpoint every identity — human or machine — still has to pass through. Using real-world examples, this session explores why identity is becoming the next control point against AI-powered attacks.

Cybersäkerhet i AI‑eran

När organisationer går in i AI‑eran har säkerhetsinsatserna aldrig varit mer kritiska. I denna session talar Sören Pettersson hur OpenText Cybersecurity möjliggör säker och skalbar användning av AI genom att förena identitet, dataskydd, applikationssäkerhet och hotdetektion i en Zero‑Trust‑plattform.

Beyond Agentic AI: Building the Converged Identity Fabric for Every Digital Moment

Agentic AI is here, and it is forcing enterprises to rethink identity at scale. Machine and non-human identities already outnumber human identities by more than 80 to 1, and agentic AI will only accelerate that imbalance as it grows in scope across enterprise ecosystems. But while agentic AI is a paradigm shift, it is not a standalone identity problem. It is the latest use case inside a broader convergence challenge: how to secure every digital moment across customer, employee, partner, third party and agentic AI access journey.

Join Adam Price of Ping Identity for a keynote session exploring why the answer to agentic AI is not another identity silo, but a converged identity fabric.

Worst Case Walkthrough: An Interactive Crisis Simulation

Yvette Muszynski and Lisa Lobmeyer take you on a journey to experience a cyber crisis, showing offensive and defensive elements of what happens when organizations get hacked. Get ready for an interactive session where you influence how the crisis evolves.

Worst Case Walkthrough: An Interactive Crisis Simulation

Yvette Muszynski and Lisa Lobmeyer take you on a journey to experience a cyber crisis, showing offensive and defensive elements of what happens when organizations get hacked. Get ready for an interactive session where you influence how the crisis evolves.

Identity Intelligence Meets Agentic AI

As AI agents become increasingly autonomous, identity is becoming one of the most critical security challenges of the agentic world. This session, presented by Ping Identity, explores how organizations can secure identities across humans, machines, and AI agents as they interact, make decisions, and access resources on behalf of users and businesses. We’ll examine the evolving role of authentication, authorization, delegated access, and trust—and how identity can provide the foundation for secure, accountable, and scalable agentic experiences.

AI for Identity Security, Identity Security for AI

AI is reshaping identity security in two fundamentally different ways.
On one hand, AI is helping organizations make sense of overwhelming complexity. By identifying patterns, highlighting anomalies, and providing meaningful context, it enables people to make better access decisions with greater confidence instead of getting lost in endless reviews and entitlement data.

On the other hand, AI agents are becoming a new class of enterprise identity. As they begin acting on behalf of people and businesses, identity security provides the framework for discovering them, establishing accountability, managing their access, and ensuring they operate within defined guardrails. Join us as we explore how AI makes identity security smarter and how identity security enables organizations to adopt AI with confidence.

The Digital Identity Control Plane for Agentic AI

Agentic AI, bots and other non‑human identities (NHIs) increasingly act autonomously–often with privileged access. Securing access for these identities requires us to revisit traditional user-centric identity models. In this session we will look at how all elements of Digital Identity security work together to address access governance for these new classes of identity.

Providing value through behaviour driven governance

An effective way to right-size what people have access to and gaining value from less risk and threat exposure to potential cost savings.

Dela det som har betydelse. Privacy first!

I dagens digitala landskap är vi vana vid att logga in och omedelbart dela med oss av en stor mängd personlig data – ofta långt mer än vad som krävs. Vår standardmodell är full identifiering. Men måste det vara så? Under den här sessionen utmanar vi konventionen och skiftar fokus. Istället för att fråga ”Vem är du och visa mig allt om dig?”, frågar vi: ”Har du rättigheten att se detta?”. Med ”Privacy first!” som ledstjärna diskuterar vi hur autentisering och tillit kan byggas på vad som faktiskt har betydelse: dina behörigheter och rättigheter, inte din fulla biografi.

Your Next Identity Risk Isn’t Human – The Governance Gap You Can’t Ignore

Organizations are deploying AI agents into production faster than their governance programs can adapt. These agents access sensitive data, execute workflows, delegate tasks to other agents, and take actions autonomously, all while using service accounts, API credentials, and OAuth tokens that are often themselves ungoverned.

In this session, we break down the governance complexity that AI agents introduce and outline what organizations need to have in place before agent adoption outpaces their ability to maintain security and compliance.

Access First: Why the Agentic Era Demands a New Security Posture

AI agents and autonomous services are not just replacing human users. They are acting on their behalf, inside your systems, with real permissions and real consequences. This changes the interaction surface between customers, partners and businesses in ways identity alone was never designed to handle. This session makes the case for putting access at the center of your security architecture. Drawing on patterns proven in API-first platforms, we explore how organizations can distinguish agents from humans and move from static permissions to a zero standing privilege posture using intelligent tokens. The approach applies whether you are managing in-house agents or unknown third-party services reaching into your data.

Adaptive Identity – Redefining security for an agentic world

The rules of security have fundamentally changed. Static defenses weren’t built for a world of cloud complexity, the rise of AI, dynamic threats, and autonomous change. As identities multiply and risk evolves in real time, security must continuously adapt to keep pace.

This session introduces adaptive identity—a modern approach that transforms identity from a passive, rigid control model into an intelligent, dynamic defense layer. Learn how continuous visibility, real-time risk analysis, and automated governance enable organizations to anticipate threats, enforce the right access at the right time, and respond instantly to change. Discover how adaptive identity strengthens resilience, reduces risk, and empowers your organization to innovate securely in an increasingly dynamic world.

One platform, every identity: Schibsted’s blueprint for identity security at scale

With the increasing complexity of operating in a highly dynamic digital media space, Schibsted needed a single, authoritative approach to identity—one that treats service accounts, machine identities, and AI agents with the same rigor as employees. With SailPoint, Schibsted unified visibility and control in one adaptive platform that governs access dynamically as conditions change. This session shows how leading Nordic media company turned fragmented identity data into a strategic security advantage.

The Global Identity Debate: Rethinking Customer Identity Across Brands, Borders, and Business Units

Every enterprise operating across multiple brands and markets eventually hits the same fork in the road: how do you get a real picture of the customer when data residency law, regional autonomy, and internal politics all push toward separation? Some organizations answer this by replicating their entire identity stack region by region: a separate instance for every market or compliance zone. Others take the opposite path: keep one resolved identity across every brand and border, and govern the data underneath it, deciding attribute by attribute who owns it, where it lives, and who’s allowed to see it.

Neither answer is automatically right. Each comes with real trade-offs in compliance simplicity, operational overhead, and how well the business actually ends up understanding its own customers.

This session lays out both paths and the trade-offs behind each. Strivacity will be joined by a customer who has lived this decision firsthand, sharing their evaluation process, what they weighed, and where the theory met reality. Built for identity leaders and practitioners facing the same challenges and decisions.

The Global Identity Debate: Rethinking Customer Identity Across Brands, Borders, and Business Units

Every enterprise operating across multiple brands and markets eventually hits the same fork in the road: how do you get a real picture of the customer when data residency law, regional autonomy, and internal politics all push toward separation? Some organizations answer this by replicating their entire identity stack region by region: a separate instance for every market or compliance zone. Others take the opposite path: keep one resolved identity across every brand and border, and govern the data underneath it, deciding attribute by attribute who owns it, where it lives, and who’s allowed to see it.

Neither answer is automatically right. Each comes with real trade-offs in compliance simplicity, operational overhead, and how well the business actually ends up understanding its own customers.

This session lays out both paths and the trade-offs behind each. Strivacity will be joined by a customer who has lived this decision firsthand, sharing their evaluation process, what they weighed, and where the theory met reality. Built for identity leaders and practitioners facing the same challenges and decisions.

How to secure your AI/NHI credentials and tokens – from zero visibility to full governance in just days

As cloud environments and automated pipelines expand, machine credentials are proliferating faster than security teams can track them. Storing them in a vault protects credentials at rest, but it doesn’t answer who owns them, where they leak, or what permissions they actually use. In this fast-paced 20-minute session, we bridge the gap between static secrets management and dynamic identity governance. Learn how to rapidly uncover unmanaged tokens, map credential lineage to business owners, and enforce automated lifecycle guardrails – achieving complete non-human visibility and control in days without disrupting developer velocity.