1
00:00:00,200 --> 00:00:03,600
It seemed that a lot actually 
it's like this digit, this idea 

2
00:00:03,600 --> 00:00:08,440
of digital transformation 
driving a lot of standardized 

3
00:00:08,440 --> 00:00:11,400
identity approaches down that 
seems like that kind of also. 

4
00:00:11,560 --> 00:00:14,480
Yeah, does this it's when you 
get to the point what George me 

5
00:00:14,480 --> 00:00:21,120
just described me where realist.
Oh, oh, that's actually they 

6
00:00:21,120 --> 00:00:22,800
call that identity and access 
mention. 

7
00:00:22,800 --> 00:00:24,160
OK. 
Yeah, we need that. 

8
00:00:24,680 --> 00:00:28,280
Well, The funny thing is, I mean
even at that point we rolled out

9
00:00:28,640 --> 00:00:33,200
sort of a new identity platform,
but all of the markets still 

10
00:00:33,200 --> 00:00:36,680
manage their all identity 
platforms for their local 

11
00:00:37,280 --> 00:00:40,120
applications for their local 
PCs, etcetera. 

12
00:00:40,120 --> 00:00:46,200
So we had for this dichotomy of 
the the global platform which 

13
00:00:46,200 --> 00:00:51,200
only got you into this extranet 
and subsequently any application

14
00:00:51,200 --> 00:01:00,720
that sort of tied in. 
This is identity at the center 

15
00:01:01,280 --> 00:01:04,360
if it has anything to do with 
IAM. 

16
00:01:04,360 --> 00:01:10,920
This is the go to podcast now 
your hosts Jim McDonald and Jeff

17
00:01:10,920 --> 00:01:18,800
Stedman. 
Welcome to the Identity at the 

18
00:01:18,800 --> 00:01:20,080
Center podcast. 
I'm Jeff at. 

19
00:01:20,080 --> 00:01:21,080
That's Jim. 
Hey, Jeff. 

20
00:01:21,280 --> 00:01:22,640
Hey, Jeff, how are you? 
Oh. 

21
00:01:22,640 --> 00:01:25,360
And that's a bad or so. 
People Las Vegas for you meet 

22
00:01:25,360 --> 00:01:27,120
you Las. 
Vegas baby. 

23
00:01:28,120 --> 00:01:30,920
What happens, and this way I 
realized what, when you say what

24
00:01:30,920 --> 00:01:33,960
happens in Vegas stays in Vegas,
you're talking about things that

25
00:01:33,960 --> 00:01:36,600
you do. 
You see people randomly in 

26
00:01:36,600 --> 00:01:39,280
public doing stupid stuff that 
doesn't have to. 

27
00:01:39,280 --> 00:01:40,880
Stay in Vegas. 
You can go and tell your 

28
00:01:40,880 --> 00:01:41,880
friends. 
Yeah. 

29
00:01:41,880 --> 00:01:44,640
You know, they don't know you 
probably, and you don't know 

30
00:01:44,640 --> 00:01:47,400
them properly. 
And they become a story that you

31
00:01:47,400 --> 00:01:50,040
tell everyone else. 
Remember that time I saw this 

32
00:01:50,680 --> 00:01:52,400
crazy magician? 
You were telling me stories 

33
00:01:52,440 --> 00:01:55,200
about a magician. 
Oh, unbelievable. 

34
00:01:55,200 --> 00:01:56,360
Magician. 
The magician. 

35
00:01:56,360 --> 00:01:59,600
So we saw Shindlin. 
Fantastic. 

36
00:01:59,600 --> 00:02:03,720
You know, mind, you know, just 
by nature it is here. 

37
00:02:03,720 --> 00:02:05,840
Yeah. 
Well, my nature is to try to 

38
00:02:05,840 --> 00:02:09,600
figure out what's going on. 
How many do you know that that 

39
00:02:09,600 --> 00:02:12,080
person's birthday was XY and Z 
here? 

40
00:02:12,080 --> 00:02:14,240
How did they? 
How do you know, like, where 

41
00:02:14,240 --> 00:02:17,680
they were from? 
Like he pulled one lady out of 

42
00:02:17,680 --> 00:02:22,600
the audience and said, oh, your.
Your accent sounds like you're 

43
00:02:22,600 --> 00:02:25,360
from Michigan. 
And then he went on to name the 

44
00:02:25,360 --> 00:02:29,240
town in Michigan that she was 
from, which I'd never heard. 

45
00:02:29,280 --> 00:02:33,000
Wasn't like Dearborn or Detroit 
or something like that. 

46
00:02:33,000 --> 00:02:35,400
So I thought that was pretty 
cool. 

47
00:02:35,400 --> 00:02:39,080
And then we had that magician 
show up at the restaurant that 

48
00:02:39,080 --> 00:02:42,920
we were at and kind of the same 
deal where, you know, he did all

49
00:02:42,920 --> 00:02:47,000
these tricks and it was like, 
wow, that's really, really 

50
00:02:47,000 --> 00:02:49,080
tricky. 
Duck sliding. 

51
00:02:49,080 --> 00:02:51,880
And the misdirection, of course.
Yeah, it gave you the. 

52
00:02:51,960 --> 00:02:54,440
You know, there's a lot of this 
like look at my hand and like 

53
00:02:54,440 --> 00:02:56,480
this hand's doing something 
else, so. 

54
00:02:56,960 --> 00:03:00,120
But stracking somewhere, it's 
Vegas in spite of like an 

55
00:03:00,120 --> 00:03:02,560
explosion and that there's 
something happening. 

56
00:03:02,800 --> 00:03:05,520
All I can tell you is like this 
stuff doesn't happen in the best

57
00:03:05,520 --> 00:03:07,200
of Church of our house. 
It's not. 

58
00:03:07,320 --> 00:03:10,800
I haven't run into it yet, so. 
There aren't just random, no 

59
00:03:10,840 --> 00:03:11,800
random. 
Musicals. 

60
00:03:11,800 --> 00:03:15,040
You just show up at your table 
and, you know, take your money 

61
00:03:15,040 --> 00:03:18,040
and set it on fire. 
And she's like, Oh my God, I 

62
00:03:18,040 --> 00:03:20,080
guess I'm not getting that $20 
bill back. 

63
00:03:20,880 --> 00:03:22,480
That's the only trick, right? 
If we're deaf, we're going. 

64
00:03:22,480 --> 00:03:24,560
Where's my money done? 
Yeah, right. 

65
00:03:25,200 --> 00:03:27,080
Well, why don't we go ahead and 
get into this week? 

66
00:03:27,200 --> 00:03:29,920
So we're at a dinners, we're 
live. 

67
00:03:29,960 --> 00:03:32,960
We're doing video for the first 
time in at Universe, it comes 

68
00:03:32,960 --> 00:03:33,680
out. 
See. 

69
00:03:33,760 --> 00:03:36,360
Knock on wood. 
We've got our guest, George 

70
00:03:36,360 --> 00:03:38,600
Roberts. 
He's the global access identity 

71
00:03:38,600 --> 00:03:40,800
director at McDonald's. 
Welcome to the show. 

72
00:03:41,120 --> 00:03:43,080
Thank you for having me. 
Thanks so much for taking the 

73
00:03:43,080 --> 00:03:44,960
time with us. 
Definitely want to give a shout 

74
00:03:44,960 --> 00:03:47,400
out to RSM. 
Thanks for sponsoring us to get 

75
00:03:47,400 --> 00:03:49,400
us out here and have 
conversations like this. 

76
00:03:49,680 --> 00:03:52,560
Thanks to Cyrus Alliance. 
We're giving a place to sit down

77
00:03:52,920 --> 00:03:56,680
record this a place to plug in 
bring all that good stuff, but 

78
00:03:56,680 --> 00:03:58,680
why don't we saw it just go 
ahead and get into it. 

79
00:03:58,720 --> 00:04:01,960
So I've done ever 2024 George 
this first time we've been on 

80
00:04:01,960 --> 00:04:03,440
the show. 
We're all the kind of about the 

81
00:04:03,440 --> 00:04:07,040
history and the origin stories 
of what the heroes in the states

82
00:04:07,040 --> 00:04:09,400
that call it. 
How did you get into the 

83
00:04:09,400 --> 00:04:11,240
wonderful world about Danny 
next? 

84
00:04:12,040 --> 00:04:15,400
So I, I actually have a 
background mainly in software 

85
00:04:15,400 --> 00:04:22,160
engineering and number of years 
ago I, I built what later became

86
00:04:22,160 --> 00:04:27,160
a component of McDonald's 
identity and access platform as,

87
00:04:27,240 --> 00:04:32,360
as a consultant. 
And I was in a different role 

88
00:04:32,360 --> 00:04:37,160
and then got an opportunity to 
sort of combat and take over 

89
00:04:37,320 --> 00:04:40,440
the, the project that I had 
actually built many years ago. 

90
00:04:41,160 --> 00:04:43,360
And it just kind of snowballed 
from there. 

91
00:04:43,360 --> 00:04:47,360
So I've actually been doing 
identity and access focused work

92
00:04:47,360 --> 00:04:50,560
for the last six years, but I've
been kind of tangent to that 

93
00:04:50,560 --> 00:04:54,120
from that year before that, so. 
So I noticed you kind of ping 

94
00:04:54,120 --> 00:04:55,440
pong back and forth when 
wearing. 

95
00:04:55,440 --> 00:04:58,680
I'd like to say where I was here
LinkedIn looking for ideas from 

96
00:04:58,680 --> 00:05:01,200
this. 
You're at McDonald's consulting 

97
00:05:01,200 --> 00:05:03,760
other things McDonald's again 
consulting adopt. 

98
00:05:03,760 --> 00:05:06,320
Why is it they keep plenty of 
that other than the French? 

99
00:05:06,320 --> 00:05:07,480
Fries. 
Yeah. 

100
00:05:07,480 --> 00:05:10,360
You know, a lot of us, we like 
to say we've got ketchup in our 

101
00:05:10,360 --> 00:05:10,800
blood. 
I. 

102
00:05:11,160 --> 00:05:16,320
Don't know if that's helping. 
Probably not, but yeah, you 

103
00:05:16,320 --> 00:05:18,960
know, I mean, it's, it's a 
great, a great place to work. 

104
00:05:19,760 --> 00:05:25,680
The the culture is phenomenal. 
You know, like any big company, 

105
00:05:25,680 --> 00:05:29,360
there's always times when you, 
you know, there are outsourcing 

106
00:05:29,360 --> 00:05:34,200
that happened and I just 
happened to be in the the wrong 

107
00:05:34,200 --> 00:05:36,520
area at the wrong time, I guess 
you would say. 

108
00:05:36,520 --> 00:05:41,160
And a couple of the, the ping 
pongs that you you saw was when 

109
00:05:41,160 --> 00:05:45,440
I had transitioned over to an 
external provider for 

110
00:05:45,440 --> 00:05:48,880
McDonald's. 
So actually over the last like 

111
00:05:48,880 --> 00:05:52,400
25 years, I think guys worked 
for McDonald's as either a 

112
00:05:52,400 --> 00:05:56,080
consultant or an employee for 21
of the last 25 years. 

113
00:05:56,080 --> 00:05:59,120
Been there long time. 
What's the biggest change you've

114
00:05:59,120 --> 00:06:03,440
seen in your time? 
Wow. 

115
00:06:04,920 --> 00:06:10,440
You know, I think probably in 
general for McDonald's is that 

116
00:06:11,720 --> 00:06:17,360
recently we've kind of come to 
accept the fact that we're a, a 

117
00:06:17,360 --> 00:06:21,840
technology company. 
You know, a lot for a long time 

118
00:06:22,200 --> 00:06:27,880
McDonald's was technology was a,
a, a cost Center for, for 

119
00:06:27,880 --> 00:06:32,040
McDonald's. 
But you know, in recent years 

120
00:06:32,040 --> 00:06:35,440
with the advent of our mobile 
app and our kiosks and our 

121
00:06:35,440 --> 00:06:40,240
restaurants, I think our our 
leadership has really recognize 

122
00:06:40,240 --> 00:06:44,520
how much of A of an advantage 
that really brings to us. 

123
00:06:44,520 --> 00:06:48,400
And we've we've kind of shifted 
our thinking away from 

124
00:06:48,400 --> 00:06:51,520
technology being a con center to
being a business and you're. 

125
00:06:53,040 --> 00:06:55,880
Really at that these days 
meaningless. 

126
00:06:56,680 --> 00:07:00,000
What restaurant do you go to 
that doesn't have a now I think 

127
00:07:00,000 --> 00:07:03,480
you guys do a good job. 
The fact and they don't usually 

128
00:07:03,480 --> 00:07:06,880
ask our guests for favors, but 
we did hear that there is a, 

129
00:07:07,720 --> 00:07:10,400
you're right, Corey, in Chicago,
IL, right, yes. 

130
00:07:10,400 --> 00:07:13,920
And so you have a, we hear 
there's like a test kitchen or 

131
00:07:13,920 --> 00:07:17,560
test restaurant with all the 
international offerings. 

132
00:07:17,880 --> 00:07:22,040
You can go to this test kitchen.
Are you sure you're reporting 

133
00:07:22,040 --> 00:07:22,640
blogging? 
Me, yeah. 

134
00:07:22,640 --> 00:07:27,440
So our, our global restaurant, 
which is it is actually a public

135
00:07:27,440 --> 00:07:30,120
restaurant. 
It's on our on the 1st floor in 

136
00:07:30,120 --> 00:07:33,440
our in our building, but it is 
open to the public. 

137
00:07:33,440 --> 00:07:36,200
So if you're in Chicago, come, 
come check it out. 

138
00:07:36,720 --> 00:07:40,000
We don't, it doesn't have all of
our global offerings, but what 

139
00:07:40,000 --> 00:07:44,440
they do is around every three 
months or so, they'll rotate 

140
00:07:45,120 --> 00:07:49,160
some international offerings. 
And so they'll usually have one 

141
00:07:49,160 --> 00:07:52,560
or two of like the, the 
international sandwiches. 

142
00:07:52,880 --> 00:07:55,640
They'll have some kind of like 
an international side, like 

143
00:07:55,640 --> 00:08:02,120
maybe you know, different types 
of potato, like potato wedges or

144
00:08:02,720 --> 00:08:06,080
shake fries or other things like
that where if you haven't had 

145
00:08:06,080 --> 00:08:09,680
the shake fries, it's like fries
in a bag with like a seasoning 

146
00:08:09,680 --> 00:08:12,120
and then you you dump in there 
and shake it up and it. 

147
00:08:12,160 --> 00:08:13,600
Gets all. 
That's not at all. 

148
00:08:14,400 --> 00:08:16,920
Yeah, no, I it is not a shake 
and a fries. 

149
00:08:16,920 --> 00:08:19,840
Although I'm told that dipping 
your fries in shake is also very

150
00:08:19,840 --> 00:08:21,040
good. 
It's except for. 

151
00:08:21,360 --> 00:08:24,760
Yeah, I like that. 
So tell us about your typical 

152
00:08:24,760 --> 00:08:28,000
day. 
I mean what you know 

153
00:08:28,000 --> 00:08:30,760
specifically within identity 
access venture, what are the 

154
00:08:30,760 --> 00:08:33,799
areas that you cover and then is
it like you mouse your team that

155
00:08:33,799 --> 00:08:35,600
does those things or are you 
more hand? 

156
00:08:35,919 --> 00:08:40,320
Yeah. 
So I lead our identity and 

157
00:08:40,320 --> 00:08:43,960
access engineering team. 
And so basically my team is 

158
00:08:43,960 --> 00:08:48,160
responsible for building, 
maintaining, enhancing our 

159
00:08:48,160 --> 00:08:53,360
identity and access platform for
McDonald's enterprise users 

160
00:08:53,360 --> 00:08:58,080
worldwide. 
So the way McDonald's operates 

161
00:08:58,280 --> 00:09:01,920
from a sort of a day-to-day 
identity management perspective 

162
00:09:01,920 --> 00:09:08,040
is a lot of that is done by our 
IT teams within our markets. 

163
00:09:08,040 --> 00:09:10,160
We have 115 different markets 
globally. 

164
00:09:10,160 --> 00:09:15,280
So sort of day-to-day management
password password changes 

165
00:09:15,280 --> 00:09:18,240
etcetera is done by the local 
markets. 

166
00:09:18,560 --> 00:09:22,200
My team is more focused on 
actually building and running 

167
00:09:22,200 --> 00:09:27,960
the, the identity life cycle, 
IGA, you know, password resets, 

168
00:09:28,200 --> 00:09:31,120
MFA, all, all of the, the 
technical work. 

169
00:09:31,120 --> 00:09:35,560
And so, you know, we're always 
looking at, you know, what are 

170
00:09:35,560 --> 00:09:40,560
the, the newest and latest and 
greatest technologies available.

171
00:09:40,960 --> 00:09:46,160
How can we apply that to to our 
platform to enhance both the 

172
00:09:46,160 --> 00:09:49,240
security of McDonald's as well 
as the user experience, our 

173
00:09:49,240 --> 00:09:51,480
users? 
So within that that store 

174
00:09:51,480 --> 00:09:54,720
network, I mean how many of the 
the our daily life signals are 

175
00:09:54,720 --> 00:09:57,200
you responsible for? 
Is it everybody from the top 

176
00:09:57,200 --> 00:09:59,480
manager all the way down to the 
line cooks? 

177
00:09:59,480 --> 00:10:01,800
Yes. 
So look at we have two and a 

178
00:10:01,800 --> 00:10:07,400
half million users worldwide and
and that's at everyone from our 

179
00:10:07,400 --> 00:10:10,640
CEO down to our three people 
that are. 

180
00:10:10,640 --> 00:10:13,000
After crazy amount 2.5 million. 
Yeah. 

181
00:10:13,920 --> 00:10:19,680
I bet you when you go out and 
buy some kind of software like 

182
00:10:19,680 --> 00:10:23,440
an identity management 
technology, scalability is a 

183
00:10:23,440 --> 00:10:24,680
real issue. 
Absolutely. 

184
00:10:24,680 --> 00:10:28,120
Ken, yes, I like what I see. 
But can you handle like 5 

185
00:10:28,120 --> 00:10:29,720
million users? 
Yeah. 

186
00:10:29,720 --> 00:10:33,200
And, and honestly, the, some of 
the biggest challenges that we 

187
00:10:33,200 --> 00:10:39,120
see are are around the, the sort
of the wide breadth of types of 

188
00:10:39,120 --> 00:10:42,480
users that we have, right? 
Because, you know, our corporate

189
00:10:42,480 --> 00:10:45,880
users, our, our staff people, 
you know, people on my team, 

190
00:10:45,880 --> 00:10:48,480
etcetera. 
They're, they're using 

191
00:10:48,480 --> 00:10:51,960
McDonald's laptops that we have 
McDonald's issued phones. 

192
00:10:51,960 --> 00:10:54,800
So we can, we can kind of 
control what that experience 

193
00:10:54,800 --> 00:10:56,520
looks like. 
We can enable things like 

194
00:10:56,520 --> 00:10:58,280
Windows Hello for business, 
etcetera. 

195
00:10:58,680 --> 00:11:01,200
But when you're talking about 
our crew people in our 

196
00:11:01,200 --> 00:11:05,240
restaurants, most of them don't 
even work for McDonald's 

197
00:11:05,240 --> 00:11:09,600
directly as employee. 
They work for franchise who owns

198
00:11:09,600 --> 00:11:13,000
the restaurant. 
So we don't have as much control

199
00:11:13,000 --> 00:11:17,680
over what they're experience is 
like from a device perspective, 

200
00:11:17,680 --> 00:11:22,360
right, because they're they're 
not getting smartphones issued 

201
00:11:22,360 --> 00:11:26,880
to them from the company. 
We can't you know require them 

202
00:11:26,880 --> 00:11:31,000
to use a personal device to be 
able to do things like MMA and 

203
00:11:31,000 --> 00:11:33,280
things of that. 
So that's where a lot of our 

204
00:11:33,280 --> 00:11:38,800
challenges are is how do we how 
do we build or buy platform that

205
00:11:38,800 --> 00:11:43,560
is going to support such a wide 
variance of different user types

206
00:11:43,560 --> 00:11:48,000
and user experience it? 
Does your team like a 24 by 7 

207
00:11:48,000 --> 00:11:50,600
operation? 
Do you have people like globally

208
00:11:50,600 --> 00:11:54,200
dispersed or do you are you able
to have a well turn in one place

209
00:11:54,200 --> 00:11:56,360
and just have people around the 
clock? 

210
00:11:56,640 --> 00:12:01,960
And so we're on right now, we 
are sort of hair McDonald's 

211
00:12:01,960 --> 00:12:06,800
employees, which are really 
focused more on sort of product 

212
00:12:06,800 --> 00:12:09,880
and service management and 
technical direction. 

213
00:12:10,680 --> 00:12:16,280
And then we also rely heavily on
partners who do provide that 24 

214
00:12:16,280 --> 00:12:19,960
by 7 coverage to ensure the 
platform is up and running, 

215
00:12:20,520 --> 00:12:22,520
handle support tickets, things 
like that. 

216
00:12:23,480 --> 00:12:28,920
So we have some folks obviously 
on my team in Chicago and other 

217
00:12:28,920 --> 00:12:32,120
parts of the US working 
remotely, but we also have a 

218
00:12:32,120 --> 00:12:35,000
team in Croatia, team in India 
as well. 

219
00:12:36,480 --> 00:12:38,680
Craig should that's the first 
time to hear that come up as 

220
00:12:38,680 --> 00:12:42,600
like IT hub. 
Yeah, it's one of one of our our

221
00:12:42,920 --> 00:12:49,160
key vendors is is located is. 
There a particular technology or

222
00:12:49,160 --> 00:12:52,120
area that really interests you 
right now? 

223
00:12:55,160 --> 00:12:58,800
Well, I mean. 
So later this week, I'm, I'm 

224
00:12:59,120 --> 00:13:02,920
talking, you know, participating
in one of the keynotes on, on 

225
00:13:02,920 --> 00:13:06,240
authorization. 
It's, that's a big area of our 

226
00:13:06,240 --> 00:13:11,240
focus for, for us is, you know, 
we've, we've kind of solved the 

227
00:13:11,240 --> 00:13:16,760
authentication issue. 
You know, we're, we, we rely 

228
00:13:16,760 --> 00:13:23,640
heavily on SAML and at Open ID 
Connect and it's pretty easy for

229
00:13:23,640 --> 00:13:28,240
us to, to onboard an application
from an SSO perspective, it's 

230
00:13:28,240 --> 00:13:30,040
kind of like doing 30 minutes 
worth of work. 

231
00:13:30,040 --> 00:13:34,440
We like all the variables in 
and, and away you go, but the 

232
00:13:34,440 --> 00:13:37,720
authorization side is much more,
much more complicated. 

233
00:13:39,200 --> 00:13:45,680
We, you know, we, we look at it 
like to think it's somewhere in 

234
00:13:45,680 --> 00:13:51,720
the 120 hours range on the 
average for us to integrate from

235
00:13:51,760 --> 00:13:53,880
an authorization standpoint an 
application. 

236
00:13:53,880 --> 00:14:00,080
And it's very custom, you know, 
a lot of connecting directly to 

237
00:14:00,120 --> 00:14:07,000
databases or God forbid, doing 
flat file data, you know, data 

238
00:14:07,000 --> 00:14:09,640
transfers. 
I I mean, it's, it's across the 

239
00:14:10,000 --> 00:14:15,120
all over the place. 
So anything that is sort of 

240
00:14:15,360 --> 00:14:20,520
aimed at solving that portion of
the platform, I think is 

241
00:14:20,600 --> 00:14:22,520
something that I'm super 
interested in. 

242
00:14:23,480 --> 00:14:29,600
I'm also interested in the 
opportunities for other ways of 

243
00:14:29,600 --> 00:14:34,120
doing MSA or MFA like 
activities, but for people who 

244
00:14:34,440 --> 00:14:36,680
are a little bit more like some 
online workers who we don't have

245
00:14:36,680 --> 00:14:40,840
as much control over the types 
of devices or the the 

246
00:14:40,840 --> 00:14:44,720
capabilities that they have. 
It's a big challenge for us. 

247
00:14:44,760 --> 00:14:48,200
You know, with as many, I mean, 
of those two and a half million 

248
00:14:48,200 --> 00:14:53,960
users that I talked about about 
being 1 1/2 to 1.6 million of 

249
00:14:53,960 --> 00:14:57,160
them are through crew meters. 
And that can range anywhere 

250
00:14:57,160 --> 00:15:01,440
from, you know, a 16 year old 
kid who's got their first job 

251
00:15:01,840 --> 00:15:07,520
all the way up to, you know, 
somebody who is working and, and

252
00:15:07,520 --> 00:15:10,360
you know, they've retired and 
they're, they're just picking up

253
00:15:10,400 --> 00:15:12,840
a few hours. 
You tell you that people with a 

254
00:15:12,840 --> 00:15:17,480
lot of disabilities well. 
We do, you know, so I mean the 

255
00:15:17,840 --> 00:15:21,440
IT, it ranges the gamut, right. 
You have maybe, maybe some kids 

256
00:15:21,440 --> 00:15:27,080
who are more familiar with, with
technology, maybe probably have 

257
00:15:27,080 --> 00:15:31,360
a smartphone, but are, are they 
going to want to use it for 

258
00:15:31,640 --> 00:15:34,720
their job at McDonald's? 
And then you may have other 

259
00:15:34,720 --> 00:15:38,400
people who who dump they don't 
have any hand it's on. 

260
00:15:38,440 --> 00:15:44,320
Or, you know, maybe they have a,
a old school mobile device that 

261
00:15:44,320 --> 00:15:47,680
they could do texting on. 
But again, like, do you know, 

262
00:15:47,680 --> 00:15:50,600
maybe they're in a country where
they pay per text and it's like,

263
00:15:50,600 --> 00:15:53,400
well, can you, you know, how do 
you take advantage of that? 

264
00:15:53,400 --> 00:15:56,560
So, you know, we're always 
looking for for new ways to try 

265
00:15:56,560 --> 00:15:59,800
and solve that problem. 
What's your take on solutions 

266
00:15:59,800 --> 00:16:03,480
like password was and I don't 
know hotness the best that? 

267
00:16:03,920 --> 00:16:08,040
I think password was is great, 
but it but it only really works 

268
00:16:08,040 --> 00:16:12,440
when when you control the 
devices that the that the user 

269
00:16:12,440 --> 00:16:18,000
has like you know, some of the 
some of the, you know, pass key 

270
00:16:18,000 --> 00:16:21,640
support. 
It is is really cool because it 

271
00:16:21,640 --> 00:16:26,760
it does kind of take away that 
need to a certain extent for the

272
00:16:26,760 --> 00:16:29,720
user to to have a specific type 
of device. 

273
00:16:30,040 --> 00:16:32,080
You know, obviously I love 
Windows hello for business. 

274
00:16:32,240 --> 00:16:35,760
It's great on a windows windows 
laptop that has a hello based 

275
00:16:35,760 --> 00:16:38,480
camera. 
But again, it only works really 

276
00:16:38,480 --> 00:16:42,040
when you have control over that 
device as as the company. 

277
00:16:43,120 --> 00:16:48,400
So things like passkey, I think 
are, are really good, but still 

278
00:16:48,400 --> 00:16:52,200
doesn't there's a lot of 
scenarios where like you may 

279
00:16:52,200 --> 00:16:57,680
have 20 user using shared tablet
in, you know, in a restaurant 

280
00:16:57,680 --> 00:17:02,400
that's not a managed device. 
It's just some, you know, an 

281
00:17:02,400 --> 00:17:06,079
iPad that a a franchise has gone
bought or an Android tablet that

282
00:17:06,079 --> 00:17:09,240
franchise has gone bought. 
And if they go and then try and 

283
00:17:09,240 --> 00:17:12,319
access any of our web 
application, that's, it's like, 

284
00:17:12,319 --> 00:17:15,680
what's, what's the way forward 
on, you know, they don't want, 

285
00:17:16,599 --> 00:17:19,319
you don't want to try and do 
passkeys on shared device like 

286
00:17:19,319 --> 00:17:21,440
that. 
You know, not my area of 

287
00:17:21,440 --> 00:17:23,079
expertise. 
Maybe there's a solution for 

288
00:17:23,079 --> 00:17:27,119
that. 
But I think there's still a lot 

289
00:17:27,119 --> 00:17:31,280
of the solutions that we see 
are, are really great when 

290
00:17:31,280 --> 00:17:35,520
you're in a a sunny day 
situation where all of the 

291
00:17:35,520 --> 00:17:39,280
pieces are aligned with, with, 
you know, everything that the 

292
00:17:39,280 --> 00:17:43,360
vendor is, is expecting. 
But when you when you kind of 

293
00:17:43,360 --> 00:17:46,640
look past that and you've got, 
you know, heterogeneous 

294
00:17:46,680 --> 00:17:49,680
environments or things seem to 
have control over it, it they 

295
00:17:49,680 --> 00:17:51,000
couldn't fall. 
Unhappy. 

296
00:17:51,480 --> 00:17:52,880
The unhappy path? 
Exactly. 

297
00:17:52,920 --> 00:17:56,040
Yeah. 
Yeah, I I can imagine all the 

298
00:17:56,040 --> 00:18:00,080
series I've worked with another 
large vest 2:00 to. 

299
00:18:00,600 --> 00:18:04,120
Fountain. 
Tremor and one of the biggest 

300
00:18:04,120 --> 00:18:08,360
problems that they were dealing 
with was people who were 

301
00:18:08,360 --> 00:18:09,920
accepted. 
They were supposed to start on 

302
00:18:09,920 --> 00:18:11,400
Wednesday and they didn't show 
up. 

303
00:18:11,400 --> 00:18:15,400
So going through that whole 
provision process and then, you 

304
00:18:15,400 --> 00:18:19,640
know, basically they had to 
design the process from avoiding

305
00:18:19,880 --> 00:18:22,400
that being a big catastrophe 
because it happened all the 

306
00:18:22,400 --> 00:18:24,240
time. 
Yeah, I'm sure you guys deal 

307
00:18:24,240 --> 00:18:27,080
with that. 
Oh, yeah, you know, I mean, 

308
00:18:27,080 --> 00:18:30,120
it's, it's definitely a 
challenge that we, we see in our

309
00:18:30,120 --> 00:18:32,320
restaurants as well. 
You know, I mean, if you think 

310
00:18:32,320 --> 00:18:35,480
about it, I, I, I, it's been a 
long time, but I can remember 

311
00:18:35,480 --> 00:18:38,720
when I was a 16 year old kid, 
you know, a lot of times you go 

312
00:18:38,720 --> 00:18:43,520
out there, hey, I, I got to get 
a job and I go and apply for 

313
00:18:43,520 --> 00:18:47,720
like, I don't know, three or 
four different jobs and 

314
00:18:47,960 --> 00:18:51,360
whichever one of them calls me 
back first, yeah, I'm going to 

315
00:18:51,360 --> 00:18:53,800
go talk to them. 
But then the next day some other

316
00:18:53,800 --> 00:18:56,680
company calls and says, Oh yeah,
we'll give you $0.25 more an 

317
00:18:56,680 --> 00:18:58,960
hour that then McDonald's is 
going to give you. 

318
00:18:59,320 --> 00:19:02,680
So then you just don't show up 
for, for your first day, right. 

319
00:19:03,640 --> 00:19:06,280
Yeah. 
It's, you know, it's interesting

320
00:19:06,840 --> 00:19:14,040
the, you know, when you're in a 
more corporate setting, a lot of

321
00:19:14,040 --> 00:19:19,160
things are a little bit more 
standardized and they, they work

322
00:19:19,160 --> 00:19:22,120
how you expect that to work. 
You know, when people apply for 

323
00:19:22,120 --> 00:19:25,920
a job and they get higher than 
they show up for their first day

324
00:19:25,920 --> 00:19:30,320
and, and everything kind of 
follows the hobby path, as you 

325
00:19:30,320 --> 00:19:32,560
said. 
But when, you know, when you 

326
00:19:32,560 --> 00:19:38,000
start to get into, you know, 
retail pipe establishments, it 

327
00:19:38,000 --> 00:19:41,960
gets a lot more dicey in terms 
of how that all works. 

328
00:19:41,960 --> 00:19:46,720
So we have to definitely desire 
our, our processes to account 

329
00:19:46,720 --> 00:19:51,360
for that and, and you know. 
I would imagine it's a scenario 

330
00:19:51,760 --> 00:19:54,240
used the term a lot. 
I am heroes. 

331
00:19:54,600 --> 00:19:57,560
When you have that kind of 
distributed operation like 

332
00:19:57,560 --> 00:20:02,000
McDonald's, it probably comes 
back to somebody actually really

333
00:20:02,000 --> 00:20:05,960
carrying this in this location. 
Or even when I'm your team who 

334
00:20:05,960 --> 00:20:10,040
just like goes the extra mile to
make it work, make it happen. 

335
00:20:10,720 --> 00:20:12,440
Yeah. 
I mean, we've, we've done a lot 

336
00:20:12,440 --> 00:20:17,600
of work within our platform to 
try to address some of the 

337
00:20:17,600 --> 00:20:21,640
unique business scenarios for 
McDonald's. 

338
00:20:22,520 --> 00:20:26,720
You know that I mentioned before
that I had built sort of what 

339
00:20:26,720 --> 00:20:30,320
became part of the platform, but
it's basically a web-based 

340
00:20:30,440 --> 00:20:37,600
portal that is almost a a custom
review into the identity 

341
00:20:37,680 --> 00:20:41,560
platform for each of our 
restaurant organizations. 

342
00:20:41,560 --> 00:20:46,760
So if if I were a franchise at A
at McDonald's that I own several

343
00:20:46,760 --> 00:20:52,400
restaurants, my team and I could
go into this portal and could 

344
00:20:52,400 --> 00:20:56,280
see all of the user accounts 
that belong to my restaurants 

345
00:20:56,520 --> 00:21:01,600
can do things like reset 
passwords, can reset the MFA for

346
00:21:01,600 --> 00:21:05,040
our users, can give them access 
to various different 

347
00:21:05,040 --> 00:21:09,840
applications. 
And the the nice thing about 

348
00:21:09,840 --> 00:21:14,400
that is where we allow the 
people who are closest to the 

349
00:21:14,400 --> 00:21:18,920
users to be able to try and 
solve those problems for them 

350
00:21:20,000 --> 00:21:22,200
versus making them call a help 
desk. 

351
00:21:22,640 --> 00:21:27,040
And you know, then how do you 
validate that John Smith is 

352
00:21:27,040 --> 00:21:28,200
actually it's. 
Frustrating. 

353
00:21:28,200 --> 00:21:29,120
We've all been through it, 
right? 

354
00:21:29,480 --> 00:21:32,560
I mean, I had to get a power 
ship for the group today and I 

355
00:21:32,960 --> 00:21:35,360
must have gone to four or five 
different people who say good to

356
00:21:35,360 --> 00:21:36,960
that person. 
You go to that person, they say 

357
00:21:36,960 --> 00:21:39,840
good to this person, eventually 
get to the right person. 

358
00:21:39,840 --> 00:21:43,440
But by the time you do, it can 
be pretty. 

359
00:21:43,760 --> 00:21:46,640
You can be already pretty 
frustrated and pretty angry at 

360
00:21:46,640 --> 00:21:49,200
the whole process, and there's 
somebody you want to put your 

361
00:21:49,200 --> 00:21:50,400
users through. 
Yeah. 

362
00:21:50,440 --> 00:21:54,360
And and I think you know what 
we've found is that a lot of 

363
00:21:54,360 --> 00:21:59,200
this sort of traditional 
identity management tooling 

364
00:21:59,560 --> 00:22:03,040
works really well when you're 
talking about a traditional sort

365
00:22:03,040 --> 00:22:09,920
of enterprise scenario. 
But when you have a situation 

366
00:22:09,920 --> 00:22:14,200
like ours where we have really 
hugely distributed fire, like we

367
00:22:14,200 --> 00:22:17,800
have 40,000 restaurants 
worldwide and basically every 

368
00:22:17,800 --> 00:22:20,560
one of those restaurants is its 
own little business. 

369
00:22:21,040 --> 00:22:23,840
You know, I mean, yes, some of 
our franchisees own multiple 

370
00:22:23,840 --> 00:22:27,120
restaurants, but ultimately each
one of those restaurants 

371
00:22:27,120 --> 00:22:30,280
operates sort of independently 
of each other, you know, really.

372
00:22:30,360 --> 00:22:32,240
Is that always almost always the
case? 

373
00:22:32,480 --> 00:22:36,040
Well, so I think it's something 
like 93% of our restaurants 

374
00:22:36,040 --> 00:22:41,760
worldwide are owned by a 
franchise or, or a licensee of 

375
00:22:41,760 --> 00:22:44,640
some sort of McDonald's. 
McDonald's I think only operates

376
00:22:44,640 --> 00:22:50,360
about 7% of our, our restaurants
ballpark. 

377
00:22:50,400 --> 00:22:51,720
I, I don't know what the numbers
are. 

378
00:22:51,720 --> 00:22:54,640
They change over time as, as we 
buy and sell restaurants. 

379
00:22:54,640 --> 00:22:59,320
But, but The thing is, yeah, you
may have a, a franchise who owns

380
00:22:59,320 --> 00:23:03,040
5 or 10 restaurants and they'll 
operate that obviously as a 

381
00:23:03,040 --> 00:23:05,680
single business. 
But the, the individual 

382
00:23:05,680 --> 00:23:08,080
restaurants themselves, you 
know, you're gonna have a 

383
00:23:08,080 --> 00:23:10,280
general manager and you're gonna
have other managers and then 

384
00:23:10,280 --> 00:23:14,800
you'll have the crew and they 
operate that restaurant on a 

385
00:23:14,800 --> 00:23:17,160
day-to-day basis, sort of 
independently of the other 

386
00:23:17,160 --> 00:23:19,160
restaurants even within their 
franchise. 

387
00:23:19,600 --> 00:23:22,440
Obviously they have oversight 
from their their franchise 

388
00:23:22,440 --> 00:23:26,720
organization. 
But in, in terms of how those 

389
00:23:27,440 --> 00:23:30,880
crew members and the managers 
get supported, it it's done 

390
00:23:30,880 --> 00:23:35,600
basically at the restaurant. 
OK, so you know, when you if you

391
00:23:35,600 --> 00:23:38,080
have a crew person who's having 
a problem with their identity, 

392
00:23:38,080 --> 00:23:39,920
the first person they're going 
to go to is one of their 

393
00:23:39,920 --> 00:23:43,960
managers. 
And and we need to be able to 

394
00:23:43,960 --> 00:23:49,240
empower those managers to be 
able to address and handle that 

395
00:23:49,240 --> 00:23:55,560
issue as quickly and as easily 
as possible because #1 

396
00:23:56,280 --> 00:23:58,760
identity's not their job as. 
Far as I was ready. 

397
00:23:59,040 --> 00:24:01,160
Their, their job is running, 
running the restaurant. 

398
00:24:01,160 --> 00:24:05,440
And so we have to streamline 
these things as much as we can 

399
00:24:05,440 --> 00:24:07,960
because they need to get back to
being able to run the 

400
00:24:07,960 --> 00:24:11,720
restaurant, but we also don't 
want them to be on the phone 

401
00:24:11,760 --> 00:24:13,880
calling the helpdesk all day 
actually. 

402
00:24:13,880 --> 00:24:18,720
It's always been fascinated by 
the franchise model or the 

403
00:24:18,720 --> 00:24:23,600
dealership model or either 
brokerage model because I think 

404
00:24:23,600 --> 00:24:26,640
to your point earlier you were 
talking about with the device 

405
00:24:26,640 --> 00:24:28,400
that you lose control of the 
device. 

406
00:24:28,400 --> 00:24:32,760
The franchise can go out and buy
Dells or they can go out and buy

407
00:24:33,200 --> 00:24:38,120
whatever they want and you just 
deal with it, right? 

408
00:24:39,080 --> 00:24:42,280
And also like within that 
network, I own 10 restaurants. 

409
00:24:42,600 --> 00:24:45,800
I could, you know, have some 
kind of hierarchy. 

410
00:24:45,800 --> 00:24:47,280
I could own a lunch with 
restaurants. 

411
00:24:47,280 --> 00:24:51,200
Make be sure you have some 
franchisees that owe them like 

412
00:24:51,600 --> 00:24:54,320
hundreds of restaurants, right? 
Yeah, I don't know what the 

413
00:24:54,320 --> 00:25:00,800
exact numbers are, at least 
within the USI think our largest

414
00:25:00,800 --> 00:25:03,560
ones are somewhere in the 50 
restaurant range. 

415
00:25:03,560 --> 00:25:09,480
But again, I, I'm not 100% sure.
You know, to some extent we we 

416
00:25:09,480 --> 00:25:14,440
do control the hardware within 
the restaurants from the 

417
00:25:14,440 --> 00:25:18,040
standpoint of like our point of 
sale systems and things like 

418
00:25:18,040 --> 00:25:20,720
that are, are fairly 
standardized. 

419
00:25:20,720 --> 00:25:24,480
There may be some options that 
the that the the franchisings 

420
00:25:24,480 --> 00:25:28,680
have for registers and and other
types of devices. 

421
00:25:30,000 --> 00:25:36,960
And I think what we've tried to 
do over time is to sort of 

422
00:25:36,960 --> 00:25:40,640
provide a standard set of 
capabilities so that the 

423
00:25:40,640 --> 00:25:43,640
franchisees don't have to solve 
these problems themselves. 

424
00:25:44,520 --> 00:25:46,480
And I think we've done a pretty 
good job with that. 

425
00:25:46,840 --> 00:25:50,240
We must to the, you know, for 
the most part, I think in most 

426
00:25:50,240 --> 00:25:54,800
areas of the world, McDonald's 
is actually, you know, provide 

427
00:25:54,800 --> 00:25:59,280
not necessarily providing the 
hardware, but specifying and 

428
00:25:59,280 --> 00:26:02,720
then having partners and working
with those partners to provide 

429
00:26:03,040 --> 00:26:06,760
those, those options to the the 
franchisees. 

430
00:26:07,160 --> 00:26:09,720
A little outside my area of 
expertise. 

431
00:26:09,720 --> 00:26:15,040
But I do know that for the most 
part, we standardize those 

432
00:26:15,040 --> 00:26:17,960
things because otherwise we, you
know, we provide the point of 

433
00:26:17,960 --> 00:26:21,640
sale software. 
We would be able to to easily 

434
00:26:21,640 --> 00:26:24,200
support that if we were out too 
wide of a variation. 

435
00:26:24,560 --> 00:26:27,360
And you hear a question and this
is probably way outside of your 

436
00:26:27,360 --> 00:26:29,040
expertise, but maybe you know 
the answer. 

437
00:26:29,400 --> 00:26:32,360
So when you're using a 
McDonald's app, you place an 

438
00:26:32,360 --> 00:26:35,680
order and it says your code is 
and it gives you a four digit 

439
00:26:35,680 --> 00:26:37,000
code. 
Yes, all right, there's. 

440
00:26:37,960 --> 00:26:39,840
Thousands of McDonald's or 
outside, right? 

441
00:26:39,840 --> 00:26:42,320
There's thousands of orders 
going in at a time. 

442
00:26:42,560 --> 00:26:47,760
How is a four digit code enough 
to know that you know this is 

443
00:26:47,760 --> 00:26:52,520
Jim and he ordered XY and Z? 
So stay on with this. 

444
00:26:53,000 --> 00:26:55,880
According to the fill, it only 
needs to apply to the location 

445
00:26:55,960 --> 00:26:58,960
wanting to pick it up, correct? 
Yeah. 

446
00:26:59,200 --> 00:27:00,720
So here are two smart people 
shorts. 

447
00:27:01,120 --> 00:27:04,600
Yeah. 
So you won't get the code until 

448
00:27:04,920 --> 00:27:07,680
you've submitted the ordering 
that the order is going to be 

449
00:27:07,680 --> 00:27:11,440
tied to the restaurant that 
you're submitting the order to. 

450
00:27:11,440 --> 00:27:15,520
So they really only have to 
support enough ongoing orders 

451
00:27:15,800 --> 00:27:18,120
for that one particular 
restaurant. 

452
00:27:19,200 --> 00:27:23,680
You could have theoretically and
you have code collisions across 

453
00:27:24,000 --> 00:27:28,200
restaurants and it wouldn't, it 
wouldn't be a problem because on

454
00:27:28,560 --> 00:27:31,800
what happens is when you give 
them that code, they that into 

455
00:27:31,800 --> 00:27:35,760
the point of sale system and the
combination of the restaurant 

456
00:27:35,760 --> 00:27:40,280
and the code then pulls the 
order in on from the digital 

457
00:27:40,280 --> 00:27:42,720
cut. 
That's my understanding. 

458
00:27:42,840 --> 00:27:44,840
OK, that makes sense. 
Yeah, Four, did you go? 

459
00:27:44,840 --> 00:27:47,720
Wouldn't wouldn't scale, but it 
wouldn't. 

460
00:27:47,720 --> 00:27:50,520
But we, you know, it's like, how
do you how do you find again? 

461
00:27:50,640 --> 00:27:53,480
Click, from a user experience 
perspective, how do you find the

462
00:27:53,480 --> 00:27:58,640
right balance? 
Because you're reading out a, 

463
00:27:59,080 --> 00:28:02,400
you know, 16 digit code. 
Yeah. 

464
00:28:03,160 --> 00:28:05,240
No, no, no, that was, that was 
an H. 

465
00:28:05,960 --> 00:28:08,400
Yeah, right. 
H And what the hell? 

466
00:28:11,040 --> 00:28:15,360
Let's talk about identifies. 
I think we were talking before 

467
00:28:15,360 --> 00:28:16,960
we started. 
We mentioned you were here last 

468
00:28:16,960 --> 00:28:17,720
year. 
Yeah, right. 

469
00:28:17,720 --> 00:28:19,360
So you're sucking that nervous 
second. 

470
00:28:19,800 --> 00:28:23,320
What brought you back? 
I, I really enjoyed the, the 

471
00:28:23,320 --> 00:28:27,680
conference last year. 
I, I, you know, obviously I, I 

472
00:28:27,680 --> 00:28:36,040
love being involved in any kind 
of, you know, community events, 

473
00:28:36,040 --> 00:28:38,440
right? 
Obviously this is a big part of 

474
00:28:38,440 --> 00:28:43,080
the identity and access 
community and being able to 

475
00:28:43,080 --> 00:28:46,600
participate in these types of 
events to be able to come and 

476
00:28:46,720 --> 00:28:50,200
talk with people that are sort 
of working in the same industry 

477
00:28:50,200 --> 00:28:51,680
out like it is. 
Is it valuable? 

478
00:28:51,680 --> 00:28:54,920
Because, you know, I mean, the, 
the sessions are great, right? 

479
00:28:55,920 --> 00:28:59,160
You, you know, you get to hear 
it and you hear about, you know,

480
00:28:59,160 --> 00:29:01,440
new things that are coming and 
hear how other people have 

481
00:29:01,440 --> 00:29:05,760
addressed problems. 
But even just if you were to get

482
00:29:05,760 --> 00:29:09,600
together or come and talk to the
people you know walking through 

483
00:29:09,600 --> 00:29:14,120
the the exhibit hall with the 
the sponsors and stuff beginning

484
00:29:14,120 --> 00:29:17,160
to talk to other. 
Practitioners in the industry, I

485
00:29:17,200 --> 00:29:21,160
think it's, it's hugely valuable
just to be able to network and 

486
00:29:21,440 --> 00:29:25,040
and make connections. 
Then you start to recognize a 

487
00:29:25,040 --> 00:29:26,800
lot of these folks. 
So absolutely. 

488
00:29:26,800 --> 00:29:28,520
They've been here for years and 
years. 

489
00:29:28,520 --> 00:29:30,360
Or other properties. 
Except, yeah. 

490
00:29:30,400 --> 00:29:33,560
So, yeah, the, the hallway 
conversations are always one of 

491
00:29:33,560 --> 00:29:35,920
the highlights for me at least. 
You know, that's not something 

492
00:29:35,920 --> 00:29:39,160
you can replicate like let's see
or a weather or something like 

493
00:29:39,160 --> 00:29:41,120
that. 
Well, and it's, it's hard too, 

494
00:29:41,120 --> 00:29:45,520
because even if you, even if you
know and have the contact info 

495
00:29:45,520 --> 00:29:49,600
for, for some other people in 
the industry, you know, you 

496
00:29:49,640 --> 00:29:51,960
know, they're busy, right? 
And you know that they're tied 

497
00:29:51,960 --> 00:29:54,200
up with their own things. 
And we hate to kind of like 

498
00:29:54,920 --> 00:29:59,560
inject yourself into into their,
with their daily grind. 

499
00:29:59,880 --> 00:30:04,240
But when everybody has taken the
time to, you know, to come to a 

500
00:30:04,240 --> 00:30:07,760
certain place, it's a, it's an 
opportunity to really, you know.

501
00:30:07,880 --> 00:30:11,840
Here, Yeah, Identity to meet new
people, learn new things and see

502
00:30:11,840 --> 00:30:12,880
new things. 
All that good stuff. 

503
00:30:12,920 --> 00:30:16,600
And we're in Vegas right up. 
It stays and it stays in Vegas 

504
00:30:16,720 --> 00:30:18,080
and then may not stay in Vegas, 
but. 

505
00:30:18,240 --> 00:30:20,840
Well, I mean, the thing that 
I've always enjoyed too is, you 

506
00:30:20,840 --> 00:30:24,320
know, I, I, I spend a lot of 
time on, on social media trying 

507
00:30:24,320 --> 00:30:27,520
to, you know, just understand 
what's going on and, and see 

508
00:30:27,520 --> 00:30:29,040
what other people are talking 
about. 

509
00:30:30,320 --> 00:30:33,880
And, and you have conversations 
with people on social media, 

510
00:30:33,880 --> 00:30:37,560
whether that be, you know, 
through a, a public, you know, 

511
00:30:37,840 --> 00:30:41,480
chat with comments or whatever, 
or if you're having maybe even 

512
00:30:41,480 --> 00:30:43,080
a, a direct private 
conversation. 

513
00:30:43,560 --> 00:30:48,800
But the relationship with that 
person changes drastically when 

514
00:30:48,800 --> 00:30:51,840
you've talked with them in 
person, even even if it's just 

515
00:30:51,840 --> 00:30:57,920
like for a few minutes. 
I, you know, I attended a, yeah,

516
00:30:57,920 --> 00:31:00,480
I told you, I, I come from a 
software engineering background.

517
00:31:00,520 --> 00:31:02,560
I, I have a lot of Microsoft 
events over the years. 

518
00:31:03,440 --> 00:31:08,400
And I had been chatting with a a
gentleman from their identity 

519
00:31:08,560 --> 00:31:12,800
team for months or or even years
on Twitter. 

520
00:31:14,120 --> 00:31:18,680
We're on the service forum 
announced where and we had never

521
00:31:18,680 --> 00:31:21,960
met in person. 
And I happened to run into him 

522
00:31:22,200 --> 00:31:26,600
at one of the Microsoft events 
and we hadn't threatened 5-10 

523
00:31:26,800 --> 00:31:30,320
minutes. 
The the relationship that we 

524
00:31:30,320 --> 00:31:36,000
then had on Twitter subsequent 
to that changed drastic. 

525
00:31:36,560 --> 00:31:41,040
It was it was no longer just 
some random person that who he 

526
00:31:41,040 --> 00:31:43,680
was chatting with. 
It was somebody who he knew who 

527
00:31:43,760 --> 00:31:47,520
he had met. 
And you could tell just it that 

528
00:31:48,120 --> 00:31:52,320
the willingness to actually have
a little bit more depth to a 

529
00:31:52,320 --> 00:31:54,240
conversation. 
So that's how it's. 

530
00:31:54,280 --> 00:31:59,160
Upgrading like what's rating 
because a lot of these conflicts

531
00:31:59,160 --> 00:32:02,520
as well, you're seeing it last 
they used to be there was a 

532
00:32:02,520 --> 00:32:05,760
virtual option, right? 
First it was virtual only, then 

533
00:32:05,760 --> 00:32:08,080
it was virtual option and now 
you're seeing a lot of that go 

534
00:32:08,080 --> 00:32:11,280
away, which makes sense. 
You know, people who travel and 

535
00:32:11,280 --> 00:32:15,040
be together out. 
But the benefit is what you just

536
00:32:15,040 --> 00:32:17,880
said, making that connection. 
Now you're more than just a a 

537
00:32:19,080 --> 00:32:21,880
picture and a a tagline on 
screen. 

538
00:32:22,040 --> 00:32:24,280
You're a person that I've had an
interaction, but. 

539
00:32:24,720 --> 00:32:27,680
Yeah, I honestly, I really love 
when they, when in the 

540
00:32:27,680 --> 00:32:31,440
conferences do sort of a 
combination of virtual and in 

541
00:32:31,440 --> 00:32:34,880
person, because then I can go 
attend in person and can focus 

542
00:32:34,880 --> 00:32:38,800
on the networking aspects and 
not worry so much about the 

543
00:32:38,800 --> 00:32:42,280
sessions because I can always 
come back afterwards and watch 

544
00:32:42,280 --> 00:32:45,840
the sessions. 
Or something like this and you 

545
00:32:45,840 --> 00:32:47,280
go watch it. 
Right. 

546
00:32:48,000 --> 00:32:51,560
Well, because you know the 
what's the difference if I'm 

547
00:32:51,560 --> 00:32:54,680
there in person watching it or 
watching it or it. 

548
00:32:54,920 --> 00:32:58,040
But being able to go talk to 
people and actually have a 

549
00:32:58,040 --> 00:33:01,560
conversation is a lot harder to 
do virtual or even. 

550
00:33:01,880 --> 00:33:03,160
Split in between sessions, 
right? 

551
00:33:03,160 --> 00:33:05,120
You wanted, there's like four 
different sessions all taking 

552
00:33:05,120 --> 00:33:06,440
place, right, Like you want to 
be. 

553
00:33:06,440 --> 00:33:08,240
I think it should be a mandatory
thing. 

554
00:33:08,720 --> 00:33:10,960
You know, if you're right in the
conference, you should have some

555
00:33:11,280 --> 00:33:14,480
sort of recording or something 
right, taking place where you 

556
00:33:14,480 --> 00:33:19,280
can watch whatever you missed. 
I saw somewhere out there 

557
00:33:19,280 --> 00:33:22,000
they're doing some sort of AI. 
Some are the as well around 

558
00:33:22,440 --> 00:33:23,920
things. 
I I don't know what that means, 

559
00:33:24,160 --> 00:33:27,400
you know, identivers now with 
whatever set more AI. 

560
00:33:27,640 --> 00:33:30,160
Mean, you know what I mean? 
If you slack a little AI on it, 

561
00:33:30,200 --> 00:33:32,000
it's gotta be. 
Right, Yeah, that's gotta be 

562
00:33:32,000 --> 00:33:34,960
better. 
Let's talk about your keynotes 

563
00:33:35,000 --> 00:33:37,160
Friday. 
So it's time people listen to 

564
00:33:37,160 --> 00:33:39,040
this that I'll probably pass a 
blank. 

565
00:33:39,040 --> 00:33:43,120
But the future of authorization,
you mentioned early on 

566
00:33:43,120 --> 00:33:45,920
authorization what consider 
relations to your like a area 

567
00:33:45,920 --> 00:33:49,720
that needs to be solved or still
an employee review on that give 

568
00:33:49,720 --> 00:33:53,640
us a little synopsis of what the
talk about. 

569
00:33:54,360 --> 00:33:58,120
Yeah. 
So I, I will say I am, I am a 

570
00:33:58,120 --> 00:33:59,720
very small part of the King 
code. 

571
00:33:59,800 --> 00:34:02,080
It's mainly Sarah from AWS and 
and. 

572
00:34:02,320 --> 00:34:06,560
Peter from and Sarah's been 
popping her head in see us like 

573
00:34:07,040 --> 00:34:09,239
motioning and stuff like that. 
She can go across. 

574
00:34:09,239 --> 00:34:11,600
The I, I I actually met with 
Sarah earlier this morning. 

575
00:34:11,600 --> 00:34:13,760
I need to go over the talk and 
she said say hello. 

576
00:34:15,480 --> 00:34:19,280
But so they're, they're 
obviously working very, very 

577
00:34:19,280 --> 00:34:23,920
closely together on a lot of 
standards around authorization. 

578
00:34:23,920 --> 00:34:29,360
And I where I'm participating is
I'm going to to be the problem 

579
00:34:29,360 --> 00:34:34,360
child. 
No, I'm actually going to just 

580
00:34:34,360 --> 00:34:36,920
talk a little bit about some of 
the challenges that we see at 

581
00:34:36,920 --> 00:34:39,880
the dolls with authorization. 
I, I, you know, I think I 

582
00:34:39,880 --> 00:34:44,159
mentioned earlier, you know, 
super expensive for us to 

583
00:34:44,159 --> 00:34:47,000
integrate allocations when it 
comes to authorization. 

584
00:34:47,280 --> 00:34:51,920
There's a, a bunch of different 
ways to do it and none of them 

585
00:34:51,920 --> 00:34:58,760
are white, but it's just we, you
know, the way I'm looking at it 

586
00:34:58,760 --> 00:35:04,240
is if I, if I want to, if I were
to have a wish, like I would 

587
00:35:04,320 --> 00:35:11,720
love for there to be some way to
make authorization closer to as 

588
00:35:11,720 --> 00:35:15,480
easy as doing authentication, a 
lot of standards. 

589
00:35:15,520 --> 00:35:18,040
And yeah, I mean, it's, it's 
great. 

590
00:35:18,120 --> 00:35:23,800
You can go to a, a, a SAS vendor
and say, hey, what do you, what 

591
00:35:23,800 --> 00:35:27,880
do you guys support for SSO? 
And they all go, Oh yeah, we 

592
00:35:27,880 --> 00:35:32,840
support open ID connect or, and,
or where we support XAML and 

593
00:35:32,840 --> 00:35:35,160
maybe some others, but those are
the two that we care about. 

594
00:35:36,440 --> 00:35:39,960
And you know, you plug it in, 
it's a little bit of work. 

595
00:35:39,960 --> 00:35:43,520
Sure, you know, for our team to 
do, you know, 30 minutes an hour

596
00:35:43,520 --> 00:35:47,440
work of set up, you know, work 
with the the app team and, and 

597
00:35:47,440 --> 00:35:48,920
do some testing, make sure 
everything is good. 

598
00:35:48,920 --> 00:35:53,000
And then OK, great, you've got, 
you've got authentication ready 

599
00:35:53,000 --> 00:35:56,600
to go. 
But authorization is orders of 

600
00:35:56,600 --> 00:36:00,720
magnitude more difficult. 
And so the keynote really is 

601
00:36:00,720 --> 00:36:03,720
talking about some of the work 
that's being done in the 

602
00:36:03,720 --> 00:36:07,680
industry out trying to 
standardize, you know, the 

603
00:36:08,280 --> 00:36:12,840
authorization story. 
I'm not, I, I don't think we're 

604
00:36:12,840 --> 00:36:16,800
at a point yet where we go, hey,
we have a, a solution to all of 

605
00:36:16,800 --> 00:36:20,000
these problems. 
But I I think that what we're 

606
00:36:20,000 --> 00:36:23,360
recognizing is we've largely 
solved most of the 

607
00:36:23,360 --> 00:36:26,760
authentication challenges. 
Because they're right. 

608
00:36:26,840 --> 00:36:29,800
Didn't face. 
It was that what's really 

609
00:36:29,800 --> 00:36:34,320
interesting, I think from an 
authorization standpoint is I 

610
00:36:34,320 --> 00:36:36,240
guess it's probably nervous. 
This is the first time I'm 

611
00:36:36,240 --> 00:36:40,360
thinking about this town where 
your authentication issue was 

612
00:36:40,360 --> 00:36:45,000
10-15 years ago. 
The problem, the problem is 

613
00:36:45,000 --> 00:36:48,880
applications are designed to be 
standalone, right? 

614
00:36:49,480 --> 00:36:52,760
Like it's, if you have a single 
sign on, great, we can 

615
00:36:52,760 --> 00:36:54,560
integrate, but you don't have to
have it. 

616
00:36:54,560 --> 00:36:59,440
You can log in on our screen and
we have these roles here, Reaps 

617
00:36:59,440 --> 00:37:02,680
or entitlements, whatever you 
want to call, but it's this 

618
00:37:02,680 --> 00:37:05,240
combination. 
And then that's what our 

619
00:37:05,240 --> 00:37:09,720
application expects. 
Now replacing authentication was

620
00:37:09,720 --> 00:37:13,800
just that thin layer on top 
replacing authorization or not 

621
00:37:13,800 --> 00:37:18,640
replacing but fully integrate 
them to and you have N number of

622
00:37:18,760 --> 00:37:21,200
applications all designed 
different ways. 

623
00:37:21,560 --> 00:37:22,840
That's it's another. 
Story. 

624
00:37:23,000 --> 00:37:28,760
Yeah, yeah, absolutely. 
But I, I think that the, you 

625
00:37:28,760 --> 00:37:32,640
know, sort of where we're at 
today is we're trying to solve 

626
00:37:33,640 --> 00:37:38,600
sort of that common language. 
We, we, you know, with SAML and 

627
00:37:38,600 --> 00:37:42,520
Oauth help, they detect, we, we 
have a common language that we 

628
00:37:42,520 --> 00:37:44,920
can use for authentication 
today. 

629
00:37:45,440 --> 00:37:51,120
And when you, when you have an 
application, you want to enable 

630
00:37:51,120 --> 00:37:54,120
it on SSO, you now have a 
standard, you know, you can plug

631
00:37:54,120 --> 00:37:55,920
in. 
But you're right though, that 

632
00:37:55,920 --> 00:37:59,640
authorization is much more 
complicated because every 

633
00:37:59,640 --> 00:38:05,320
application does its own thing. 
But I think if we can get to a 

634
00:38:05,320 --> 00:38:10,240
common language or a common set 
of languages that can't be 

635
00:38:10,240 --> 00:38:14,920
supported, you can hopefully get
the application vendors to a 

636
00:38:14,920 --> 00:38:19,080
point where they're starting to 
think about authorization in a 

637
00:38:19,080 --> 00:38:24,400
consistent way because you have 
languages that work in a certain

638
00:38:24,400 --> 00:38:27,360
way. 
Because we didn't have those 

639
00:38:27,360 --> 00:38:31,040
languages, everybody was left to
sort of fend for themselves in 

640
00:38:31,040 --> 00:38:34,680
terms of how they didn't do 
authorization within their app. 

641
00:38:35,080 --> 00:38:38,920
And of course, you know, you, 
you have, you know, one problem,

642
00:38:38,920 --> 00:38:41,200
but 99 different ways to solve 
it. 

643
00:38:41,520 --> 00:38:43,400
We, that's kind of where we're 
at today. 

644
00:38:43,400 --> 00:38:45,840
So I think the first thing we 
have to do is solve the language

645
00:38:45,840 --> 00:38:48,800
problem. 
And then once we have that and 

646
00:38:48,800 --> 00:38:52,920
we can show like, hey, these 
these identity platforms now 

647
00:38:52,920 --> 00:38:56,320
support these languages. 
Now we could start to. 

648
00:38:56,320 --> 00:38:59,920
Go to the offenders and say 
let's figure out how to get you 

649
00:38:59,920 --> 00:39:03,400
on board because like 
authentication, it will make 

650
00:39:03,400 --> 00:39:05,440
your life easier. 
It will make your customers 

651
00:39:05,440 --> 00:39:09,000
lives easier because they'll be 
able to plug in a lot better. 

652
00:39:09,720 --> 00:39:13,240
All the good news is that books 
like yourself and Not seriously 

653
00:39:13,600 --> 00:39:16,680
Sarah and and many, many others,
I'm not going to try and go 

654
00:39:16,680 --> 00:39:19,400
through the whole list, but 
there's so many people focused 

655
00:39:19,400 --> 00:39:23,120
on authorization now. 
You didn't see that five years 

656
00:39:23,160 --> 00:39:24,280
ago. 
Yeah. 

657
00:39:24,840 --> 00:39:27,280
Well, I, I mean, I think if you 
look at it, the, the 

658
00:39:27,480 --> 00:39:31,680
proliferation of applications, 
it is contributing to this, 

659
00:39:31,680 --> 00:39:34,200
right. 
If you look 10 years ago, like 

660
00:39:34,240 --> 00:39:38,240
our application estate at 
McDonald's was much smaller. 

661
00:39:38,880 --> 00:39:41,680
I mean, you know, we still had a
lot of applications. 

662
00:39:41,680 --> 00:39:45,080
We're big enterprise, but it was
much smaller than it is today. 

663
00:39:45,200 --> 00:39:50,880
We're for over 1000 allocations.
So imagine trying to integrate 

664
00:39:50,880 --> 00:39:55,000
1000 locations that are out 
doing their state, the, you 

665
00:39:55,000 --> 00:39:58,080
know, the their own way and and 
it's it's challenging. 

666
00:39:59,000 --> 00:40:01,440
Well, the next part of the 
positive assault, right, We have

667
00:40:01,600 --> 00:40:03,840
fixed authentication, we're done
Great. 

668
00:40:03,840 --> 00:40:06,520
That's nothing. 
If there's thought we're there, 

669
00:40:06,520 --> 00:40:07,280
I. 
Yeah. 

670
00:40:07,400 --> 00:40:09,720
What's next? 
Part of the authentication there

671
00:40:09,720 --> 00:40:11,320
is the next step is 
authorization. 

672
00:40:11,760 --> 00:40:15,160
So here we are with that Frank. 
And you know, I I guess I'm a 

673
00:40:15,160 --> 00:40:18,600
little bit pessimistic because 
we do need outpatient developers

674
00:40:18,600 --> 00:40:20,880
to get a hold of this. 
I don't know how we're going to 

675
00:40:20,880 --> 00:40:23,520
go back and retro bit without 
some sort of crazy little where 

676
00:40:23,520 --> 00:40:26,720
and there are some things that 
that probably not that, but 

677
00:40:27,080 --> 00:40:30,960
probably being at what 10-15 
years from now is really when 

678
00:40:31,360 --> 00:40:35,040
we're going to look back on it. 
If we start now and say let's 

679
00:40:35,040 --> 00:40:38,160
start standardizing the way we 
do authorizations or at least 

680
00:40:38,160 --> 00:40:40,880
coming up with some framework, 
because you've got so many 

681
00:40:40,880 --> 00:40:42,600
different ways to do it while 
here. 

682
00:40:42,600 --> 00:40:46,440
It's transaction day, you know, 
maybe it's FAP, it's AT code 

683
00:40:46,680 --> 00:40:49,920
natural directory, it's a group 
and yet another application. 

684
00:40:49,920 --> 00:40:52,480
There is SAS days out maybe and 
it's this is the entitlement, 

685
00:40:52,600 --> 00:40:55,840
right? 
I just I I wish it would be get 

686
00:40:55,840 --> 00:41:00,560
better faster, but the realist 
did me and the pessimist side of

687
00:41:00,560 --> 00:41:03,640
me looks as like probably in a 
10 to 15 year I was absent to 

688
00:41:03,640 --> 00:41:05,280
pinch up I. 
Mean, I think, I think you're 

689
00:41:05,640 --> 00:41:10,640
probably right to get to the 
point where we're at today with 

690
00:41:10,640 --> 00:41:15,640
authentication in terms of being
able to say it's largely a 

691
00:41:15,640 --> 00:41:18,080
solved album, right? 
Authentication, but we're not 

692
00:41:18,080 --> 00:41:20,960
going to say like it's solved 
everywhere and for every 

693
00:41:20,960 --> 00:41:25,160
scenario. 
But by and large, we can look at

694
00:41:25,160 --> 00:41:28,840
it and go, well, hey, you know 
what, there's common tooling, 

695
00:41:28,840 --> 00:41:32,640
there's common standards that 
people can use to plug in. 

696
00:41:32,640 --> 00:41:35,880
And it's largely a solved 
problem from a technical 

697
00:41:35,880 --> 00:41:37,800
perspective. 
Now, maybe not everything, but 

698
00:41:37,800 --> 00:41:39,880
using it or maybe there's some 
edge cases. 

699
00:41:40,520 --> 00:41:41,680
So I think you're probably 
right. 

700
00:41:41,680 --> 00:41:48,040
But I, I, I think there's a lot 
of value even in if, if you were

701
00:41:48,040 --> 00:41:55,320
to get commonly accepted 
standards for authorization and 

702
00:41:55,320 --> 00:41:59,640
you were to get the identity 
platforms to support it and even

703
00:41:59,760 --> 00:42:04,000
some of the large vectors to 
support it, which is probably 

704
00:42:04,000 --> 00:42:08,680
what you'll get early on. 
There's going to be a long tail 

705
00:42:08,680 --> 00:42:13,160
right of, of applications, how 
long it takes them to, to, you 

706
00:42:13,160 --> 00:42:15,240
know, to bring out support for 
it. 

707
00:42:16,400 --> 00:42:19,840
But I think, you know, even if 
you can get some of the major 

708
00:42:20,320 --> 00:42:24,760
players on board that there's a 
lot of huge value to that, 

709
00:42:26,800 --> 00:42:30,240
especially when you talk about 
enterprise type, you know, 

710
00:42:30,600 --> 00:42:36,040
regulatory type applications, if
you could get that on board, 

711
00:42:36,480 --> 00:42:40,800
there's huge value for for, you 
know, for industry for that so. 

712
00:42:42,520 --> 00:42:45,200
You've got another step coming 
up this week because you're busy

713
00:42:45,240 --> 00:42:48,600
the way One McDonald's Way, the 
global identity and access 

714
00:42:48,600 --> 00:42:50,800
journey at McDonald's. 
What's that about? 

715
00:42:51,360 --> 00:42:55,120
Yeah. 
So McDonald's, you know, we, 

716
00:42:55,120 --> 00:42:59,640
we're in 115 markets and 
historically McDonald's sort of 

717
00:42:59,640 --> 00:43:04,440
operated as 115 different 
businesses. 

718
00:43:04,440 --> 00:43:06,760
I, you know, I mentioned that 
I've been with McDonald's for a 

719
00:43:06,760 --> 00:43:08,560
long time. 
I actually started incorporated 

720
00:43:08,560 --> 00:43:11,640
in 2000. 
And when I started, there was no

721
00:43:11,640 --> 00:43:15,200
global IT. 
There was corporate IT, which 

722
00:43:15,200 --> 00:43:20,920
was focused on like a mainframe 
and our financial systems for, 

723
00:43:21,080 --> 00:43:23,080
you know, how the corporation 
rang. 

724
00:43:23,920 --> 00:43:28,600
And then every market had their 
own IT, you know, from the US 

725
00:43:28,600 --> 00:43:31,920
market, which had a fairly 
sizable you IT because they're 

726
00:43:31,920 --> 00:43:35,440
like a third of our restaurants.
But he had some markets that 

727
00:43:35,440 --> 00:43:39,720
it's like one guy in a in a 
closet somewhere around IT 

728
00:43:39,720 --> 00:43:42,200
through the entire market 
because they're a small in 

729
00:43:42,200 --> 00:43:45,160
market, but every market did the
relative there. 

730
00:43:45,240 --> 00:43:47,880
There was no, we didn't have a 
global identity platform. 

731
00:43:48,080 --> 00:43:54,800
In fact, when when I was fairly 
new, I think I was made counting

732
00:43:54,840 --> 00:44:02,600
a year in, we rolled out the 
first global identities because 

733
00:44:02,600 --> 00:44:07,760
we were trying to roll out an 
extramat and realize that we 

734
00:44:07,760 --> 00:44:12,480
didn't have an identity that 
everybody could use to sign in 

735
00:44:12,760 --> 00:44:16,160
to this this website that we 
were going to use to disseminate

736
00:44:16,760 --> 00:44:19,160
defamation of. 
I see that a lot actually. 

737
00:44:19,320 --> 00:44:24,240
It's like this, this idea of 
digital transformation driving a

738
00:44:24,240 --> 00:44:28,400
lot of standardized identity 
approaches down that seems like 

739
00:44:28,400 --> 00:44:30,600
that kind of also. 
Yeah, because this it's when you

740
00:44:30,600 --> 00:44:34,680
get to the point what George Lee
just described me where realist.

741
00:44:34,680 --> 00:44:40,120
Oh, oh, that's actually they 
call that identity and access 

742
00:44:40,120 --> 00:44:40,800
mentor. 
OK. 

743
00:44:40,840 --> 00:44:43,680
Yeah, we need that. 
Well, The funny thing is, I mean

744
00:44:43,720 --> 00:44:49,160
even at that point we rolled out
sort of a new identity platform,

745
00:44:49,600 --> 00:44:52,800
but all of the markets still 
manage their identity platform 

746
00:44:52,800 --> 00:44:57,800
for their local applications for
their local PCs, etcetera. 

747
00:44:57,800 --> 00:45:03,880
So we had for this dichotomy of 
the the global platform, which 

748
00:45:03,920 --> 00:45:08,240
only got you into this extranet 
and subsequently any 

749
00:45:08,240 --> 00:45:11,880
applications that sort of tied 
in to that same platform. 

750
00:45:12,480 --> 00:45:16,160
But how people logged into their
PCs was a completely different 

751
00:45:16,160 --> 00:45:17,440
ID. 
So you had people with two 

752
00:45:17,440 --> 00:45:19,600
different IDs with two different
passwords. 

753
00:45:19,960 --> 00:45:25,120
And eventually some of our, like
the US market and corporate 

754
00:45:25,320 --> 00:45:28,440
said, Oh well, since we're 
running both of these things, 

755
00:45:28,440 --> 00:45:31,000
why don't we synchronize the 
password between the two, but 

756
00:45:31,000 --> 00:45:35,520
you still had two different IDs.
And technically 2 still 

757
00:45:35,720 --> 00:45:37,880
passwords, but it was it was 
wise I think. 

758
00:45:38,360 --> 00:45:41,320
Exactly. 
But, but it was literally one 

759
00:45:41,320 --> 00:45:45,320
was in Active Directory and one 
was in like Nobel identity 

760
00:45:45,320 --> 00:45:49,480
manager directory. 
But yeah, they were, they were 

761
00:45:49,480 --> 00:45:54,760
synchronizing passwords. 
So at that point we, we still 

762
00:45:54,760 --> 00:45:59,920
had effectively 100 and 15120 
different ways of doing I, I got

763
00:46:00,360 --> 00:46:01,880
right. 
You had a central team that 

764
00:46:01,880 --> 00:46:05,800
managed the global identity 
portion, but that wasn't really 

765
00:46:05,800 --> 00:46:08,760
a global identity platform 
because it was really used for 

766
00:46:08,760 --> 00:46:12,800
accessing one's websites. 
Over time, we got some of our 

767
00:46:12,800 --> 00:46:17,560
major markets sort of 
standardized on a single Active 

768
00:46:17,560 --> 00:46:24,120
Directory. 
But it, it took us up until end 

769
00:46:24,120 --> 00:46:29,200
of 2022 to actually get 
everybody on to a standard 

770
00:46:29,200 --> 00:46:32,840
platform right through the same 
business processes, same 

771
00:46:33,120 --> 00:46:36,280
identity life cycle processes 
and everything. 

772
00:46:36,760 --> 00:46:41,600
But we, we really kicked that up
process off in 2019. 

773
00:46:41,600 --> 00:46:45,640
And over the course of four 
years, we onboarded 100 markets 

774
00:46:46,040 --> 00:46:51,920
and something like almost 
2,000,000 user IDs on platform 

775
00:46:51,920 --> 00:46:55,040
in like 4 years. 
So that's what my talk is going 

776
00:46:55,040 --> 00:46:57,640
to be about is really just kind 
of talking through what that 

777
00:46:57,920 --> 00:47:00,640
process looked like, how we did 
it, how we structured the 

778
00:47:00,640 --> 00:47:06,000
program to actually do that. 
Because it, it was an insane 

779
00:47:06,000 --> 00:47:08,920
amount of work to try and work 
with all of these different 

780
00:47:08,920 --> 00:47:13,120
markets to bring them on board. 
And we obviously couldn't do it 

781
00:47:13,720 --> 00:47:17,880
in a custom way for every single
market 'cause there was no way 

782
00:47:17,880 --> 00:47:20,400
we could do it. 
And then, you know, I'll talk 

783
00:47:20,480 --> 00:47:24,000
through a a few of the lessons 
learned and and sort of what's 

784
00:47:24,000 --> 00:47:27,560
next for from a top. 
Didn't stop. 

785
00:47:27,560 --> 00:47:31,760
We've been timing here about 45 
minutes kind of the call before 

786
00:47:31,760 --> 00:47:36,040
the store of identivers. 
It's, you know, 10:20 AM the 

787
00:47:36,080 --> 00:47:39,360
next time because the people 
kind of coming and goings we're 

788
00:47:39,360 --> 00:47:40,960
kind of like wouldn't look at 
doing that room right. 

789
00:47:40,960 --> 00:47:45,640
Like the actual conference 
technically, I guess starts 

790
00:47:45,640 --> 00:47:49,720
tonight with the the keynote. 
So we want to let you get on and

791
00:47:49,720 --> 00:47:53,000
at least get an app in or 
shenanigans starter right here. 

792
00:47:54,800 --> 00:47:59,080
Would you say that the sausage, 
egg and cheese that griddle is 

793
00:47:59,080 --> 00:48:02,280
the pinnacle of McDonald's 
innovation? 

794
00:48:02,840 --> 00:48:05,920
So pinnacle of McDonald's 
innovation. 

795
00:48:06,480 --> 00:48:08,360
Because I could tell you right 
now, I think it is. 

796
00:48:08,800 --> 00:48:14,160
I don't know how you beat that. 
So I will say my kids love the 

797
00:48:14,160 --> 00:48:18,120
sausage, egg and cheese McGraw 
that is by far their favorite 

798
00:48:18,120 --> 00:48:22,960
breakfast. 
I'm I'm more of a breakfast 

799
00:48:22,960 --> 00:48:27,760
burrito kind of guy myself, 
'cause you know what? 

800
00:48:27,760 --> 00:48:30,920
What could be better than eggs 
and sausage and Peppers and. 

801
00:48:31,040 --> 00:48:33,480
Roll well and thy and Gia Olivia
bell salsa. 

802
00:48:33,560 --> 00:48:34,800
And you know their skin 
correctly. 

803
00:48:35,760 --> 00:48:37,600
Yeah. 
I mean, you know, the the little

804
00:48:38,560 --> 00:48:42,400
syrup injected pancake. 
I I done it. 

805
00:48:42,920 --> 00:48:46,080
I mean it, it literally is a 
whole breakfast in one thing 

806
00:48:46,640 --> 00:48:49,040
accelerated. 
So yeah, I could, I could see 

807
00:48:49,040 --> 00:48:51,000
that. 
I I could I could agree with 

808
00:48:51,000 --> 00:48:54,560
that statement. 
What do you say to someone when 

809
00:48:55,240 --> 00:48:58,520
they've never been to McDonald's
and say what's the thing that 

810
00:48:58,520 --> 00:49:00,480
they should try? 
It what? 

811
00:49:00,480 --> 00:49:03,480
And then really he. 
Who is this right? 

812
00:49:03,760 --> 00:49:06,680
Actually, that's not sure if he 
likes this. 

813
00:49:07,560 --> 00:49:12,040
And I guess so, I think you got 
to go with the classics, right? 

814
00:49:12,360 --> 00:49:15,360
If if, if you're talking about 
breakfast, you got, you got to 

815
00:49:15,360 --> 00:49:19,240
try the egg, you know? 
I'm not a guy too plain. 

816
00:49:19,600 --> 00:49:22,160
Yeah. 
I I mean a lot of them as a kid,

817
00:49:22,160 --> 00:49:26,080
but now that you have the like 
red egg griddle, I mean, and, 

818
00:49:26,080 --> 00:49:27,800
and by the way, it doesn't have 
to be just sausage. 

819
00:49:27,800 --> 00:49:31,120
I mean, anything you put on 
Mcgriddle, that's wonderful. 

820
00:49:32,200 --> 00:49:34,600
Yeah, I mean, honestly, you 
could really try it for 

821
00:49:34,600 --> 00:49:36,520
breakfast because the breakfast 
menu is awesome. 

822
00:49:36,520 --> 00:49:41,440
I I'd miss all day breakfast, 
but obviously. 

823
00:49:41,440 --> 00:49:43,040
And for lunch, you got to try 
the fries. 

824
00:49:43,400 --> 00:49:47,480
Yeah, I mean, there's just no 
two ways around powder fries and

825
00:49:47,480 --> 00:49:50,160
I would say our poor powder of 
cheese because. 

826
00:49:50,480 --> 00:49:52,880
My daughter cooking, you know, 
we, we switched over. 

827
00:49:52,880 --> 00:49:57,320
To fresh beef for Kurt Carver 
cheese a number of years ago and

828
00:49:57,320 --> 00:50:03,720
it's like that day you. 
I mean, the quality of the fresh

829
00:50:03,720 --> 00:50:06,920
beef versus the frozen beef is 
just, I mean, frozen beef is 

830
00:50:06,920 --> 00:50:08,040
good. 
It's good quality. 

831
00:50:08,040 --> 00:50:10,840
It's just there's something 
about the and fresh. 

832
00:50:11,360 --> 00:50:14,160
Bamboos Crispy Chicken Deluxe is
playing too. 

833
00:50:14,800 --> 00:50:16,880
So how? 
Here's what for you. 

834
00:50:17,040 --> 00:50:20,440
Overrated or underrated fish for
legs out? 

835
00:50:22,440 --> 00:50:24,840
I get to say overrated because I
don't like fish very much. 

836
00:50:26,120 --> 00:50:29,040
Not at all. 
But I I do know that there are 

837
00:50:29,040 --> 00:50:33,360
lots of people that level then. 
It's probably underrated, I 

838
00:50:33,360 --> 00:50:36,560
never get it but. 
Just wait a second. 

839
00:50:36,800 --> 00:50:38,760
How can you how can you say it's
underrated? 

840
00:50:38,760 --> 00:50:39,680
I. 
Don't have to met that many 

841
00:50:39,680 --> 00:50:41,000
people that like it. 
OK. 

842
00:50:41,440 --> 00:50:43,440
So I think like the rating is 
very low. 

843
00:50:43,440 --> 00:50:48,480
That is, among society, going to
be better than we as fish. 

844
00:50:48,600 --> 00:50:50,880
We sound an awful lot but. 
It's just when I get to 

845
00:50:50,880 --> 00:50:52,480
McDonald's, I'm. 
Like well. 

846
00:50:52,640 --> 00:50:56,240
Serve things and fish sandwich 
doesn't come to mind for me, but

847
00:50:57,200 --> 00:51:01,720
yeah and they could probably. 
And it's it's the only sandwich 

848
00:51:01,720 --> 00:51:03,600
we have that uses a steamed 
butt. 

849
00:51:05,720 --> 00:51:08,280
All of our other sandwiches use 
toasted butts. 

850
00:51:08,520 --> 00:51:10,840
OK, but the fish filet has a 
steamed butt. 

851
00:51:14,240 --> 00:51:16,400
And now we're getting. 
I don't know, I mean I'd have to

852
00:51:16,400 --> 00:51:19,640
go back and look at the history,
but yeah, there's something 

853
00:51:19,640 --> 00:51:24,600
about the IT makes it like super
pillowy and a cow. 

854
00:51:26,400 --> 00:51:31,200
I guess maybe because the fish 
is kind of a lighter, a lighter 

855
00:51:31,680 --> 00:51:36,360
protein versus lighter chicken. 
It's are more dense And so 

856
00:51:36,360 --> 00:51:38,920
because the the fish is is 
lighter to fluff. 

857
00:51:41,560 --> 00:51:46,000
I'd have to have to ask by my 
buddy chef Mike her ass. 

858
00:51:46,000 --> 00:51:47,560
I think it's how he pronounced 
his last name. 

859
00:51:47,560 --> 00:51:51,960
He's a he's a former McDonald's 
chef and he he's out on social 

860
00:51:51,960 --> 00:51:53,840
media answering all the 
McDonald's questions. 

861
00:51:53,840 --> 00:51:55,600
So. 
I'd be a good one for throwing 

862
00:51:55,600 --> 00:51:57,320
out TikTok, for example. 
Yeah, exactly. 

863
00:51:57,480 --> 00:52:01,720
That's a good like, you know, 
pub trivia quiz. 

864
00:52:01,760 --> 00:52:04,920
Like what is the only McDonald's
item that does not have a 

865
00:52:04,920 --> 00:52:06,360
toasted rifle? 
No. 

866
00:52:06,960 --> 00:52:11,080
Yeah, that will do all right. 
What do you think? 

867
00:52:11,280 --> 00:52:13,240
Should we wrap it up there? 
I think we should wrap it up. 

868
00:52:13,240 --> 00:52:15,720
We, I mean, we can't take up too
much George's time. 

869
00:52:15,720 --> 00:52:17,280
Together. 
Just get out there. 

870
00:52:17,480 --> 00:52:19,200
This day I didn't burst ahead, 
Yeah. 

871
00:52:19,600 --> 00:52:21,880
I appreciate you guys have. 
Yeah, Thank you so much for 

872
00:52:21,880 --> 00:52:25,320
taking the title class. 
And Yep, we'll see you walk in 

873
00:52:25,320 --> 00:52:27,400
the halls and we'll be doing the
same thing. 

874
00:52:27,400 --> 00:52:30,240
So that's appreciating time. 
Yeah, thank you. 

875
00:52:30,240 --> 00:52:32,200
All right, so we'll go ahead and
make it there for this 

876
00:52:32,200 --> 00:52:34,720
conversation, I think. 
So this was kind of kick off 

877
00:52:34,720 --> 00:52:39,000
with our Identitors 2024 series.
It's a plan I think right now is

878
00:52:39,880 --> 00:52:43,400
episodes pretty much all looks 
that sweet as I get back to get 

879
00:52:43,400 --> 00:52:47,240
things out of there and kind of 
pushed out the door, but that 

880
00:52:47,240 --> 00:52:49,040
was it. 
So our first four range of 

881
00:52:49,040 --> 00:52:52,240
video, we got cameras, we got 
some microphones, we got open 

882
00:52:52,240 --> 00:52:54,680
door. 
People were kind of coming in 

883
00:52:54,680 --> 00:52:59,240
and that way. 
How do I say was it on there? 

884
00:52:59,680 --> 00:53:04,520
So, you know, do a live if they 
say the biz, but go ahead of the

885
00:53:04,520 --> 00:53:06,280
hands. 
Come on in. 

886
00:53:06,560 --> 00:53:08,920
Then listen to us like 
subscribe. 

887
00:53:08,920 --> 00:53:10,200
We're building up a YouTube 
channel. 

888
00:53:10,200 --> 00:53:13,000
So I know Jim was very 
interested in making sure that 

889
00:53:13,000 --> 00:53:15,320
the YouTube log out. 
If you didn't know it's going on

890
00:53:15,320 --> 00:53:17,360
to have it, it's ready. 
I was ready. 

891
00:53:17,960 --> 00:53:22,800
So youtube.com slash at IDAC 
Podcast brings you to our 

892
00:53:22,800 --> 00:53:27,600
channel, our website, 
idacpodcast.com or Twitter or X 

893
00:53:27,600 --> 00:53:33,680
whatever, all display them at 
IDAC podcast, Mastodon, IDAC 

894
00:53:33,680 --> 00:53:35,800
podcast at info setup dot 
exchange. 

895
00:53:35,800 --> 00:53:37,600
And yeah, we're on LinkedIn, 
George. 

896
00:53:37,600 --> 00:53:40,000
We'll have your LinkedIn as well
in our showdown so that people 

897
00:53:40,000 --> 00:53:41,760
can reach out. 
Awesome. 

898
00:53:41,760 --> 00:53:46,160
Yeah, either do get grease over 
your your McDonald's items or 

899
00:53:46,160 --> 00:53:49,080
commiserate the unauthorization 
stuff and, and things like that.

900
00:53:49,440 --> 00:53:53,080
So with that, go ahead and leave
it big star watching and or 

901
00:53:53,080 --> 00:53:54,440
listening. 
And we'll talk to Dell on the 

902
00:53:54,440 --> 00:53:59,560
next talk. 
You've been listening to 

903
00:53:59,560 --> 00:54:03,440
Identity at the Center. 
We hope you've enjoyed the show.

904
00:54:03,640 --> 00:54:07,760
Make sure to like, rate and 
review, and we'll be back soon. 

905
00:54:08,000 --> 00:54:10,280
But in the meantime, hit the 
website at 

906
00:54:10,280 --> 00:54:16,640
identity@thecenter.com. 
See you next time on Identity at

907
00:54:16,640 --> 00:54:17,560
the Center.
