This is identity at the center. If it has anything to do with I
AM, this is the go to podcast now your hosts Jim McDonald and
Jeff Steadman. Welcome to the Identity at the
Center podcast. I'm Jeff and that's Jim.
Hey, Jim. Hey, Jeff, how are you?
Oh, not so bad yourself. Doing pretty good, man.
I feel like I've been the road warrior.
I really haven't traveled between June and about a week
ago, but now it's two weeks in a row, about to be 3 weeks in a
row. We're doing Authenticate
conference on Monday. I'm sitting here in a hotel,
airport or airport Hotel in Calgary, Canada.
Had a great week here. It's a beautiful country,
beautiful people. Everyone's been like.
So friendly, which I mean, I don't even want to say that in
the United States people are just friendly that would that's
not. Canadians are famous for their
friendliness, I think. I think that's kind of a known
thing. It's definitely.
It's definitely how I felt since I've been here.
That's that's got some truth to it.
But yeah, living out of the suitcases is not all glamour.
Three whole weeks. That's rookie numbers, baby.
I'm on like. Week 7 about to be 8 and going
on to like 12. Yeah, So what I'm doing is
though contiguous weeks like including the weekend.
So I left on the 1st, I'll get home on the 19th And what I
think is here's the way I was looking at it, like I finish up.
So I was here in Canada working on a workshop.
It ended yesterday and. So I had the choice to, you
know, fly out tomorrow morning, go back to Atlanta and then have
to go out to San Diego on Sunday.
So basically have just like one full day at home or just go to
San Diego early and get there, go to the pool and hopefully
they've got like a tiki bar that makes pina coladas that you know
will keep me happy. I think he chose wisely.
I I had to come home because I literally had to just restock my
entire suitcase. I've been gone all week as well,
Sunday through Friday. So today is October 13th.
It's 11:00 PM Eastern Time. This is how you and I roll
trying to get something out for next Monday, which would be
what, the 14th, 15th, 16th first day of authenticate.
This, this show is actually going to compete with us because
we'll be in the probably in the middle of a keynote doing a live
show at Authenticate. But I had to come home.
I needed a day to, like, reload my suitcase for yet another full
week of travel. See my dogs.
My wife's out of time. She's traveling.
So, like, coordinating, she drove to the airport, left my
car there. I got home a couple hours ago,
picked up the car, went home and then I'm going to come back
early Sunday morning. Drop my car off there and then
she's gonna pick up the car on Monday on the way back.
So we're doing this. Whole shuffle game when you get
home The dogs who bonkers right? Two of them did.
The third one acknowledged my existence.
Definitely my wife's dog, our newest puppy.
He was happy. I let him out of his crate and
then it was like, immediately gashed around the house looking
to see where mom was, and I was very disappointed that it was
just me. But the other two were happy to
see me. Yeah, I know.
I mean, like if if your dogs aren't happy to see you after
you've been gone for a week, then you're not a good person.
That's true. Dogs are the best people.
I'm a big dog fan. I think people who have dogs
know it and get it. It's like they're always happy
to see you when you come home. Yeah, no, I mean, I love dogs.
And the only reason I don't have a dog is because, I mean, I
travel not nearly as much as you, Jeff, but don't have
anybody at home who I could, you know?
Count on taking care of a dog and cleaning up after the dog
and feeding the dog. So yeah, I mean, checking a dog
into a kennel every week is not not very fair.
Yeah, that's not cool. Yeah, we don't do that either.
So I get it. I totally get it.
So I've been busy. I mean, you know, not this week,
but last week was the Octane conference in San Francisco.
How was? Well, well, first let me just
comment San Francisco. I love San Francisco.
I've been the biggest San Francisco fan for a long time.
And, you know, I think that there's been some things over
the years that, you know, have kind of put certain parts of it
in decline. Let's talk about the Moscone
Center. And they've really done a lot
to, you know, kind of have a police presence.
So for me anyway, I felt very safe, you know, walking around
that area and walking from the hotel and to the center, so.
Drastic improvement, I think, even from last year.
But the the most remarkable thing was it was 90 degrees in
the city of San Francisco in October.
I don't think I've ever been in San Francisco and it was 90
degrees before. And I've.
Been there a lot of times. Especially for being on the Bay,
it's generally a little bit cooler compared to the rest,
which is why I like it so much. Yeah, they have those
microclimates out there. But so like in the East Bay,
Oakland, it could be 9095 degrees and the downtown San
Francisco could be 55 degrees. Or on the Bay could be like, you
know, freezing and windy. It was not windy and it was
definitely not cold. And so I was expecting to have
to. Wear a jacket.
But you know, as I was walking around the jacket, I was like
breaking in a sweat. Yeah, that's that's not my gym.
I'm glad I was in DC that week. It was hot there.
But I don't know, I was inside pretty much the entire time at a
Convention Center doing stuff like that.
So you were at Octane. I was at Identity Week America.
Sounds like we both had a good time.
I know I had a good time. We recorded a couple episodes,
actually recorded three episodes while I was out there.
I just had time. I mean, you know, First off,
like the energy level at Octane was off the charts.
And so I had an opportunity to sit with a lot of folks and
record, you know, interviews. I'm going to get this uploaded.
You're going to piece them all together into some kind of I'm?
Going to try to, I'm curious to see what you actually did.
You sent me a text with someone with kind of one of the
interviews and say, all right, this is not actually too bad, so
we'll see what the final product turns out.
My expectation is that was the worst of of the bunch because
it's kind of figuring out more as I was going along so.
I heard you got Daniel on camera too.
I did get Daniel. We've been trying to get Daniel
on the show. He's he's our boss and he's been
elusive. He did a really good job.
Yeah, he's great. I.
You know, the one thing that he did was so I had these lavalier
microphones and he. You know, it's like he was
leaving to go to the airport and he like, he had my lavalier mic
on and I didn't realize it until like 2-3 minutes later and I got
my next guest coming in a few minutes.
I'm like, Oh my God. And I'm like texting him.
He's not answering that. I try and call him because the
voicemail I'm like, what am I going to do?
I'm like basically going to have to take my my one room meeting
lavalier mic and pass it back and forth.
Fortunately, they call me back and.
Brought back the the microphone. So it all worked out.
But you know the conference was super high energy.
You know one of the they had a few big announcements, the
biggest announcement was kind of like all around bringing a I
into the product and how it's going to manifest.
And so one of those was what they're calling ITP, Identity
Threat Protection, and essentially it's, you know,
using the A I lever to a I. Leveraging the a I technology to
you know work with this big data that they're collecting to you
know recognize patterns. So applying a model to recognize
patterns, that would be something that would say you
want to then trigger an action like disable that account.
Then they've got some other features that rolling out which
sound less impressive, but when it all plugs together it makes
sense. Like big enough some route
single log out. Which I think is a little bit
proprietary. But if you think about it, it's
like if you realize like oh, Jeff's account has been
compromised, maybe someone saw his session cookie and is now,
you know, log in and trying to do bad things this time maybe he
clicked on the phishing e-mail, etcetera.
We can not only disable his account, but close all the
sessions that are open in other applications.
And that's a really big deal because.
You know, I mean, even a client that I'm currently working with,
I found out that, you know, they leave really long session
timeouts. And that's one of the the
biggest forms of, you know, hijacking A person's, you know,
they're all sitting in their credential, but they get these
session cookies, they can bypass MFA and get logged in as that
person. So if that session isn't timed
out now if you're giving. 30 days, 60 days, 180 days for that
session to live. I think that's the maximum in in
Octa anyway. But think about that, someone
could take that session, that cookie could be that old, they
could use it to get in. So overall, like really, like
that was something I think every one of the folk, every one of
the people there was like really excited about.
Because when you think about the current capabilities within the
tool, it's kind of a black box. And you don't know what it's
doing. This is looks like it's going to
be much more exposed to the people have some levers and can
kind of see how it's making the decisions or what decisions are
being made. Yeah, I think you need to be
able to tune it somehow. Authentication is kind of a very
tricky thing, I think, especially when you're trying to
fingerprint essentially what is a valid authentication session
versus not valid considering the number of devices and.
Locations and times of days and things like that.
So it'll be interesting. I feel a little bit vindicated
that you said AI at Octa because there was definitely a theme at
sale point Navigate this week, AI being injected into the sale
point product as well. I feel like I called this a
couple months back. I'm sure they were working on it
before that, but I'm gonna take credit anyway.
AI seems to be AI. I'm taking credit for all AI,
good or bad, bring it on. No, I just think that you know
it's a natural evolution, right of the identity products and
large language models are sort of the AI Dujuur and they're
graduating from historically AI being machine machine learning
or pattern matching and things like that to now you can
actually talk in quotation marks right type to the AI to ask
specific questions, generate reports.
Help with configurations of applications, things like that.
Microsoft is certainly getting the game with things like
Copilot, but AI was a big focus as well at the sale point
Navigate conference, which is where I was all week.
I think a conference, a vendor specific conference where they
didn't talk about AI and their product would be a major miss at
this point. Yeah.
It's like 0 trust of the last couple of years.
If your product didn't have zero trust in it, you're pretty much
done for. Yeah, now it's and now
everything's a I. So I wonder if this was the same
thing at South Point, but at at Octa, they kind of laid out
their road map both on the the customer cloud as well as the
Workforce cloud. There's a lot of new
functionality that they're promising.
I mean really on the, on the workforce side, it's like that
converged identity. So it's access management which
they're already kind of like top dog.
There's IGA privilege access management, cloud infrastructure
inside of management. It's like the way I see it like
for them to be successful in that they have two choices.
One is to go out and buy somebody for each one of those
things. The other is spend a lot of
money on R&D. But the last thing, the the
thing that I want to make sure that like hopefully they don't
do is they just talk about these things that roll out like.
Not a very good version of it because I think that would kind
of stain them the brand because I mean you know you have to, if
you're going to say we're going to have something, you got to
have it. Yeah, I think that that
convergence is another word that came up as well.
Now we're starting to see the rise of platforms.
You know, Octa's creating one sale point definitely is
creating one. This this idea of converged
identity or? You know, whatever you want to
call it, unified identity platforms, things like that.
Kind of brings me back to the old days of Oracle and IBM and
CA where that was platforms. Then it became best to breed.
And then guess what? We're back to bell bottoms
again. You know, I hit back to bell
bottoms, yet, you know, I don't think those things like Oracle
CA are deserving of the term platform.
I think they're sweets. They're just a bunch of products
that they put under the umbrella.
And I hope that's not what Octa Cell Point and all these others
do. I hope they build a platform.
To me, a platform is something that has some open like an
openness factor to it, so that entrepreneurs can go out and
build addons to that platform. And so they create almost like a
an opportunity like a business model like build your business
around our platform, make sales forces on that I think some.
Social media platforms have done that, so.
Service now. What's that?
Service now is another one. Service now is exactly, exactly
to me that's a platform and I think just saying like oh, you
know, we're going to be a closed platform, I think that almost
disqualifies you from the term platform.
Well, good news. Sale point is not going to be a
closed platform, at least not in the future.
They did mention sometime in the next couple years allowing.
People to develop like basically like plugins.
It's almost like they're creating the browser and they're
gonna have some sort of browser plugin architecture that lets
you do different things with the data that's in there.
Very API heavy meaning which is a good thing.
I think you can do a lot with the APIs that are out there.
So it'll be interesting to see kind of what happens with the
sale point platform, cuz that's to me where they're headed and
what they were kind of talking about all week.
Yeah, I think that. You know, again I GA is like a
great starting point to build an identity platform from because I
really think that I GA all the kind of like core identity
technologies truly has its arms around identity or it's the
closest thing I think when you look at your authentication
system. They're calling it like, oh,
it's an identity. It's identity as a service, but
I think it's almost like accounts as a service.
Like those are accounts. Like you can have multiple
accounts for signing on, but you still just have one identity.
Well, I think I GA is the hardest thing to do in Identity
to do it well. I mean, like, I think that's the
one that has the most complexity involved with it and there
aren't really standards if you think about it from an IGA
perspective. Yes, there's like common things
like onboarding and offboarding and access reviews and access
requests, but other than Skim, there really isn't like a
standard to do any of that stuff on the authentication side.
You got Oauth, you got Sam O, you got Open ID Connect, right,
stuff like that. And it's very it's a very
specific path. You file Okay, I need to
authenticate and then once I authenticate then I can get to
this thing with an authorization.
I GA throws in a whole bunch of complexities in there,
especially from a business rules perspective.
So I feel like if I were to build an identity product, I
would start with IGA, lock that down, and then try to expand
from there. Problem with that approach ends
up being, well, everybody's already solved the
authentication problem. So now, yeah, is it easier to
get in from a sales perspective if I'm trying to sell this
product, if everyone's already using a different authentication
platform and trying to migrate people off of that?
I don't have the answer. But it used to be interesting to
see how octo and sale point have gone different directions with
it, or approach to say from different directions.
How did you used to think of Active Directory not talking
Azure Active Directory? Did you think of it as Identity
system or as like I had one coworker in the past who used to
call it. He's like it's just a network
operating system and we saw that's a bit more than just a
network operating system. It's also an authentication
system, but they don't think those are.
It's an identity system, yeah. And I kind of look at Azure AD
and I'm like, OK, so a lot of similarity from that
perspective. It's, is it really tracking the
identity? But now there's the, you know,
they're starting to expand into or you're pulling it from the HR
system. But are they correlating all the
accounts to that identity? Because ultimately it's like.
Right. When Jeff separates from the
organization or he shutting off all the accounts that he has
access to, that's really what it comes down to.
I used to, I mean, for me a D and the role that I've had when
I've been around AD. Closest was it was
authentication and authorization.
That was pretty much it. Yes, backbone for other things
within Windows Server. But for me as an identity
person, it's authentication and it's authorization.
I think that I feel the same way.
I think that tactically speaking, though, the folks who
run a D in organizations have wound up becoming so central to
how identity is handled within the organization, said.
This is the tool that I know I love and it's our identity
system and we're going to plug. Azure AD on top of it, which I
guess is not even the the current term for it and and
that's what we do for identity. But we don't need an IGA.
We don't need any external third party systems.
We don't need. I don't know if.
Access Management because Azure gives us from which Access
management. Well, I to to some degree, I
think it's, you know if we start talking about now we're back to
platforms, right? Microsoft has their own platform
too, and. It's good at Microsoft things,
but once you get outside of Microsoft things, it's not so
great with the exception of authentication.
They've definitely embraced standards like Oauth and Open ID
Connect and so forth right to do authentication, but I'm not
going to do ASAP Access review with Microsoft Ventra.
That would be crazy. But they're so good at
marketing, it sounds like almost like you could and you should.
That's interesting, you bring up that.
SAP Access reviews, because I was working with the client this
week to develop an IGA strategy and so of course they are in the
throes of deploying SAP for HR and for their ERP.
That should be a Big Bang. And you know, fortunately, from
my perspective, you know. Their IGA roadmap really won't,
or their IGA platform won't go in until after that ERP is in
place and should have time to be settled.
But as always, you're kind of faced with the question of Okay,
do we need to do GRC? And then the question is can GRC
or SAP Identity Manager do everything?
And that could be our IGA or reverse it, can we have some IGA
and manage all the the rules and everything down to the
entitlement level and do access reviews and access provisioning
from the I, J to SAPI mean there's the philosophically, can
it be done is one question. But I think more importantly,
it's like, do you want to do that?
And I feel like, you know, for that latter 1 answers, heck no.
I also think it's techno for do you want to take the SAP piece
to try and make that your enterprise IGA?
Just my experience with seeing this one, I'm a little dated.
I know some of the tools have come a little bit further, but
you know, there's no way that they have caught up with some of
the major IGA platforms out there.
Yeah, SAP still gives me nightmares.
I used to have to manage that from an identity perspective.
Not a fan, but yeah. We've run into this question a
lot with us As for whatever reason, between SAP and between
every other IGA platform. If an organization has SAP, they
probably have SAP GRC and it's really good at that specific
task. And it gets less good the
further you go away from that task, do some basic things, you
know, Windows, Active Directory, that's kind of a No brainer.
Everybody can do. Active Directory, that's not.
Hard. But is the interface up to
snuff? You know, does they have all the
business rules and logic that you want to be able to configure
in it versus customization? And I feel like This is why IGA
is so hard is because it's hard to have A1 size fits all
especially when you start dealing with apps like SAP or
Dynamics or Oracle or any other you know large ERP type type
implementation. I've been, I've been in IT for
like roughly 25 years and when I've seen failures happen in IT,
it's been ERP deployments, it's been I M deployments and maybe
CRM but CRM is, is mostly they didn't do a good job with the
data. So put that up to the side
you're talking about ERP and I M like that's where the big
failures happen. Here's my feeling for my advice
for I am practitioners out there.
If an ERP platform is being replaced or being launched, like
don't set yourself up to be. The reason that it fails is
this. Projects are pretty damn
expensive. The reason I am projects usually
fail is the same thing. They get tied into too many
business critical applications and then for whatever reason
they don't operate in those business critical applications.
Can't do their job because of your I M system.
Don't let that happen. Don't be that person.
Yeah, don't be that guy. Don't be that guy.
So we got another conference we're going to in a couple days
authenticate. I feel like this is everybody
decided. Apparently October was
conference month. Between Octane Identity Week
America sale point Navigate I think I'm sure there was
probably a Gartner thing that took place and now you and I are
headed to. Sanford.
No. San Diego?
I don't know where I'm going to Carlsbad.
Just north of the city of San Diego to do a few things that
authenticate, we're going to do a keynote live show, which I'm a
little nervous about. We haven't done anything like
that before. Here's one thing I was thinking,
yeah, yeah. So I had a reflection on this
today. I'm like, I don't know that
we've ever had that many people listen to one of our podcasts at
one time is, you know, there could be 500 people in the room
different. Times, Yeah, just as many
people, Yeah. Other people listen at different
times. So I think we're gonna set a new
record on Monday. Yeah, I think it'll turn out
well. I'm kind of, I'm nervously
excited for it. The idea is that we're going to
do a live show on stage. It's gonna be very similar to
this format you and I are gonna. They're going to play our, you
know, our intro, you know, Jingle and you and I are going
to come up on the stage. We're going to sit down.
It's supposed to look like we're recording something.
I'm not sure how that's going to look, but we'll do it live.
You and I are going to have our normal sort of upfront banter.
It was specifically requested that we do banter.
So we'll have some of that, yeah.
And then we'll introduce our guests.
We're obviously we're going to talk about Vito authentication,
pass keys, things like that. We've got a few people that have
been scheduled and maybe a surprise guest we'll see.
But we'll have product managers basically from TikTok, Google
and eBay that are going to come up and sort of join the show as
sort of like a group interview life, you know, live show.
And we'll you know run through our normal kind of questions and
things like that. And we are going to, I'm even
thinking like what are we going to do for a lighter note.
So I've got some good ideas on how we're going to end the show
with, you know, shenanigans and high jinks and just.
Fun stuff that I like to do at the end.
Yeah. Yeah.
No, I I mean, that's what makes it fun for people.
Like we always want the podcast to be educational and
entertaining. So you know, that's usually the
entertaining part. But we're also at the conference
going to be recording some individual podcasts that will
drop over the next two weeks, I think.
So day one, we're recording for the second time with David Mahdi
from Transmit Security. Like the the Cheeto Chief
Identity Officer. And so he's going to be talking
to us about his. Everybody's talking about their
what they're presenting, but then of course we'll go off on
all the side trails to make it even.
Us No, we never. We would never do that.
What? Me complain.
So yeah, David will be talking about machine identities, which
I think is a huge topic. Well, Stephanie Shucker on.
So Stephanie was presented to us as the premier biometrics expert
in the world. And we talked to her for, what
was it, 1/2 hour, Jeff? And I'm like, yeah, I can see
that. I don't know all the biometrics
experts in the world, but she probably gets, you know, gets
that award. Best biometric person on the
best identity podcast in the world?
Bam. Take that.
We have Pam Dingle on. I mean, everybody knows who Pam
is, Microsoft, yeah, I think there's so much that we can talk
about that we have to make sure that we get to the the, the top
issues and and primarily we want to give her some time to talk
about like what she's presenting on because it's a talk of mine
for her. We're going to have Pedro
Martinez on from Taos Group. Pedro's there talking about pass
keys in financial services, but I think he's going to talk more
broadly than just financial services.
And so we'll get that perspective because I think he's
the only person we're talking to specifically about Peskys.
And I think you know at this point that's the that's the
major theme for Fido Alliance. I don't know.
Who knows? Maybe it'll be a I, I'm sure.
I'll find a way to weave that into our keynote.
Is is something about a I? Yeah.
And we have Ori Eisen from Trucen and he's talking pastor
list, so excited about that conversation as well.
The password list for me is like, you know that was like
last year's buzz. I feel like we've made some
progress. I was thinking this past year
was going to be the year of password list.
I don't know that I can say that that's what it was.
They will look back on it and we will say that.
I think that's a big thing I want to say about thinking what
are the customers success stories that tied back to pass
through list. There were some good ones last
year. Let's see.
Our feet is becoming even more mainstream.
Well, I think it has to start somewhere.
The technology is there now and we've got basic interoperability
between devices and platforms and Os's, right.
I think, I think this last year will be the beginning of that
wave that we that we thought would be coming sooner.
But hey, better late than never. I'm excited to see it.
I'm excited to see more passkeys options popping up when I'm
signing into things. Google, actually, I think it was
this week. Earlier this week, they
announced passkeys by default for every user now.
I mean, that's a big step. Fantastic.
Yeah. Okay, it's 11:30 PM.
Not here. It's only 9. 30, yeah, right.
It'll be interesting to see what happens next week.
I'm kind of bummed I'm going to be there a couple days.
I have to, like, take a super early flight Wednesday morning
to get to Indianapolis. So while you're still sunning
yourself in California, I'm headed to Indianapolis for
another conference, a government focused thing in Indiana.
So that'll be fun, I guess. I'll see my friend Andrew.
So that's good. We'll have a good time, I'm sure
the two of us talking government and identity and things like
that. So leaving early Wednesday
morning, does that mean you're not going to take any of the
social hour activities tonight I think?
My flight's at like 6:00 AM or something like that on on
Wednesday. So I'm going to be like in
recording and then basically like pack up my stuff, go to
sleep and be out of, be out of there.
I'll drink all of your awful then.
Oh, thank you for making that sacrifice.
Yeah, appreciate that. You want to end on a later note?
Yeah, let's do that. You had you had an idea when we
talked about it and I haven't follow up if if we have time and
we and we think about it again what was yours okay.
So mine was what is the best? And I'm just freeing this on
you. It was the best and worst
airports you've been to. Okay.
Well the best one that I've been to would probably be Canada
Airport in Japan and now it's only it's been probably like 10
years since I was there. Maybe 7 but.
Just a super nice airport, super clean, very impressive.
Kind of walking in and having like these just high
architecture ceilings and trees and the infamous Hello Kitty
store that I felt had to sleep on a bench on outside because
thanks to United, I missed my connecting flight into the
Philippines. So.
But even still I think that was probably the nicest airport that
I've been at. Worst airport.
It's kind of hard to. That's kind of to say because
every airport can totally suck if you, like, have a bad
experience in it. I'm not sure how to answer that
because I feel like it could be any airport.
So let me remind you of 1. So we were in Connecticut.
I think it was Sanford, Connecticut.
And it was like a bus station. And it was like there was like
nowhere to sit, no alos to plug into.
That one was pretty bad. Yeah, I think La Guardia in New
York is really bad. Oh, it used to be bad, but it's
actually nice now. At least the United, Yeah, it's
really nice. I mean, it's a great turnaround.
I mean, it's kind of what you want to see.
But I remember being in La Guardia once and I was sitting
in one of the terminals and there was like A to call it a
week would not be fair. Two weeks this was like just an
open water faucet coming through the ceiling into the middle of
the concourse. And I was like, yeah, everything
I'd heard about La Guardia was instantly true.
I saw that. But they have turned it around.
They've got new construction there.
It's actually quite nice. Now I think one of those things
is really annoying. It's funny to go from like 1
terminal to next shift to get on the bus.
And it's like it feels like you're driving for like 10
minutes to get to the terminal that's probably, you know, 100
yards away. Chicago's like that right now.
O'Hare because first of all they had like the train, the people
mover, the tram monorail type thing was down for like 4 years
and then now that's the only way can get between some of the
different, some of the terminals because they're doing
construction everywhere. Yeah, O'Hare is, is a real pain
right now trying to move between terminals.
It's just not fun. Yeah.
So I'm going to surprise them my answer, but my favorite airport
is Detroit. That is a nice airport.
It's not nice airport. Minneapolis isn't too bad like
that. That shopping mall that they
have in the middle is pretty nice.
But I mean, getting from one end to the other is a real pain in
the neck. So I'm not a big Minneapolis
airport fan. I'm also not a Charlotte airport
fan. I think people think, oh, so
quaint. The middle area's got these
rocking chairs and stuff but if you get dropped and like E and
you've got to get to the other end of C or something like it
could be like 1/2 hour walk. It's it's not what it's not good
when you have a tight connection because then you start running
and then you get to to the gate and like your plane's already
taken off. So yeah, I'm not a big Charlotte
fan. I'm going to go with Detroit as
best. I also have to give honorable
mention to you know, and I haven't done a ton of
international travel, but the airport in Amsterdam, I think
it's called skiffle skiffle. I don't know.
Never been that is I I don't like it and I don't know if like
all the European airports are like this, but it's like there's
like a waiting room concept for each game.
You go through the security or they check your ticket and check
your passport and then you go and you like sit there away from
the board, the plane. So like the the common area is
almost like, I think it's almost like public.
It's been a really long while since I've been there, but I
hated that airport. Like I said, any airport can be
bad if you think about it hard enough, or if you have a
disastrous event in an airport. I thought of something as a
followup, lighter note, and I'm going to this is a challenge
that I'm pretty sure I'm going to win.
What's the best thing, best meal that you had this week?
It's pretty good ones, man. We had sushi last night that was
pretty out of this world, very expensive.
Fortunately, it's out of my out of my expense report.
So I had I went out to dinner with our good friend Daniel.
We went to a chef's tasting. That's always, yeah.
When Daniel's ordering me, you're going to get the best of
the best. Well, we went to a place just
like he and I and we had a chef's tasting.
And let me let me just read the menu to you because this is what
we had in one sitting and different courses.
First course was corn, carrot and radish, sort of a tasting
menu type thing. Corn with pine nut, carrot with
hay. It's kind of interesting radish
with rose. Then we followed that up with.
Oyster in a preserved mustard surf clam and a fermented black
bean. Hamachi and black vinegar
Jellyfish with Thai basil and a smoked trout row with seaweed.
Hamachi is what eel. I don't want to know because I
stepped way out of my comfort zone for this dinner.
This is sushi soup. Yeah, I mean, I've, I I.
I had oyster, I had surf clam, I had Machi, jellyfish, trout.
I mean, these are things that I would like jellyfish.
Yeah, jellyfish with Thai basil. I've never eaten jellyfish.
Wine. I don't remember.
There was also wine. Then we had crab with saffron
and ginkgo. That's when things started to
take a turn for the better, because I'm not really of the
sea. We then went to a rabbit soup
dumpling with blueberry vinegar, an antelope tartar with apple,
and then a chicken wing that was stuffed with Cordyceps.
Not a mushrooms person, but I could.
That was actually not bad, a black truffle consomme with
pecan tofu and then capped off on the savory side with a spiced
goat leg with scallion and sesame.
For dessert they had. It was like a basil.
Ice cream type thing with melon and I think it was cantaloupe
but I'm not exactly sure. And then a sweet potato cereal
with toasted milk. That sounds really great.
Yeah, Daniel's like, amazing. He's like you stepped out of
your country, was like, no, no, no.
I leaped out of my comfort zone with that milk, I was going to
say. That was even close.
Did you leave there and go and get like McDonald's or anything?
No, I that was it. That's all I had.
In fact that's I don't think I actually ate anything the rest
for that day. So that was kind of like
everything on once. Because I was, I should have
told you as the answer to your question.
Like I had the chicken sandwich at Popeyes today.
Hey, that's good too. Hey, teach their own.
Is that good? I'll do Taco Bell.
I'm not fancy. I don't.
I don't discriminate. I'll eat anything for the most
part. Any fast food, I should say, but
this was definitely a meal that was like.
Way outside my comfort zone. So I'm kind of glad I tried it.
Jellyfish. I mean that's that's that's
serious stuff right there. Hey, it started off a little bit
rough, cuz I was it was that oyster with mustard shooter.
Two things I don't really like. I tried it and I like, coughed
right away and Deanna just starts laughing at me that that
was really the first course type thing that came out, you know, I
was like, oh, it's gonna be the antelope.
Right. Yeah, exactly.
But it was good. The best part, The meal, though,
wasn't the food. It was all the food was actually
really good. This place called Apt 115 in
Austin, a little bit off of downtown, not too far away, but
it was, it was kind of cool. Spot was the chef who kind of
prepared. Everything would come out, and
he provided facts about what he was giving you in a very short,
I would say an unfriendly way, just like here's this.
Take it one bite. Enjoy and then you just walk
away. And we were having a good time
with that and our server was super, you know, friendly and
knowledgeable and everyone there was was actually pretty great.
But we were getting a cake out of like the chef coming over and
just not being Mr. Personality. I've heard when you have like a
sushi chef like they put the amount of soy sauce on it that
you're supposed to have. So if you like you used to go
into a sushi place and like dipping your, you know the soy.
Like that's not how you do it. It's like the three Michelin
star sushi places. Yeah, taste your food before you
decide to add more seasoning. I think that's a very American
thing. Is like, oh, you get the food
and then it's like you just throwing salt and ketchup on it
without you haven't tried it yet.
That's a cardinal rule of eating.
You should not be doing that. Taste the Food First, then if
you need to add things to it, do it.
It's. The cardinal rule.
But it's like I already know I want ketchup on my French rice.
Yes, but as a side. I'm I'm.
I'm more like thinking of like throwing ketchup on your steak,
right? Or things like that or adding
salt before you've even tried it.
I mean, that's that's bad for your steak.
Oh my goodness. Yeah, Who would do that?
Only lunatics would. All right, let's go ahead and
wrap it up before I turn into a pumpkin.
So yeah, this is going to go out Monday in a couple days.
We're sort of competing with our keynote.
But hey, that is kind of cool for people who aren't watching
our keynote. Maybe they're listening to this.
And we're told we'll get a recording of the keynote, so
we'll be able to publish that. Our plan is to publish that as
like the capstone of all the recordings we do next week.
So look forward to that. And if we don't get that
recording, I'm going to be kind of ticked off.
Yeah, I have faith and confidence.
I think. I think we'll get that.
I just don't know when I'm going to have time to pull it all
together. Because I'm going to be
traveling so much over there again the next few weeks, so
probably be an interesting release schedule.
But here we are almost midnight, just trying to get something out
for Monday to keep the streak alive and we we're going to do
it. I definitely get be able to get
this edited out in time and then we'll figure out the
Authenticate release schedule from there.
Oh, and by the way, I listened to the episode with you, Eve,
and Hutch. I thought, that's one that
everybody should listen to. That was hilarious.
Got into the DND conversation. She got into the the alarm
thing. And I'm telling you, like San
Francisco was like, I was the only one who knew this thing was
going to happen. No one seemed to care.
That was a fun conversation. I don't know.
I just have a good time. Every time Ian's on, he's great.
First time I'll be able to meet Hutch, he was great too.
That was just, you know, just. Three dudes sitting in a
backroom talking pretty much. I'm telling you, man, Ian could
be like a stand up comedian. He's a funny.
He's got a quick wit. Yeah, that's why he's who he is.
He's doing these keynotes and all kinds of stuff.
That's true. All right, let's wrap it up.
You can find us on the web, idacpodcast.com, on Twitter or X
or whatever we call it, IDAC Podcasts.
Nastodon at IDAC podcasts at infosec dot exchange.
We have our new LinkedIn page that I have yet to really
promote, but I'm been subtly like tagging it and all of the
recent LinkedIn posts whenever I post something, you know, new
episode or whatever it is. And we've got some followers
there, so subscribe, like share with friends.
For the folks who came up to me at Navigate, people like
Patrick, Edvin, Matthew, there were a couple guys from Sweden
and I met. I think one of them's name is
Marcus. I can't remember, sorry, but the
people who came up and introduced themselves was very
cool. I handed out some stickers, so
you'll be happy to know that there are more stickers in the
wild. Thumbs up from Jim.
But yeah, that's why we do this is just to have conversations
about identity like we do here and hopefully share with the
world. Anything else, Jim?
No, man. Sleep time.
Yeah, sleep time. And then just in time for my dog
to start chewing his little Nyla bone thing here.
So we'll wrap it up. Thanks everyone for listening
and we'll talk with y'all in the next one.
You've been listening to Identity at the Center.
We hope you've enjoyed the show. Make sure to like, rate and
review, and we'll be back soon. But in the meantime, hit the
website at identity@thecenter.com and find
us on Twitter at IBAC Podcast. See you next time on identity at
the center.