#431 - Tectonic Shifts in Identity Security with Martin Kuppinger
Source: YouTube · Identity at the Center · published Jun 29, 2026 · 1:00:57
Martin Kuppert from KuppingerCole discusses how agentic AI is creating a fundamentally new identity and security challenge that requires decentralized approaches rather than traditional centralized identity concepts 5:03.
Key Takeaways:
• Agentic AI is nondirected and nondeterministic—agents trigger other agents in unpredictable chains, making traditional "who accesses what" models obsolete 6:56.
• Decentralized identity concepts like verifiable credentials can help deliver the many signals (potentially 50-100+) needed for authorization in agent meshes 39:15.
• Discovery is the logical starting point for organizations—you can't govern or protect what you don't know exists across platforms, endpoints, and networks 16:26.
• "Non-human identity" is imprecise; Kuppert proposes distinguishing between "autonomous identities" (humans and agents) and "dependent identities" (workloads, IoT) 22:20.
• Two major concerns: oversimplifying AI security challenges with tactical band-aids, and the continued weakness in securing operational technology and critical infrastructure 48:48.
The industry must act tactically now while building strategic, comprehensive solutions for this "intellectually most fascinating challenge" in 35+ years of identity security 6:26.
Sources:
- 5:03 Tectonic shifts AI brings to identity and security
- 6:56 Nondirected, nondeterministic nature of agent chains
- 16:26 Discovery as the starting point for AI governance
- 22:20 Autonomous vs. dependent identity terminology proposal
- 39:15 Using verifiable credentials for multi-signal authorization
- 48:48 Concerns about oversimplification and OT security weakness
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[music] This is Identity at the Center. [music] >> Welcome to the Identity at the Center podcast. I'm Jeff and that's Jim. >> Hey Jim. >> Hey Jeff. How are you? >> Not so bad. Yourselves >> doing great. Hey, we're here at EIC 2026. We've got the guest that we've all been waiting for. The man who requires no introduction, but it's >> Give him one anyway. >> It's a podcast, right? Yes, it is. Uh, yes. So, we're at EIC in Berlin. This is our second year here. Another amazing conference. Um, we've done a couple episodes like this. Uh, this is, I think, the last episode that we'll release as part of our journey here and some of the conversations. But yeah, let's welcome our guest, Mr. Martin Kubrer from Kooper Cole. Uh, let's see. Founder and distinguished analyst. Hopefully, I'm getting that c…