The anticipation was high, the bags were packed, and after a brief moment of panic at the airport—keyword: entry authorization—we were finally on our way to Las Vegas for Identiverse. Four days with identity experts from around the world awaited me and Roland Baum from umbrella.associates. And what can I say? More than 70 hours of reflecting on the most relevant topics in identity security was, as every year, absolutely mind-blowing. Thank you, Identiverse 2025! And above all: thank you to Andi Hindle and the conference’s content committee, who do an incredible job.

We already knew going in that Identiverse would once again deliver a wealth of valuable insights. More than 100 identity-related topics covered everything from Non-Human Identity (NHI), wallets for digital driver’s licenses, and the use of AI in combination with identity governance solutions to the latest developments in Customer Identity & Access Management. Of course, topics such as passwordless authentication, passkeys, and secure authentication were also part of the program. Our top five takeaways:

From panel discussions on agentic AI to Diana Kelley’s keynote (Protect AI) on the role of artificial intelligence in the identity space, one thing became clear: the growing role of intelligent systems in access control is a major discussion point. Patrick Parker (ProofID), Gerry Gebel (Strata Identity), and other speakers showed how modern authorization protocols such as AuthZEN and concepts like the “mesh of AI agents” are reshaping the IAM world. This is where the boundaries between technology, trust, and governance begin to blur. And the latest vulnerabilities are showing all too clearly that uncontrolled use of AI, such as in Copilot, can create serious security problems.

Another major focus was the regulatory landscape. Several presentations—including my own session, “Making Sense of CRA, DORA and NIS2 in the Identity Space”—made it clear that legal requirements such as NIS2 and the Cyber Resilience Act have concrete implications for companies and their security architectures. Identity experts discussed how organizations can meet these obligations in a structured way without slowing down innovation.

At umbrella.associates, we have been working with Fine-Grained Authorization (FGA) for several years now. Because identity is no longer just about a simple yes-or-no decision at login. The focus has shifted to differentiated, scalable access control in dynamic system landscapes. The AuthZEN working group and the broader discussions around fine-grained access control made that very clear: the central question is now “Who is allowed to do what, when, and for how long?” After the “quiet revolution” in authentication driven by passkeys and similar technologies, authorization, too, can now be modernized and made future-proof.

Formats like Jesse Minor’s “Yes or BS” panel showed that identity management does not have to be a dry subject. The same was true of gamification approaches and stylish presentations—such as John Pritchard’s (Radiant Logic) session on gaming, bots, and identities. Especially compelling was the keynote by Alexander Weinert (now CPO at Semperis, formerly VP Director of Identity Security at Microsoft), who used a highly personal presentation not only to reflect on 15 years of Microsoft Security in just 30 minutes, but also to make room for the people behind the work and their well-being. Once again, a wonderfully diverse group of speakers proved that it is possible to present complex topics in a way that is both entertaining and substantial.

The trend is already visible among citizens using digital government services or wanting to use government-backed digital identities across borders: wallets and digital IDs are becoming indispensable in public administration as well. Whether it is the European eIDAS regulation or new digital driver’s licenses in some U.S. states, IAM solutions are playing a strategic role far beyond the boundaries of individual companies. Public-sector actors are also increasingly relying on standardized, interoperable systems. The industry’s support is urgently needed to turn these future-facing ideas into reality—something reflected in the heated debates among European stakeholders around whether government-funded wallets in Germany make sense. Another thank you here to Katrina Yasuda, who is driving this topic forward at Germany’s SPRIN-D agency for breakthrough innovation.

In addition to the talks, workshops, and informal exchanges with the community, we did not miss the chance to play a small part in a pre-event gathering ourselves. A few years ago, we helped establish the IdentiBeer community meetup—originally launched by Espen Bago—at the BrewDog craft beer bar as a gathering of the IDPro community. This year, thanks to strong support from Espen Bago himself and many other IdentiBeer meetup hosts, more than 80 participants filled the tables.

We also brought along our latest IdentiBeer and AuthoriBeer editions, which, as always, quickly found happy recipients. Whenever Roland and I ran into one of the big names in the industry, we handed out a specially signed beer, took a photo, and had lively conversations about both beer and identity topics. For us, those personal exchanges are just as valuable as listening to conference sessions.

We will be drawing on this positive experience until the next Identiverse. The good news: the date is already set, and the motto has been finalized. From June 15 to 18, 2026, the conversation will revolve around “Agile Innovation. Identity in the Changing Digital Landscape.” See you back in Vegas, baby!