THE CONFERENCE AGENDA
Washington DC, 2 - 3 September 2026
Schedule
Create your personal agenda –check the favourite icon
Chair's opening remarks
Keynote: The unseen shield: Professionalizing America's identity workforce for national security
This keynote address argues that a professionalized identity workforce is a critical and urgent necessity for U.S. national security. The speaker highlights that while identity is the foundation for countering every major threat—from border security and cyberattacks to insider threats and fraud—the thousands of government professionals performing this work lack unified standards, formal training, and a defined career path.
The address warns that without a formalized and interoperable identity workforce; the nation remains vulnerable to adversaries who exploit identity vulnerabilities with increasing sophistication. The proposed solution is to establish a professionalized corps of identity experts, modeled after cyber and intelligence career fields. This would involve creating a clear competency framework, a training and certification pipeline, and formal career tracks. The result would be a more resilient nation, capable of faster threat attribution, stronger fraud prevention, and enhanced public trust in a rapidly evolving digital world.
Keynote: Identity at the front line: Trust, fraud, and the new rules of defense
In a rapidly evolving scam economy, identity has become the front line of defense and the foundation of trust online. In this fireside chat, Ryan Loftus, Chief of Trust & Security at JPMorgan Chase, and Matt Charpentier, Head of Identity at JPMorgan Chase, will discuss how AI-enabled fraud and social engineering are changing the dynamics of attack, and why strong identity must move from point-in-time controls to continuous confidence across the customer journey. Drawing on lessons from protecting customers at massive scale, they’ll explore how to reduce friction while raising assurance, how scams expose identity gaps, and why industry collaboration is essential to improving consumer safety.
Keynote: Oracle Park’s holy grail – A 27-year quest for the frictionless fan experience
Janice Kephart hosts the San Francisco Giants’ longtime CIO, Bill Schlough—the first to hold that title in professional sports—as he reflects upon 27 years of innovation at Oracle Park, and the organization’s eternal quest to optimize the fan journey, from the gates of Mays Plaza to the shores of McCovey Cove.
Keynote: Sorry authentication. Your time is over.
Historically, both cyber and identity security systems have been designed to react to known threats, rather than proactively prevent the next threat. But is this wise? Has that orientation actually worked? It would appear that cyber attacks, breaches, hacks, frauds and other identity-related problems have grown, seemingly unencumbered, despite a massive economic investment in systems claiming to mitigate them. In fact, it's the reactive nature of these systems that enables the next attack to go unnoticed until after the fact. The dogma that identity data and biometric data must be bound to devices, rather than to each other, might help device manufacturers sell future generations of devices, but it also forces the reactive nature of identity and cyber security. It’s the intentional separation of these attributes that enables the attacks that traditional architectures can only react to. In this presentation, Jay describes why a proactive system architecture, the proper binding between a verified identity, the human that identity describes, and the privileges that person is entitled to is the key to preventing the next cyber-identity attack.
Agents at the gate: Securing agentic access to consumer authentication systems
AI agents are no longer just answering questions — they're acting on behalf of users, calling APIs, managing credentials, and interacting with authentication systems at scale. This shift introduces a new class of identity challenges: How do you authenticate an entity that acts autonomously but on behalf of a human? How do you scope its access without breaking the user experience?
You'll walk away with a practical framework of dos and don'ts for agentic access, including how to think about token scoping, consent delegation, session boundaries, and abuse prevention. Whether you're building AI-powered assistants or securing the identity layer they depend on, this talk will give you a grounded perspective on where agentic identity is headed and how to get it right.
Building the bridge to PQC: Stronger identity security starts today
This presentation will explore why the identity ecosystem must begin preparing now for the transition to post-quantum cryptography, even as full PQC adoption remains a work in progress. As the risk of “harvest now, decrypt later” grows, organizations need practical ways to strengthen identity security today while building toward a quantum-ready future. The session will focus on actions that can be taken now, including improving crypto agility, strengthening credentials and identity assurance, leveraging biometrics to reinforce trust in authentication and recovery processes, and securing key processes such as onboarding and account recovery. Attendees will leave with a clear view of practical steps to reduce risk and prepare for the transition ahead.
Establishing trust in digital credentials: How DMVs are making digital identity possible AND practical
For more than a century, state and provincial driver licensing agencies have served as North America's de facto identity authorities — verifying identity, vetting source documents, and issuing the credential that more residents carry and more relying parties accept than any other form of ID. As digital identity moves from pilot to production, that role hasn't disappeared; it has simply gone mobile. This session will explore the idea that DMVs are not merely participants in the digital identity ecosystem, but its most credible foundation, and that the path to real-world interoperability runs through the standards DMVs helped build. Attendees will leave with a clearer understanding of why the DMV's expertise in identity verification is not easily replicated, why standards convergence — not standards proliferation — is the surest path to widespread digital ID acceptance, and what's at stake for issuers, relying parties, and the public.
Financial institutions already don’t trust you, maybe that’s why we’re ahead?
Forfinancial services, the status of consumer identity is advanced but under stress. Banks and other financial institutions are no longer treating identity as only a login function. It now spansonboarding, KYC/CDD, fraud prevention, device binding, ongoing authentication, transaction risk, and recovery. Federal guidance expects financial institutions to use risk-based authentication and access controls, while the Federal Reserve’s more recent commentary shows that institutions are moving from physical-document-heavy onboarding toward more digital, layered, and signal-rich models that include device intelligence, biometrics, and multiple risk signals. So let’s talk about Customer On-Boarding - it’s already expensive to get them, and more complicated to authenticate them.
NIST Tatt-E: Benchmarking the state of the art in tattoo recognition
Law enforcement agencies have used tattoos for many years to assist in investigations. Historically, this has involved searching tattoo image databases using text descriptions of tattoos. However, the effectiveness of this method has been limited by the subjectivity of text-based descriptions. Recent advances in technology have enabled developers to leverage artificial intelligence (AI) to create automated, image-based tattoo search capabilities. Compared to traditional approaches that rely on subjective text descriptions, image-based searching provides a more objective means of retrieval. To determine whether these systems are fit for purpose, decision-makers will need to know their capabilities and limitations. NIST is running an evaluation program to assess the accuracy of tattoo recognition algorithms. This evaluation will measure the capability of these algorithms to detect tattoos in an image and to perform automated matching of different images of the same tattoo from the same subject over time. Thistalkwill present the state-of-the-art accuracy in image-based tattoo recognition and discuss current capabilities and limitations of the technology.
Verified once, assumed forever: From one-time age checks to continuous identity assurance
Every age verification method shares one silent assumption: the person who passed the check at sign-up is still the person using the account. They are not always. Verified accounts get shared, handed to younger siblings, or sold online — rendering even the most sophisticated one-time check meaningless.
This session argues that age verification is an architecture problem, not a technology problem. Drawing on recent enforcement cases Arif Mamedov maps why one-time gates fail and what continuous identity assurance looks like in practice: layered onboarding, trigger-based re-verification, and privacy-preserving behavioral signals.
The question is not "can we check age?" It is "can we keep that assurance meaningful after the check?"
Beyond SMS OTP: The Future of Multi Factor Authentication
Sending a one-time passcode over SMS is practically synonymous with authentication. As consumers, we receive them every day; as business leaders, it's often the first security layer we implement.
But the gaps are becoming harder to ignore. SMS OTP doesn't fully protect against account takeover attacks, and SMS pumping fraud can quietly drive costs to astronomical levels.
So what's the answer? Layer in other communication channels? Abandon SMS entirely for newer technologies like Silent Network Authentication?
The reality isn't so cut and dry — the right approach depends on your customers, your risk profile, and the business outcomes you're trying to achieve. In this session, Telesign's Senior Solutions Engineer breaks down where SMS OTP still makes sense, where it doesn't, and how to build an authentication strategy that evolves with your users rather than against them. You'll leave with a practical framework for evaluating what "beyond SMS OTP" should actually look like for your business.
Bind, Verify, Trust. Meet the privacy preserving biometrically binding digitally signed UR Codes come to life by FaceTec and Foster Freeman at borders across the globe
Panel: Beyond the fingerprint: Navigating the next generation of biometric innovations and their real-world impact
- Review the most important recent innovations in biometric technologies and the real-world applications of these
- Highlight the rapid evolution of biometric modalities beyond traditional fingerprint and facial recognition
- Analyze the unqieu advantages and shortcomings of each of these types of biometric technologies,e.g. increased accuracy, fraud prevention, authentication - and establish where these innovations will have the most impact
- What are you most excited for regarding potential developments and future use cases for biometric technologies?
Panel: Evolving IAM: Trends, best practices, and future proofing
- Review the evolution of IAM practices in an age of increasing scam sophistication
- Address the challenges of scalabiliy, user experience, and compliance in IAM solutions
- Review the impact PAM has on cybersecurity assurancce and discuss the ease of creating and maintaining PAM accounts throughout small, medium, and large enterprise systems
- Look across different industries and sectors, public and private, for IAM best practices
Panel: The new baseline: Adopting digital ID to future-proof customer experience and security in financial services
- How is the role of digital identity evolving in financial services?
- Assess the financial sector in the US' adoption of digital ID programmes (e.g. mDLs( into verification procedures
- Discuss how digital ID is being innovatively applied across operations to verify customers, such as voice biometrics, onboarding, and fraud monitoring
- Review the current threat level to the digital ID ecosystem in the financial service sector. Could we be doing more to protect identities?
Panel: The road ahead for mDLs: Progress, challenges, and potential
- Review the progress of mDL adoption across different states
- Discuss the issues that have arisen from mDL rollouts and how these issues can be solved at either a state or federal level
- Look into the current and potential use cases of mDLs being utilized in commercial environments
- Address privacy concerns and interoperability challenges
Future-Proof: Flexible, next-generation ABIS architecture
Biometric technology moves quickly: algorithms steadily improve speed and accuracy, new matching vendors have emerged with best-value offerings, and edge devices deliver more capability in smaller form factors. User agencies want to leverage today's market-ready technologies from every direction without getting stuck in a technology vendor lock or paying high prices for a custom solution. Athena Sciences's Aegis (TM) delivers that next-gen ABIS open architecture, empowering organizations to integrate today's technology—from any and multiple vendors—that best fit their operational requirements while remaining flexible to quickly adapt to tomorrow's challenges at an affordable price.
KYC in 2026: the shifts shaping the future of identity verification
Explore the five shifts shaping KYC in 2026, from AI fraud and reusable identity to continuous trust and adaptive verification.
Identity is the AI control plane
Modernizing identity and access for critical infrastructure: Secure, privacy‑first biometric enabled access with ID2 pass
Organizations face growing pressure to strengthen security while reducing friction for employees, contractors, and visitors. Traditional access cards and paper credentials are increasingly vulnerable to loss, duplication, and misuse—while manual verification slows operations and strains staff resources.
This session explores howID2 Passenables a modern, biometric approach to identity and access management for critical infrastructure environments. Attendees will learn how biometric credentials can enhance facility security, protect privacy, and improve operational efficiency—without disrupting existing access control systems or workflows.
Physical proof, digital trust: Making hybrid identity work today
Hybrid identity is not a future state, it is today’s operating reality. Border agencies, government authorities, and other relying parties already process physical IDs, ePassports, mobile credentials, and wallet-based identity across the same checkpoints, service counters, and online workflows.
Yet while the identity environment is already hybrid, the infrastructure behind it often remains fragmented. Different credential types are handled through separate verification systems, trust policies, assurance models, operational procedures, and decision flows. This creates duplicated integrations, inconsistent outcomes, security gaps between channels, and unnecessary complexity for both personnel and citizens.
This session examines how organizations can make their existing hybrid environment work as a coherent operating model. It will explore how to align trust requirements across credential types, translate different forms of identity evidence into consistent assurance decisions, connect digital credential flows to existing systems, and maintain auditability, data controls across physical and digital transactions.
Privacy, convenience, security & biometric identity
Proving who is who: Frontline lessons in defeating AI-driven identity fraud
Deepfake identity fraud is projected to surge nearly 500% in 2026. AI has made it cheap to fake a face, a voice, and a document, and the organizations that verify identity at scale are the first to feel it. In this session, NextgenID convenes identity and security leaders who are confronting this threat in production, not theory. Panelists will share what is working in the field, where AI has fundamentally changed the threat model, how the 2026 Fraud Executive Order is reshaping verification requirements, and what it now takes to prove, with certainty, that a person is who they claim to be.
Start-up pitching competition
Identity Plus - Geoffry Gilton, Co-founder
iVALT -Marc Ricker, EVP Business Development and Strategy
labapart UG - Olivier MARTIN, CEO & Founder
NearAuth.ai - Christopher McLain, CEO
Redblock Security -Indus Khaitan, CEO
Trua - Raj AnthanpillaiCEO and Marc Solomon, SVP
Valyd -Javier Casado, Founder
XSignOn Corporation- Rameshwar Balanagu, CEO/CISO
YEE! Technologies, LLC - Darren Yee, Founder
Arkion Identity Systems -Manoj Arora, CEO
You authorized this(?): AI agents, identity, and the policy that hasn’t arrived
AI agents are neither humans, who are legal persons, nor machines, which are deterministic and owned. They act with judgment on someone else's behalf, and no policy framework claims them. The standards are arriving fast: NIST has put agent identity on the federal agenda, the IETF is writing delegation into the token itself, and a post-quantum deadline now binds federal signatures. The accountability is arriving nowhere. This session traces the gap — from a statute written in 1986 to centuries of agency law that already solved delegation — and closes with four things identity teams can build before Congress acts.
Face recognition - seven areas for further gain
Face recognition capability has improved massively over the last decade, benefitting from AI research in machine learning, deep neural networks, and computer vision. New capability has enabled more developers to offer an expanded and broad array of applications. Yet some problems remain, and the talk will describe seven areas where further technical advancements are needed. Additionally, the presentation will outline how current standardization activities and the recent expansion of NIST’s face recognition evaluations could improve capabilities in some of these areas.
Modernizing biometric bookings at scale: Supporting high-volume public safety operations
This presentation explores how iTouch Biometrics and Thales are supporting one of the largest county-level biometric booking modernization initiatives in the United States. It will explore how modern biometric capture technology, including Thales Biometric Scanners, are enabling fast, reliable fingerprint capture across a complex, high-volume public safety environment with consistency across multiple booking locations - strengthening critical public safety infrastructure at scale.
Scams and frauds tied to the mail: Investigations conducted by the U.S. Postal Inspection Service
With AI and Deepfakes as the main topic of discussion in fraud, paper still plays an integral role in how fraudsters perpetrate their schemes. In this presentation you will hear about the latest trends the U.S. Postal Inspection Service investigates and hear case studies on check fraud and lead list broker services.
SEDI: From inception to legislation
Trace Utah’s journey from conceptualizing a rights-first digital identity strategy anchored in constitutional principles to codifying into law guardrails that align legal standards with cryptographic capabilities.
Borrowed playbook: Applying private sector fraud defenses to government benefit programs
The federal government loses between $233 billion and $521 billion annually to fraud and improper payments and the threat is accelerating. GAO reports that AI-enabled synthetic identities, deepfakes, and account takeover attacks are now the dominant attack vectors against benefits programs, grants, and citizen services. Yet many agencies still rely on legacy identity controls that were never designed to detect these modern threats.
This session explores how federal agencies can deploy modern identity verification to prevent fraud at critical moments: benefits enrollment, account creation, credential resets, and disbursement approval — before taxpayer dollars are compromised.
Contactless 3D fingerprint scanning: Technology, applications, and what's next
Panel: Beyond the unlock: Practical applications, future use cases, and the technology driving next-gen facial recognition
- Examine advancements, challenges, and ethical considerations in facial recognition technology
- Explore practical applications of facial recognition across industries, the challenges and success stories, and what future use cases you are hoping/expect to see in the coming years
- Discuss the importance of responsible and ethical use of facial recognition - address public response to recent use cases from law enforcement and online safety initiatives
- Review efforts to reduce bias and improve fairness in facial recognition technologies
Panel: Integrating decentralized identity: benefits, challenges, and lessons learned from 'no phone home'
- Review the latest frameworks and standards for developing decentralized identity systems
- How can decentralized identity be integratede into existing or upcoming digital identity initiatives - what benefits would this bring?
- No Phone Home - What has this issue taught the community to consider moving forward when developing decentralized identity systems?
- Identify challenges associated with decentralized identity programmes,and discuss how these challenges can be addressed or solved
Panel: Reviewing best practices to prevent rising fraud risks in financial services
- Review trends in identity theft and fraud, their impact on individuals, and how to educate and protect consumers effectively
- How can you effectively balance friction and risk in authentication processes. Which of these two is most pertinent to consumers?
- Is there a one-size fits all V&A approach for consumers and employees or does each subsect need different processes?
- What current initiatives are being implemented to improve the detection of fraud across the US?
- Assess the role of government entities, telcos, and private sector commpanies in implementing effective V&A systems
Panel: The criminal gravy tr(ai)n: How are AI & cyber threats evolving and how can you future proof your security?
- What are the biggest threats in the cybersecurity landscape?
- How can AI strengthen cybersecurity threat detection, response automation, and predictive analytics?
- Address the risks of AI misuse in cyberattacks, including identity fraud, social engineering, and deepfakes
- Review use cases of AI enhancement of cybersecurity operations
- Discuss the importance of public-private sector collaboration to harness the potential of AI while mitigating emerging threats
Every digital transaction has an identity problem — and most industries haven't noticed yet
From buying a home to onboarding a new hire to authorizing an AI agent to act on your behalf, the gap between digital convenience and identity certainty is widening fast. In this session, Daniel Buchner, Director of Product, Digital Assets at Proof, and Kurt Ernst, Principal Product Manager for Risk and Fraud at Proof, trace the rise of the Identity Authorization Network across industries and government, expose what AI-generated deepfakes and synthetic identity fraud look like in the wild, and make the case that Digital ID isn't a compliance feature — it's the trust infrastructure the entire digital economy is being built on top of, whether we've planned for it or not. Leave with a cross-sector framework you can apply immediately and a clearer view of where identity risk is headed next.
IAM consolidation without disruption
Many organizations are still managing multiple identity platforms across legacy applications, cloud services, acquisitions, and different business units. Over time, these environments become harder to maintain, more difficult to secure, and increasingly expensive to operate.This talk explores how fragmented identity environments can be simplified in practice, as well as a seamless approach to modernizing identity architecture while maintaining continuity for all users and applications.
Beyond Authentication: Continuous Identity Assurance in the Age of AI
For decades, digital identity systems have relied on a straightforward model: establish identity, authenticate the user, and grant access. Advances in authentication technologies such as MFA, biometrics, passkeys, and Zero Trust architectures have significantly strengthened security. However, the rise of artificial intelligence is challenging the assumptions underlying traditional identity systems. AI can now generate convincing synthetic identities, create realistic deepfakes, clone voices, and automate highly targeted social engineering attacks, making it increasingly difficult to determine whether the individual behind a credential is truly who they claim to be. Existing approaches that make trust decisions at a single point in time are no longer sufficient for today's threat landscape.
This session explores the transition from authentication-centric security to continuous identity assurance. Drawing on lessons from federal identity programs, Zero Trust initiatives, and digital identity standards, the presentation will examine how organizations can continuously evaluate trust using behavioral analytics, device posture, contextual risk signals, and AI-powered identity threat detection. Attendees will gain practical insights into building identity systems capable of adapting to AI-enabled threats while preserving security, privacy, and user experience. As AI transforms both cyber offense and defense, organizations must move beyond asking whether an identity has been authenticated and begin asking whether it can be continuously trusted.
Connected intelligence: Resolving identity beyond biometrics through events, objects, attributes, and behaviors
For decades, identity resolution has focused almost exclusively on physiological markers: matching a face, a fingerprint, or an iris against a static database. But in today’s unconstrained environments—spanning real-time video networks, digital forensics, and tactical edge operations—biometrics alone are no longer sufficient. Static biometric records often lack critical context, and adversarial counter-measures or poor-quality captures can degrade matching confidence.
This presentation introduces Connected Intelligence, a paradigm shift that expands the definition of identity. We discuss how to resolve identities by unifying physiological biometrics with Events (spatial/temporal encounters), Objects (vehicles, license plates, weapons, and smuggled contraband), Attributes (scars, marks, tattoos, and age estimation), and Behaviors (patterns of life, association networks, and cross-channel digital links).
Mission-ready identity: Advancing fraud prevention across government services
The Fraud Executive Orderreleased in March 2026signals a major shift in how digital identity is used to prevent fraud, requiring pre-payment identity verification, defining minimum verification standards, and expanding data sharing to detect fraudulent activity.
This session will explore how identity verification can be operationalized as a corecomponentof digital services, aligned to fraud risklevelsand integrated into broader fraud detection strategies. Through an interactive discussion, attendees will gain practical insight into strengthening digital identity ecosystems while balancing security, compliance, and user experience.
Participants will explore how to navigate these requirements across digital services, align identity verification to varying fraud risk levels, and balance security with user experience. Attendees will leave with a clearer understanding of the Executive Orders’s implications and practical considerations for strengthening fraud prevention strategies within their organizations.
Key Takeaways
- Understand how the Fraud Executive Order elevatesdigital identityas a corecomponentof fraud prevention.
- Learn how to alignidentity verification to fraud risk levelswhile implementing emerging government-wide standards
- Explore strategies fordata sharing and identity validationto detect fraudulent or duplicate claims
- Recognize how identity integrates into broaderfraud detection capabilities, including analytics and monitoring
The body is the signal: From “who are you?” to “I am.”
Biometrics was born around a verifier’s question:
Who are you?
Bio_Sole begins with the body’s answer:
I am.
Sophie Hargest, moderates the session where she puts direct questions to Dr. Vaibhav Shah and Thomas Elliott on what body-generated mechanics add to identity, how that evidence changes under real-world and adversarial conditions, and when the system must admit uncertainty.
Vaibhav examines the visible and hidden contributors to movement. Thomas explains the duality of one verified event: identity assurance and governed biomechanical intelligence, with planned health and pharmaceutical research subject to separate evidence, consent and governance boundaries.
Bio_Sole is worn, but it is not merely a wearable. It is the identity-bound measurement edge of an end-to-end intelligence system.
Questions continue at Booth 701 and the reception.
The Future of Financial Security: Balancing Innovation and Trust
The financial landscape is evolving fast — and so are the threats. As AI accelerates digital transformation across banking, fintech, and payments, financial institutions face a growing challenge: how do you embrace innovation without opening the door to fraud?
In this session, Vonage will explore how network-powered APIs are redefining the future of financial security — enabling institutions to stop fraud before it strikes, without sacrificing the seamless customer experiences that drive growth.
Key takeaways include:
- Real-world customer use case: See how a leading financial services customer leveraged Vonage network-powered solutions — including Silent Authentication and SIM Swap detection — to eliminate SMS social engineering attacks, achieve 50% faster authentication, and improve conversion rates.
- Innovation meets security: Examine the intersection of digital transformation and fraud prevention in the finance sector, and how businesses can build lasting customer trust while confidently adopting new technologies.
- The power of the network: Discover how network-powered APIs — drawing on real-time telco-grade signals — identify and mitigate fraud risks invisibly, without adding friction to the customer journey.
- Future-proofing your operations: Learn how financial institutions can stay ahead of emerging threats — from account takeovers and SIM swap attacks to synthetic identity fraud and AI-driven deepfakes — with scalable, future-ready solutions.
Trusted identity of people and AI ~ Building AI-native digital infrastructure
As AI becomes increasingly embedded in society and industry, we are entering an era in which AI not only supports human activities but also makes decisions, takes actions, and interacts with digital services on behalf of individuals and organizations. In this emerging AI-native world, trust becomes a fundamental requirement. Questions such as Who is acting?, Who is being represented?, and Can identities, information, and decisions be trusted? must be addressed at scale.
This session explores the role of trusted identity as a foundational layer of digital infrastructure for the AI era. While digital identity has enabled significant advances in online interactions, today’s ecosystem remains fragmented across platforms, services, and jurisdictions. At the same time, the rise of AI introduces new challenges around authenticity, accountability, and interoperability.To address these challenges, the session introduces a vision for enabling trusted interactions among people, organizations, AI agents, and digital services through Universal Wallet Infrastructure (UWI). Built on decentralized identity principles and verifiable credentials, UWI aims to empower individuals with greater control over their digital data while supporting secure, interoperable, and trusted exchanges across organizational and national boundaries.Drawing on emerging use cases in education, employment, finance, and mobility, the session will examine how trusted identity can serve as a cornerstone of AI-native digital infrastructure. It will also explore how the convergence of AI, digital identity, and trust technologies can unlock new forms of collaboration, innovation, and value creation.
Trust is not merely a feature of digital systems. It is the infrastructure that will enable the AI-native economy to scale.
Agents of chaos: Securing the last mile of identity
AI agents don't create new identity gaps — they find the ones enterprises already have. This session explores what happens when agentic AI meets the "disconnected app" problem: social media, external sites, proprietary tools, and legacy on-prem apps that sit outside modern IAM, IGA, PAM, and SIEM coverage because they lack standards like SCIM and SSO.
Using new Ponemon Institute research, we'll quantify the scale of this blind spot and walk through a realistic attack scenario — an agent reads a hidden instruction in an everyday document, logs into a disconnected app with stored credentials, and silently changes settings or exfiltrates data, all while the identity provider sees only "approved AI usage."
Attendees will leave with three questions to evaluate any app's identity risk, and a 30/60/90-day roadmap for finding disconnected apps and closing the gap before agentic AI adoption outpaces identity control.
Biometrics in enterprise security
Panel: Frictionless security: Balancing risk and user experience with next-gen CIAM authentication
- Identify and address gaps to enhance security and user experience
- Explore how CIAM priorities differ across industries and adapting solutions accordingly
- Leverage CIAM innovation for fraud prevention and trust-building
- Balance friction versus risk with technologies like passwordless authentication, MFA, and facial recognition
Panel: Integrating digital identity into digital public infrastructure
- Explore how DPI is evolving to meet the demands of an increasingly digital and interconnected world
- Examine the role of international collaborations and standards in shaping the future of national identity infrastructure
- Address the need for security, privacy, and user convenience in national identity programs amid rising data protection concerns
- Analyze the impact of emerging innovation like AI, biometrics, and decentralized technologies on the development of dgital public infrastructure
The fraud ring nobody can see: Why the person is not the pattern
Fraud detection has traditionally focused on whether an individual is real, a document is authentic, or a session belongs to the right person. But organized fraud increasingly hides in plain sight.
A fraud ring can use real identities, legitimate-looking documents, and selfies that pass basic checks, while coordinating activity across organizations, industries, devices, infrastructure, and time. Individually, each transaction may appear normal. Collectively, the network reveals a scaled operation.
This session will explore how cross-sector intelligence exposes repeated identity elements, coordinated behavior, velocity, and infrastructure reuse. It will also examine how fraudsters adapt by suppressing traditional identity signals and relying on shared operational infrastructure instead. The fraud ring itself must become a first-class intelligence layer for authentication, verification, and risk decisions.
Utilization of FR/Object/Weapon detection technology in modern investigations and prosecutions
Deepfakes, data, and durable credentials: Building a remote proofing solution that survives AI-era attacks
High-assurance identity proofing is no longer something any single vendor delivers alone. A remote enrollment session that stands up to scrutiny has to answer three separate questions; is this a live human or generated media, is the claimed identity real and does it belong to this person, and can the result be bound to a credential that holds its value for years. Each answer comes from a different discipline and, in practice, a different company. This panel brings the company behind each answer to the stage, alongside the engineering leader who integrated them, so attendees leave with a candid, component-level view of how a high-assurance proofing chain actually gets assembled.
Human-in-the-loop biometrics in the age of agentic AI
Improvements in AI are enabling superior performance in automated biometric systems. However, these systems are also influencing human decision-makers in unexpected ways.
In face recognition, stronger algorithms can return doppelgängers that are difficult for reviewers to distinguish, potentially leading to false positives. At the same time, advances in generative AI are making biometric deepfakes more convincing, exposing security gaps and increasing fraud risk.
Across both areas, one thing is becoming clear: As AI takes on more work in biometric workflows, humans are often presented with more complex decisions. This dynamic can position humans a potential weak link in biometric system design.
This session presents SAIC’s perspective on this challenge and introduces an emerging approach to better integrate human and AI teaming to improve biometric outcomes. In the era of AI agents, this approach enables more informed, agentic AI.
Panel: Coordinating government, telcos, and the private sector to enhance V&A practices
- Explore real-world experiences with verification and authentication solutions from a diverse range of industries
- Balance customer priorities; how do we address friction versus risk in authentication processes?
- Highlight the newest solutions and technologies shaping rhe future of identity verification
- Understand how different sectors and populations require tailored approaches to identity solutions -can customers and worker be treated the same?
- Examine the varying priorities and unnique challenges faced by industries in implementing effective verification and authentication systems
Panel: From sports to entertainment: Analyzing commercial biometric implementation and impact in stadiums
- Review biometric adoption for commercial purposes across different industries - is sports & entertainment leading the way?
- What can government branches learn from the experience gained through commercial implementation of biometric technologies?
- Discuss the benefits gained through biometric adoption in commercial environments
- Review the human response to biometrics being deployed. What friction was faced during rollouts?
Beyond OTP: Redefining trust and authentication
In an increasingly digital and AI-powered world, two-Factor Authentication (2FA) has become critical for security-minded enterprises, but can often cause friction, impact user experience, and is vulnerable to social engineering attacks. CAMARA Network Powered Digital Solutions, developed by GSMA and the Linux Foundation, offers a seamless alternative with Number Verification and Silent Authentication. This technology enables secure, frictionless authentication directly through mobile network operators, eliminating the need for OTPs and reducing vulnerabilities.
This session highlights how Silent Authentication is transforming digital authentication, prioritizing both security and user experience.
The internet was built for users. The next one is built for users + agents.
Border management in contested environments: Data-driven solutions and the sensor-decider-effector loop
Call vs.caller - The critical distinction in voice channel authentication
As sophisticated fraud tactics like caller ID spoofing, network hijacking, and AI-driven voice cloning accelerate, enterprises can no longer rely on the origin of a phone call as proof of identity. There is a critical, yet often overlooked, distinction in modern telecommunications security: authenticating the call (verifying the device, network, or phone number) versus authenticating the caller (verifying the actual human speaking).
This presentation explores the dangerous security gaps created when businesses conflate these two concepts. Attendees will learn how threat actors exploit device-centric trust models and why shifting to human-centric authentication—leveraging advanced voice biometrics, behavioral analytics, and real-time identity verification—is essential for robust enterprise fraud defense. We will break down practical strategies for implementing seamless, secure voice authentication that protects the bottom line, reduces customer friction, and ensures that the voice on the line truly matches the identity on the account.
Key Takeaways:
- The fundamental technological differences between call validation and caller verification.
- How modern threat actors successfully bypass traditional, device-centric authentication.
- Best practices for integrating voice biometrics and behavioral identity into existing enterprise workflows.
Continuous assurance for modern digital platforms
What if trust didn’t stop at login? This session explores how continuous assurance uses device, session, behavioralsignals to make real-time trust decisions across the user journey. By extending trust silently for low-risk users and responding precisely when risk changes, platforms can reduce friction while improving protection against compromise, hijacking, and abuse.
From the world's game (soccer) to the world's games (Olympics)
In this fireside chat, attendees will learn how LAFC deploys next-generation technologies, such as biometrics, to revolutionize the fan experience. Drawing from World Cup ticketing insights and short-notice mega-events, the session explores the operational agility needed for modern venue management. Participants will also gain a sneak peek into 2028 Olympic preparations and discover how vendors and policymakers can collaborate to solve upcoming industry hurdles.
IGA Programs Suck. A Field Study of How AI Can Get You Back on Track.
3 Practical Applications of AI to Keep Up with the Mess and Take your IGA Program to a Whole Different Level.
Most IGA programs succeed at the start and stall in the middle. The platform gets picked, the first dozen apps go in fine, then coverage flattens. Usually years before the program reaches the applications carrying real risk.
This session presents findings from a study of enterprise onboarding programs, breaking down where time actually goes on a single application. The build turns out to be the smallest part of it.
We'll cover the failure modes practitioners recognize but rarely measure. The app whose only expert left in 2016. The entitlement nobody can explain. The connector that quietly stopped returning complete data three quarters ago.
Then where AI can keep you ahead of the curve.
Takeaways
- Where onboarding effort actually goes, and why the technical build is the smallest share
- The failure modes that predict a stalled program, and how to spot them in quarter one
- Three applications of AI you can put to work now, what each gives back, and where it stops
- What still needs someone who understands the business, and why that's the good news
The authority to say yes: Why identity isn’t enough for AI
Identity tells us who someone is. As AI systems begin acting on governed information, the harder question is whether the requested action is authorized—and who has the authority to approve it. Drawing on cultural rights as a proof case, this presentation introduces machine authorization as the missing layer between identity, authorship, and accountable AI.
Beyond login: Identity as a product capability for modern enterprises
Enterprise identity is often treated as a gateway: connect an identity provider, enforce SSO, and decide whether someone can sign in. But large organizations rarely fit one domain, one identity provider, or one policy.
This session presents a product-oriented framework for moving beyond one-size-fits-all login rules. It explores how authentication methods, resource requirements, and authentication context can support more precise and adaptable enterprise experiences. It also covers practical principles for introducing identity changes safely, including clear defaults, staged enforcement, observability, and recovery paths.
Beyond the benchmark: Five things AI testing needs for the modern era
AI testing has come a long way. We have moved from evaluating algorithms against static datasets and reporting a handful of accuracy metrics to increasingly sophisticated assessments of bias, robustness, security, and real-world performance. But the systems we are deploying, and the environments in which they operate, are evolving even faster.
This talk looks at how AI testing has evolved and proposes five things we need to do next to bring testing into the modern era. Drawing on lessons from biometric and operational AI evaluation, it will explore the need to move beyond benchmark accuracy, test systems rather than models, evaluate performance under realistic operating conditions, continuously probe for failures and emerging threats, and translate technical results into evidence that decision-makers can actually use.
How UR codes are being used by law enforcement in the US
Keynote: Ground Truth™—Known, Not Shown: A test for the next era of identity, applied to Bio_Sole first
When visible identity can be manufactured, what should trust require?
Ground Truth™—Known, Not Shown presents a test for the next era of identity.
Todd Gray applies that test to Bio_Sole first, separating demonstrated evidence from assumption and asking whether trust can be established without exposing more of the person than the decision requires.
The keynote traces the origin of that question, the architecture it produced, and the standard by which the field should judge what comes next.
Keynote: IBIA congressional fireside chat: Data privacy in the age of biometrics
Join us for an intimate, three-way conversation with two Members of the U.S. Congress as they sit down with our Moderator to discuss and unpack one of the defining policy questions of our time:How do we harness biometric and identity technologies while safeguarding personal privacy?From facial recognition and other biometrics to digital ID systems and data privacy, to the legislative frameworks shaping their use, this candid discussion will explore the intersection of innovation, security, and civil liberties.
Join us in a conversationRep. Bill Foster (D-IL)andRep. Pete Sessions (R-TX)— the authors and co-sponsors of the bi-partisanStop Identity Fraud and Identity Theft Act, introduced in the U.S. Congress earlier this year. The discussion will be moderated by IBIA Chairman Emeritus, John Mears.
Attendees will gain first-hand insight into the Legislative Branch perspective on emerging technology policy, the challenges of regulating fast-moving innovation, and what’s next on the legislative horizon. Don’t miss this timely, thought-provoking exchange on privacy in a digitally identified world.
Drinks party sponsored by Bio_Sole
Join us across the road from the Walter E. Washington Convention Center where Bio_Sole will be hosting our annual post-event drinks party, taking place this year at Yardbird!
Create your personal agenda –check the favourite icon
Chair's opening remarks
Keynote: TSA at 25: How innovation and new technology are building the future of transportation security
In this fireside chat, held as TSA marks its 25th year and launches its new Horizon 25 Strategy, Deputy Administrator Ha Nguyen McNeill reflects on the achievements she's most proud of as she prepares to conclude her time at TSA, and looks ahead to the future of transportation security. Topics include modernizing checkpoint identity verification through eGates, AutoCAT, CLEAR integration, mobile Driver's Licenses (mDL), and TSA's Digital ID roadmap, alongside updates on REAL ID and TSA PreCheck®. McNeill will outline TSA's public-private partnership pathways including Gold+, the Capability Acceptance Program, and RSSP and remark on how industry can engage. She will also plus cross-agency collaboration with CBP and airports across the Americas. The session also highlights why pairing identity confirmation with screening outperforms late-stage checks, and honors frontline Transportation Security Officers navigating a generational shift in the role.
Keynote panel: Seamless travel – pilots, passenger pathways, and progress
- Review the performance data and key operational learnings from recent digital travel credential (DTC) and biometric boarding pilots managed by international airlines and airport authorities.
- Examine how digital identity verification is being embedded into passenger pathways to optimize end-to-end traveler throughput and minimize physical friction from check-in to the boarding gate.
- Address the challenges of cross-border interoperability and international standard compliance (such as ICAO frameworks) to support unified identity verification across shifting geopolitical jurisdictions.
- Evaluate the co-dependent relationship between public sector border security agencies and commercial aviation end-users in balancing data privacy mandates, security binding, and guest convenience during full-scale deployment.
Beyond scoped credentials — Gating autonomous agent actions on loss & irreplaceability
Autonomous agents are the newest — and least predictable — non-human identities in the enterprise: NHIs that compose their own commands. Scoped credentials shrink their blast radius, but even attribute-rich IAM answers whether an identity may act — never whether what’s inside can ever come back. This session presents an open-source pre-tool-call hook that closes the gap: a deterministic blast-radius floor plus a fully local “simulated-grief” grader, merged on a five-rung ladder where the stricter answer always wins. In testing it caught customer data that permissions allowed — even hidden under renamed directories — and the architecture independently re-derives a millennia-old Sanskrit analysis of attachment: code first, verses after. It ships today, open source: fewer approval prompts where they’re noise, harder stops where they’re load-bearing.
Key takeaways:
- Why IAM, credential scoping, and NHI governance answer “may” but never “matters.”
- Deterministic + local-model guardrails at the pre-tool-call layer — without approval fatigue.
- Fully local deployment patterns on Apple Silicon — nothing leaves the machine.
Digital wallets and federated trust: What NIST SP 800-63C-4 means for assurance
The strongest identity evidence a credential service provider (CSP) can collect now lives in digital wallets.A CSP that accepts a mobile driver's license (mDL) or other digital credential for identity proofing becomes a wallet relying party with obligations under NIST SP 800-63-4. Kantara Initiative (kantarainitiative.org) is the nonprofit that operates the leading US accreditation program for assessing conformance to NIST's digital identity guidelines. This session previews the wallet-related requirements in Kantara's baseline certification criteria and how CSPs will be assessed when they accept credentials from digital wallets. Attendees will leave with a clear picture of what wallet acceptance requires under the new guidelines and how to prepare for assessment against Kantara's criteria. For government agencies and relying parties,the session offers a benchmark for vendor due diligence: what Kantara certification for wallet acceptance actually verifies, and what to demand from a CSP before trusting its wallet-based identity proofing.
GPO's 100-year journey in designing the U.S. passport
Japan's My Number Card: Advancing digital identity through smartphone integration
This session presents a case study on Japan's My Number Card, the cornerstone of the nation's digital identity infrastructure, and its integration into smartphones. It will cover the current status and adoption of the My Number Card, its role within Japan's Digital Public Infrastructure (DPI), and how embedding secure credentials into mobile devices is transforming citizen access to government and private-sector services.
The session will also touch on some of the challenges and future considerations, and hopes to offer useful perspectives for those interested in digital identity initiatives.
The friction curve
Why every second at the border is a design choice?
Border control is evolving from manual checkpoints toward seamless, biometric identification. As passenger volumes and security demands increase, every second of the journey becomes a design decision from kiosks and eGates to walk-through smart corridors. The focus is on reducing friction while maintaining security, privacy, and human judgment.
Mastering EMRTDs: Ensuring data integrity and authenticity in travel documents
This presentation explains why NFC chip verification is becoming a cornerstone of high-assurance digital identity checks. As fraud, identity theft, and remote onboarding risks increase, electronic travel and identity documents remain a critical root of trust. By cryptographically reading and validating the chip in an ePassport or electronic ID card, organizations can verify that the data has not been altered, originates from a trusted issuer, and belongs to a genuine, non-cloned document.
The session will outline the key principles behind chip verification, including how it enables high-assurance identity proofing by ensuring data integrity, cryptographic authenticity, and resistance against cloning or tampering through certificate-based validation and active or chip authentication. It will also address practical challenges such as remote versus on-site verification, device trust, interoperability limitations, damaged chips, and emerging attack scenarios. Participants will gain a clear view of how chip-based document verification strengthens fraud prevention, regulatory compliance, and trust in digital identity processes.
Looking forward meeting you in D.C.
Panel: Grand designs: Reviewing document design features
- Review the latest credential security features that can be incorporated into physical documents
- What document security features are available that are currently unable to be duplicated by bad actors?
- How do you see digitally encrypted features (e.g. NFC chips) being used in physical documents?
- Discuss the role of futureproofing physical documents in an age where digital transformation is affecting everything
- What documents and credentials must remainphysical and why?
Panel: Smart borders: Leveraging digital identity, biometrics, and automation to enhance security and traveller convenience
- Explore what technologies are currently enhancing identity verification and strengthining security at ports and border crossings
- Discuss the role of biometrics, digital credentials, and automation in streamlining immigration and customs processes
- Examine initiatives to enhance efficiency and traveller convenience (e.g. MCP) and if there are additional risks to border scurity as a result of these
- Gain insights from US and international leaders on the challenges and innovations shaping border management
Panel: Wallet give you control? Finally unlocking a decentralized future for digital identity
- Review digital wallet adoption in the US and other regions
- Explore new wallet technologies and assess their role in enhancing user experience
- How well is the decentralized aspect of digital wallets being communicated (is a lack of understanding resulting in push-back to digital ID initiatives that would use digital wallets due to privacy concerns)?
- Address privacy, fraud, and cybersecurity risks relating to digital wallets
- Discuss the need for cross-border and cross-platform compatibility and how this can be achieved
- Assess the role of government in forwarding the ability of digital wallets to store personal credentials. Should the public sector take a leaf out of the private sector's book?
Panel: Who's logging in? How should enterprise architecture evolve to factor in non-human identity management?
- Assess the rise in use cases for NHI's and the new security concerns that are raised by this
- Review the validity of zero trust models for NHI's to prevent compromised assets becoming a threat
- Explore what the future looks like for NHI usage across different industries and sectors
- Where are the best use cases that demonstrate NHI's enhancing existing enterprise architecture?
- How will 'sentient' NHI's, such as agenti AI operators, increase and reduce security risks pertaining to user authentication and verification?
Remote mobile enrollment: Secure face and fingerprint binding because YOU ARE THE KEY
Digital identity is quickly becoming the foundation for how people prove who they are — not just at a border, but across banking, government services, healthcare, and everyday digital life. As more of these interactions move to mobile-first, remote enrollment, the industry has gotten good at solving the pieces in isolation: capturing a face, capturing a fingerprint,validatinga document. But the moment thatactually determineswhether a digital identity can be trusted is the one nobody talks about enough — proving thatall ofthose pieces belong to the same person, securely, remotely, and without friction.
Most identity programs today rely on document validation and facial biometrics, which workreasonably wellfrom a smartphone. The harder problem is fingerprintcapture, andbinding it to the face in a manner thatisn’tawkward for the user, time-consuming, or dependent on costly hardware. Mobile touchless remote fingerprintcapturechanges that equation. But it introduces a challenge the industry hasn’t fully addressed: how do you guarantee that the fingerprint captured remotely actually belongs to the person whose face and documents you just verified? This is the “binding” problem — andit’sthe difference between a genuinely secure enrollment model and a vulnerability waiting to be exploited.
Identy.io’sbiometric binding architecture links face capture, document OCR, and touchless fingerprint collection into a single authenticated session. The face is real — independentlyvalidatedin DHS’s RIVR evaluation with zero attack acceptance across all attack classes. The fingerprints are real — ISO/IEC 30107-3 Level 2 certified byIdiapResearch Institute and Ingenium Biometrics. And they belong to each other, verifiably. Further, they are interoperable with legacy AFIS databases and watchlists, without requiring hardware replacement. No rip-and-replace. No new kiosks.
Agentic identity and intelligence: From opportunity to security imperative
Agentic AI is reshaping the identity threat landscape. As autonomous agents grow more capable, the same technology driving innovation can automate fraud, exploit vulnerabilities, and interact with your applications as if it were a legitimate user. This session makes the case that visibility into agentic traffic is now a security imperative, and shows how organizations can detect, classify, and govern AI agents based on their behavior and intent. You'll leave with a practical framework for distinguishing malicious agents from legitimate ones and deciding what to allow, block, or challenge.
The three pillars of identity unlearning
As privacy regulations continue to evolve, individuals are gaining increased control over their personal data, including the ability to withdraw consent and request deletion under the right-to-be-forgotten. This creates a fundamental challenge for modern identity systems: how can we remove the influence of an individual's identity data after it has already been learned by an AI model? This talk introduces identity unlearning, an emerging approach that enables AI systems to selectively remove identity related information while maintaining acceptable accuracy, reliability, and trust. We will explore the three pillars of identity unlearning: identification of how identity data influences model behavior, erasure of learned representations while preserving system utility, and verification that the removal is effective and privacy objectives are achieved. Through examples from biometric and AI driven identity systems, this talk will highlight how identity unlearning can bridge privacy regulations and responsible AI development, strengthen biometric security, and enable the next generation of trustworthy and user-centric identity technologies.
Restoration of trust: Implementing open verifiable calling (OVC) for global telecommunications
The global telecommunications industry is facing a systemic "Scam Crisis," where 92% of consumers assume unidentified calls are fraudulent, costing businesses nearly $40 billion annually. Join us as we explore how the Open Verifiable Calling (OVC) initiative, led by the GSMA and showcased through Microsoft’s global call center transformation, is bridging the identity-trust gap. By implementing the KERI Suite—comprising KERI, ACDC, and CESR—this new architecture moves the industry from "best-guess" caller ID to cryptographic proof. We will deconstruct the "Trust Spanning Layer," a carrier-agnostic framework that allows enterprises to anchor their legal identity using ISO-standardized vLEIs and verifiable dossiers that flow via SIP Identity headers. Attendees will learn how decentralized identity provides unprecedented resilience through pre-rotation mechanisms and selective disclosure, ensuring that trust is established at the source. This session provides a tangible roadmap for a future where every call carries provable trust, successfully navigating the transition from legacy TDM infrastructure to a globally interoperable, decentralized trust graph.
Toward a neutral talent provenance infrastructure for the AI Era: Persistent identifiers, consent architecture, and the four C’s as a standards framework
The proliferation of generative AI systems capable of synthesizing photorealistic humanlikenesses, voices, and performances has created a structural gap in the media andentertainment supply chain: the absence of a neutral, persistent, interoperable identifier for theIdentity resolution of notable talent at the center of these transactions. Without such infrastructure, consent cannot beverified at scale, provenance chains collapse under the weight of synthetic content, andenacted regulatory frameworks have no technical substrate against which compliance can bemeasured or enforced at machine-readable speed.
HAND founder Will Kreth will discuss howpersistent, interoperable, standards-aligned talent identifiers are themissing technical precondition for the consent-based rights frameworks now demanded bylegislation, labor agreements, and the broader creative economy.
Start-Up Pitching Competition
Identity Plus - Geoffry Gilton, Co-founder
iVALT -Marc Ricker, EVP Business Development and Strategy
labapart UG - Olivier MARTIN, CEO & Founder
NearAuth.ai - Christopher McLain, CEO
Redblock Security -Indus Khaitan, CEO
Trua - Raj AnthanpillaiCEO and Marc Solomon, SVP
Valyd -Javier Casado, Founder
XSignOn Corporation- Rameshwar Balanagu, CEO/CISO
YEE! Technologies, LLC - Darren Yee, Founder
Arkion Identity Systems -Manoj Arora, CEO
Circuit breakers, dead man switches, and state machines: Authorization boundaries for autonomous AI agents
The identity industry is racing to provision and authorize AI agents — but who holds the authority to revoke them mid-execution, and how is that authority enforced? This talk reframes "stopping a rogue agent" as an authorization-lifecycle problem and answers it with three production-tested patterns the speaker has built and runs: circuit breakers that halt execution when anomaly thresholds are breached (the WHEN of revocation), dead man switches that revoke an agent's authority when heartbeat signals go silent (the HOW), and state machines that make an agent's lifecycle — provisioned, active, suspended, revoked — authoritative outside the agent's own code (the WHO). The talk makes the case that the strongest enforcement point for all three is the identity layer. Attendees leave with implementable patterns for agent containment, plus the structured-testing methodology that surfaces failure modes like these before they reach production.
Facial recognition to combat deepfakes in the recruitment process
From account takeover to agentic takeover: Securing identity in the age of autonomous AI
Start-Up Pitching Competition Results
Blueprint for machine and AI agent identity: Building trust in an autonomous world
Let's build a blockbuster: Identity at the speed of creativity
What does it take to build a blockbuster?
Most people think about scripts, actors, and special effects. Identity professionals see something different: thousands of decisions about access, trust, ownership, and risk.
In this interactive session, attendees become decision-makers in a fictional production and navigate the challenges that arise as the story unfolds. As the stakes rise, so do the identity questions.
Using lessons inspired by media and entertainment, Divya Tated explores how modern organizations can balance creativity, collaboration, and security in a world where change is constant and identity is everywhere
Panel: Dual-edged onboarding: Managing the risks and benefits of face-scanning, digital IDs, and AI integration in KYC onboarding operations
- Review the latest innovations in KYC operations
- Discuss the risks and benefits of integrating digital IDs and face-scanning technologies to verify authenticity when onboarding
- How is AI enhancing KYC/B processes - is this allowing for more effective identity verification through improved trnsaction monitoring techniques?
- Alternatively, what threats have been created from AI misuse?
Panel: License to thrill: AI agents in the field, can we control and authorize their actions effectively?
- Assess the state of play for 'AI' in the identity ecosystem. Is this overhyped, or do sectors need to shift their approach and incorporate AI entities into their identity management?
- Discuss AI agents and how they integrate into access management systems. What permissions should they be granted?
- Review the security concerns with autonomous agents requesting access on behalf of a human user
- Should AI receive its own identity credentials and how should they be authenticated if representing a human user?
- How far can authorization for an AI agent be trusts if users aren't able to account for the infinite permutaations of how an agent will act to achieve it's set goal? Should sub-agents be considered separate entities?
Panel: Seamless travel initiatives: Assessing the World Cup and looking forward to the 2028 Olympics
- Review the challenges and success stories from seamless travel initiatives at the 2026 World Cup
- Discuss new innovations and their adoption, such as touchless check-ins and automated security processes
- Evaluate best practices for frictionless travel outside of the US - what can be learned from other pilots?
- Assess what effortsneed to be made to make the 2028 Olympics a frictionless travel feat. What new technologies need to be deployed, how can airlines and airports collaborate more effectively, and what lessons can be learned from 2026?
Panel: The counterfeit crisis: Futureproofing physical documents with unbreakable security
- Review the current state of counterfeiting in the US - do we have a problem?
- Where can counterfeiting be seen to cause the most damage currently in the US?
- Review new methods to combat document fraud
- How can innovative technologies be leveraged to enhance document security and counterfeit detection?
Physical identity proofing at scale: Operational lessons for a multi-framework world
As digital identity frameworks mature worldwide — from mobile driver's licenses to entry-exit biometric programs and regulated digital wallets — physical identity proofing remains the least standardized link in the chain. Drawing on the operational experience of deploying 30,000+ unattended biometric enrollment devices across 18+ countries, this session shares practical lessons on Presentation Attack Detection at scale, the engineering discipline required for unattended operation, and what it takes to support multiple regulatory frameworks concurrently. The session translates these operational insights into the vocabulary of US frameworks — including NIST SP 800-63-4, ISO/IEC 30107, and AAMVA mDL issuance — and outlines transferable use cases for DMV/mDL kiosks, federal enrollment infrastructure, and high-volume public environments.
Identity IS the attack path: Building an ITDR operating model
Attackers don't always need to break in when identity already provides a path. Compromised users, stale privileged access, service accounts, OAuth grants, MFA fatigue and now AI agents all create new opportunities for identity to become the incident.
This session explores how organizations can evolve from traditional IAM operations to a true Identity Threat Detection and Response (ITDR) model.
Attendees will learn which identity signals matter most, how IAM and SOC teams can work more effectively together, and how to develop practical response playbooks for compromised users, privileged access abuse, service account risk and AI agent misuse.
Proof of human: Biometric ethics, scoped credentials, and accountability when agents act for us
This session examines the ethics of biometrics through the lens of what is actually enforceable today. It begins with the key legislation and policy frameworks shaping biometric collection and consent, then turns to recent rulings in Illinois — one jurisdiction that has defined this space — and how they are reshaping risk calculations well beyond state lines. From there, it moves to practice: specific examples from banking and finance, including in Europe, where institutions are tackling these questions at scale in customer onboarding, contact-center authentication, and workforce access.
AI agents put pressure on the one assumption every consent regime depends on — that the enrolled subject is present at the moment their identity is used. The talk lays out a concrete approach to that gap: enforcing cryptographically scoped, short-lived credentials that bind an agent's authority to narrow and auditable limits, and using biometric verification as the gate on escalation, so a real human remains genuinely in the loop rather than nominally accountable. Attendees will gain a working framework for delegation boundaries, a candid view of where current approaches fall short, and the ethical implications to consider in design.
Extending creator assertions: Closing representation gaps across organizational and individual identity in the C2PA ecosystem
C2PA provides the core technical framework for content provenance — the manifest structure that carries claims and assertions through an asset's chain of custody. Within that framework, the Creator Assertions Working Group defines the identity assertions and metadata specifications that answer who stands behind a given claim. The stakes for getting this right are no longer theoretical: impersonation now happens with impunity, appropriation by generative systems is irreversible once ingestion occurs, and labeling obligations under the EU AI Act, California's SB 942, and India's deepfake disclosure rules have moved authenticity from best practice to legal mandate. Yet representation into the assertions layer remains uneven on both sides of CAWG's charter — large studios, wallet providers, and academic institutions are underrepresented alongside podcasters, musicians, independent media, and social media creators, leaving both organizational and individual identity with gaps in coverage and no consistent path to originate a verifiable assertion. Speaking on behalf of CAWG in coordination with the Decentralized Identity Foundation, Will Kreth will examine these gaps and what closing them requires, from standards alignment to practical onboarding, so that the assertion layer keeps pace with the regulatory and technical urgency now driving it.
Identity security: What happens when digital identity is compromised?
Panel: Reimagining the border: The promise and practicalities of digital travel credentials
- What advantages will the digital travel credential bring to border security, the travel industry, and individual travellers?
- How can, and should, border authorities engage with passport developments for DTC design and implementation?
- Are mitigations being factored into DTC developments for those who are unable to access the required technology?
- Where can use cases for DTCs and seamless travel be observed, and what lessons have been learned so far?
Panel: The future of payments: Security, identity, and intelligent innovation
- Explore how emerging technoligies like blockchain, AI, and biometrics are transforming payment systems and driving future innovations
- Examine advancements in payment security and strategies for balancing robust protection with seamless user experiences
- Discuss the impact of evolving regulatory landscapes on the payments industry and how companies can ensure compliance
- Highlight the role of identity verification in fraud prevention and its integration into modern payment systems at the point of sale
From manual chaos to autonomous identity: AI-driven certificate lifecycle management at scale and the post-quantum deadline every IAM team is already behind on
Identity infrastructure fails quietly certificates expire, domains go dark, and helpdesks flood and most organizations are managing this with manual processes that cannot scale. This session is a practitioner's account of deploying AI-driven certificate lifecycle automation across 8,707 TLS certificates, 153 domains, and 39 departments serving 40,000+ users, achieving a 64% reduction in helpdesk tickets and zero certificate-related outages since deployment. But the harder conversation is what comes next: Executive Order 14412 (June 2026) has mandated migration to post-quantum cryptography, NIST FIPS 203, 204, and 205 are finalized, and every RSA and ECC certificate underpinning your federated identity, TLS, and PKI-based authentication is now on a compliance clock. This session covers how AI automation transforms certificate operations from a human-error problem into a governed, auditable system, what crypto-agile architecture looks like in a live multi-domain production environment, and why AI-driven certificate management is the only operationally realistic path to post-quantum migration at scalebuilt from lessons learned running it in production, not in a lab.
Onboarding cirrus logs in azure sentinel
Panel: From paper to platform: Rethinking document security in a digital age
- Discuss the momentum behind the shift to digital documentation
- Weigh up the pros and cons of digitizing sensitive documents
- Are there examples of documents that must remaing physical? What security concerns exist surrounding digital documentation?
- What options are available to citizens that wish to opt-out of digital ID initiatives?
- Is the risk appetite increased or decreased by digitizing documents from a counterfeiting perspective?
Panel: Is passwordless inevitable? Adoption, friction, and the zero-trust reality
- Review the adoption of passwordless technologies and assess whether 'passwordless' is feasible and/or necessary
- Identify which challenges for adoption of zero-trust methodologies are a resuly of increased friction, lack of interoperability, or undereducated users
- Examine leading use cases from a variety of sectors that have transitioned to passwordless authentication
- Discuss the security benefits for implementing zero-trust in enterprise systems - is this more necessary than ever considering the rise in fraudulent activity and phishing attacks?
Headshot generator tells and examples
Digital travel credentials: Why does ICAO matter and what does the future hold?
Re-engineering public finance: How state-led digital identity can reduce fraud and transform government payments
- Examine the scale of fraud and improper payments and the resulting risks to government fiscal sustainability, audit integrity and public accountability, as responsibility shifts to states delivering public funds at the “last mile”
- Assess how current anti-fraud efforts focused on securing large stores of personal data and expanded data-sharing across government may reinforce system vulnerabilities and create new points of interception for bad actors
- Distinguish between continuously verified, centralized-controlled identity models (e.g., many of the current state-led mobile driver’s licenses initiatives) and privacy-first approaches that use decentralized architecture and cryptography to minimize reliance on centrally stored personal data
- Introduce how emerging technologies—including blockchain, decentralized identity frameworks, cryptography, AI, and biometrics—enable new models of verification, control, and auditability without exposing underlying personal data
- Discuss the need to integrate identity directly into payment infrastructure using decentralized privacy-preserving, cryptographic methods to reduce fraud and improve transparency
- Highlight practical, state-led pathways for modernizing public finance through incremental implementation and public-private collaboration
SXSW case study - Event credentials without a fence
Each March SXSW takes over Austin, TX with no fence line, no pre-registration required, and no limit to the kinds of events. From star-studded red carpets and 4-story-tall vending machines to one-on-one mentor sessions and VR experiences, a unique event has unique credentialing demands. This talk will dive into the process of delivering a credentialing and access control system that equally serves a Music Festival, a Film Festival, and a Conference all while providing real-time analytics and event safety controls.
GET INVOLVED AT IDENTITY WEEK AMERICA
Created by
Terrapinn is proud to be a member of isla.
Working together to build sustainable events