“Summarize this PDF for me.”
OPENING KEYNOTE
From Human Identity
to Agent Identity
The next chapter of digital trust
Sadrick Widmann
From Human Identity
DEIDENTITÄT
ONE ROOMONE
CONVERSATION
CONVERSATION
ENIDENTITY
TWO LANGUAGES. ONE COMMUNITY.
+20%
MORE PARTICIPANTS
WHERE WE COME FROM
Started in DACH.
DACH2015
EUROPE2026
JAPANFirst customers
JAPANMap: Natural Earth · public domain
Recognized by analysts
KUPPINGERCOLE · 2026Consumer IAM
Overall LeaderProduct LeaderInnovation Leader
KUPPINGERCOLE · 2026B2B IAM
Overall LeaderProduct LeaderInnovation Leader
KUPPINGERCOLE · 2026Passwordless B2C
Overall LeaderProduct LeaderInnovation Leader
KUPPINGERCOLE · 2026Passwordless Enterprise
Overall LeaderProduct LeaderInnovation Leader
NEWKUPPINGERCOLE · 2026Identity Governance & Administration
Overall LeaderProduct LeaderInnovation Leader
NEWFORRESTERNOTABLE VENDOR
KuppingerCole Leadership Compasses, 2026 · Forrester listing: exact report/year to confirm
The platform got wider
CONSUMER
IDENTITY
IDENTITY
B2B & PARTNER
IDENTITY
IDENTITY
WORKFORCE
IDENTITY
IDENTITY
IDENTITY
GOVERNANCE
GOVERNANCE
One platform. Every relationship. Every lifecycle.
THE IDENTITY SURFACE
Every actor needs identity
⌘
MACHINESystems✦
AGENTAutonomous actorsONE TRUST FABRIC
THE LANDSCAPE ALREADY FLIPPED
45:1
NON-HUMAN IDENTITIES
FOR EVERY HUMAN
Source: Cloud Security Alliance, The Non-Human Identity Governance Vacuum, 2026
FROM CHAT TO AUTONOMOUS AGENTS
“Find every open invoice — and send the reminders.”
“Onboard the new hire. End to end.”
THE SHIFT IS MEASURABLE
Agents are entering
the operating model.
40%enterprise apps with task-specific agents by end of 2026
15%daily work decisions made autonomously by 2028
$3–5Tconsumer commerce mediated by agents by 2030
Sources: Gartner, 2025 · McKinsey, 2025–2026
A DAY IN THE LIFE OF AN AGENT
“Book me the cheapest flight to Berlin next Thursday.”
Userauthenticates→
AI Agentdelegated intent→
User Consentgrants access→
AI Agentcalls booking MCP→
PaymentAuth · CIBATHE TASK IS SIMPLE. THE TRUST CHAIN IS NOT.
01Who is acting?
02What did I consent to?
03Who approves payment?
04Where do credentials live?
THE BOTTLENECK
Intelligence rises.
Trust lags.
AGENT CAPABILITY RISINGHUMAN TRUST FALLING
RESEARCHCOMPARERECOMMENDBUYACT AUTONOMOUSLY
THE GAP NEEDS IDENTITY · CONSENT · AUTHORIZATION
A NEW KIND OF ACTOR
An agent is not a user.
↗DELEGATEDActs for someone.
◎AUTONOMOUSChooses how.
◷SHORT-LIVEDMinutes, not years.
▦MULTIPLIEDOne sponsor. Hundreds of agents.
THE AGENT PASSPORT
Every agent needs
a provable mandate.
Identity is no longer just who you are.
It is why you may act right now.
EUROPEAN AGENT ID✦
AGENTprocure-assistant-7f3SPONSORJ. Meyer · ACME EuropeCONSENT#c-88213 · REVOCABLE
SCOPEPO ≤ €5,000
EXPIRES17:00 TODAY
ISSUED BY CIDAAS · EU
THE TRUST CHAIN
Every agent action traces back
to a human decision.
●HUMAN
→
✓CONSENT
→
✦AGENT
→
◇POLICY
→
↗ACTION
→
▣EVIDENCE
Human intent must survive every hop.
THE ARCHITECTURE CHANGES
Trust moves from the login
to every action
YESTERDAY
✓LOGIN
×ACTION
×ACTION
×ACTION
×ACTION
TOMORROW
✓LOGIN
✓ACTION
✓ACTION
✓ACTION
✓ACTION
AUTHORIZATION IS A CONTINUOUS LOOP
THE NEW IDENTITY SURFACE
How agents connect
✦→⌘
MCPAGENT → TOOL✦↔✦
A2AAGENT → AGENTModel Context Protocol Authorization Specification, 2025-11-25 · A2A Specification 0.3
ONE SOVEREIGN CONTROL PLANE
Identity for humans,
machines and agents
IDENTITY · CONSENT · AUTHORIZATION
ORCHESTRATION · LIFECYCLE
SECRETS · TOKENS · TRUSTONE PLUGGABLE STACK
One control plane
across actors and systems
MCP CLIENTSChatGPTClaudeCursor
A2A AGENTSLangChainCrewAICustom
HUMAN USERSBrowserMobileCLI
IDENTITY CONTROL PLANEAGENT REGISTRY
MCP AUTH
AGENT AUTH
CONSENT MGMT
FINE-GRAINED AUTHZ
AI FLOW DESIGNERAGENT LIFECYCLEAGENTIC WORKFLOWS
VAULTCERTIFICATE MANAGEMENTSOVEREIGN KEYS
EXTERNAL APISSalesforceSAPSlackGitHubJiraStripe
INTERNAL SYSTEMSERPCRMHRDatabasesFilesML Models
TWO DAYSFOUR QUESTIONS
01 · AGENTIC IDENTITYWho is in control?
02 · MODERN AUTHENTICATIONCan security feel effortless?
03 · DIGITAL SOVEREIGNTYWho holds the kill switch?
04 · IDENTITY AS ATTACK SURFACEWhat does the attacker see?
MEET THE PEOPLE WHO BUILT IT
Demo booths
◇AuthZEN
●User Profile
↻Recertification
▣Mobile SDK
§RFC Station
✦Next Gen Hosted Pages
01 / 23