This episode is presented courtesy of SailPoint. Rob Sebaugh, Senior Identity Strategist at SailPoint, joins Jeff and Jim for a wide-ranging conversation on the past, present, and future of identity governance. Rob brings more than two decades of practitioner experience to the table, including 16 years running large-scale identity programs before making the move to the vendor side. The conversation covers what identity governance means today, why it must move to the forefront rather than be treated as an afterthought in an agentic world, and how organizations need to think fundamentally differently about non-human identities. Jeff and Jim explore the concept of treating AI as a first-class identity, how AI is beginning to replace rubber-stamp access certifications, the shift toward policy-based access control, and the practical path toward zero standing privilege. The episode wraps with a lighter conversation about Rob's 3D printing hobby.

About SailPoint:

SailPoint (Nasdaq: SAIL) is defining the new era of adaptive identity security. In a world where non-human identities now significantly outnumber humans, our AI-powered platform unifies identity, security, and data intelligence to protect today’s enterprise from advanced identity-based threats. We deliver the identity solution that spans both the breadth of identities and the depth of context needed to drive real-time access with confidence. Built on principles like zero-standing privilege and contextualized risk, our SailPoint platform transforms identity from a point of vulnerability into a powerful security advantage. Trusted by many of the world's leading organizations, SailPoint secures the enterprise with intelligent, autonomous identity security.

Learn more about SailPoint: https://www.sailpoint.com/

Connect with Rob: https://www.linkedin.com/in/rob-sebaugh-1ba9013/

Connect with us on LinkedIn:

Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/

Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/

Visit the show on the web at http://idacpodcast.com

Timestamps:

00:00 Introduction

00:48 Rob Sebaugh and the identity strategist role at SailPoint

04:38 Practitioner advice from the field

07:49 What SailPoint does: the hotel key analogy

11:04 Buying identity technology means buying a business process

13:30 What identity governance is and why it still matters

16:47 Risk-appropriate governance and privileged access

19:39 Non-human identities and the scale of the agentic challenge

22:57 Treating AI as a first-class identity

24:28 When AI makes governance decisions: beyond rubber stamping

28:04 Is identity governance a binary decision?

29:58 Securing data inside AI and large language models

34:09 Identity: the field that reinvents itself

35:01 Identity as the new control plane

37:21 Is all access privileged access?

40:25 Zero standing privilege in practice

44:22 Innovation, continuous identity, and what SailPoint is building

46:28 Identity posture management

50:13 Practitioner advice for the next three to five years

53:00 The future of IGA in ten years

57:44 Lighter note: 3D printing with Rob Sebaugh

1:05:35 Final thoughts on SailPoint

Keywords: Rob Sebaugh, SailPoint, identity governance, identity security, IGA, non-human identities, agentic AI, zero standing privilege, just-in-time access, identity posture management, control plane, zero trust, policy-based access control, AI certification, rubber stamping, sponsor spotlight, IDAC, Identity at the Center, Jeff Steadman, Jim McDonald