In this episode of Identity Decoded, recorded live at Identiverse, hosts Roy Akerman and Rob Ainscough sit down with George Roberts, Principal Architect for Identity and Access at McDonald's, to talk about Identity Security at a scale few practitioners ever encounter. George manages 2.2 million workforce identities across 95 markets worldwide. The conversation covers how McDonald's built a single source of truth without 1,500 separate HR integrations, why frontline workers get a printed, paper-based MFA sheet as their "least common denominator" security factor, and George's long-term vision for verifiable credentials and distributed identity. They also dig into why identity teams get looped into new technology initiatives too late, and why George doesn't think AI or continuous identity are overhyped, just under-answered.
🎧 Episode Highlights
[01:42] George's role as principal architect for identity and access at McDonald's, and what it takes to manage a workforce identity environment this complex.
[02:47] Why 93% of McDonald's workforce identity isn't McDonald's employees, it’s the franchise and licensee model behind the numbers.
[04:19] Solving fragmentation without 1,500 separate HR integrations, using a workforce management platform as a practical single source of truth.
[06:38] Balancing ease of use and security for frontline workers who can't be required to use a personal device for MFA.
[10:21] The paper-based MFA solution: a printed sheet of codes as the "least common denominator" authentication factor, washing machines included.
[14:17] The long-term vision: verifiable credentials and distributed identity, where every person owns and presents their own identity.
[20:07] How a global training-app rollout became the business driver that finally got every market onto a single identity platform.
[23:50] Why identity teams need to be looped in early on any new technology initiative, not two weeks before it goes live.
[28:20] Rapid-fire: identity's biggest myth ("it's easy"), the leadership mistake of picking pure security or pure business enablement, and the hard truth that vendors build for perfect customers who don't really exist.
[33:39] The trend George says isn't overhyped, just under-answered: AI and continuous identity, and why the industry hasn't caught up yet.
🔑 Key Takeaways:
Takeaway 1: Identity Security at scale isn't a technology problem, it's an organizational one. McDonald's got 100% of its markets onto a single identity platform not by pitching security, but by attaching identity to a business initiative that leadership already wanted.
Takeaway 2: Security and business enablement aren't competing goals. George describes his team as "50% security and protection, 50% business enablement," and says the biggest mistake leaders make is assuming identity is purely one or the other.
Takeaway 3: Perfect solutions don't scale to imperfect environments. High-turnover frontline workforces, unmanaged personal devices, and thousands of connected applications mean elegant, modern identity solutions like FIDO keys often aren't practical. Sometimes the right answer really is paper.
👤 Guest Spotlight:
George Roberts, Principal Architect for Identity and Access, McDonald's
George Roberts leads strategy, technology, and architecture for workforce identity at McDonald's, along with the standards and policies for identity and access across the company. Over his eight years on the team, he's helped grow the company's global identity platform from roughly a third of McDonald's markets and 800,000 users to full coverage across 95 markets and 2.2 million workforce identities. George sits within McDonald's global cybersecurity organization, where he works to balance security requirements with the practical realities of a high-turnover, largely device-unmanaged frontline workforce. In this episode, he shares how McDonald's built that scale, and where he sees identity heading next.
Stay connected
https://www.silverfort.com
https://www.linkedin.com/in/sirtwist
https://www.linkedin.com/in/rob-ainscough
https://www.linkedin.com/in/roy-akerman
