CloudNativeSecurityCon North America 2024

In this talk, we'll dive into the complexities and frustrations of implementing multi-tenant identity and access management (IAM) systems, a significant headache for anyone juggling the diverse needs of B2B, B2C, and M2M environments. An important part of the discussion is on the decision-making process around multi-tenancy configurations: should we push for a unified system that makes resource sharing a breeze, or should we double down on tenant isolation for the sake of security? This conversation goes beyond; we'll address the intense effort needed to rally devs, ops, and security into a single platform approach, moving away from those isolated IAM solutions that barely scratch the surface of broader IAM challenges. Expect a candid look at the hurdles of tenant isolation, ensuring a smooth user experience, handling policy enforcement, auditing, and finding the right balance between self-hosting and leveraging cloud services—highlighting their impact on a multi-tenanted IAM approach.