Digital identity is moving from passwords and static accounts to passkeys, runtime controls, and AI agents. In Inverted Podcast #24, the hosts unpack what is changing in identity security, authentication, and authorization, and why inverted product teams cannot treat identity as a solved login checkbox.
The discussion covers phishing-resistant MFA, Zero Trust and continuous access, identity debt from years of static grants, the EU Digital Identity Wallet, and how delegated identity for agents will stress existing IAM models. Static accounts and one-time login checks were never enough for adversarial environments; runtime signals and narrower grants are catching up to that reality. If you own platform APIs, customer identity, or enterprise access, this is a compact briefing on where the field is headed and what product teams should prioritize next.
About this episode
This is a hosts-led roundup episode. The Inverted Podcast hosts survey the biggest identity trends shaping security product work: passkeys versus passwords, AI agents and delegated access, Zero Trust runtime controls, and government-backed digital ID programs such as the EU wallet under eIDAS.
Key takeaways
- Identity change is accelerating: passwords give way to passkeys and phishing-resistant methods.
- Authorization and continuous access matter as much as the initial login.
- AI agents need delegated identity patterns, not long-lived superuser accounts.
- Identity debt from static grants and forgotten entitlements is a product risk.
- Runtime signals and Zero Trust beat one-time authentication for real threat environments.
- Regulatory pressure, including EU digital ID wallets, will force enterprise and bank roadmaps.
Topics covered
- Identity security trends and industry acceleration
- Passkeys versus passwords and phishing-resistant MFA
- AI agents and delegated identity challenges
- The identity debt problem in enterprises
- Runtime versus static security controls
- Continuous access and risk signals
- EU Digital Identity Wallet and eIDAS pressure
Chapters
00:00 Introduction
00:11 The Acceleration of Identity Change
01:13 From Authentication to Authorization
02:22 AI Agents and Identity Challenges
03:33 The “Identity Debt” Problem
04:32 Runtime vs. Static Security Controls
06:00 Continuous Access & Risk Signals
07:30 Government Digital ID (EU Wallet)
09:10 The Future of Identity & AI Agents
FAQ
Who should watch this episode?
Security professionals, IAM engineers, CISOs, developers, product managers, compliance teams, and anyone tracking digital identity and AI security. It is especially useful if you need a shared vocabulary with executives on why identity roadmaps now include agents, wallets, and continuous authorization.
What is “identity debt”?
Years of static accounts, over-broad grants, and unfinished migrations create latent access risk. Like technical debt, it compounds until a breach, audit, or agent-driven workload exposes it.
How does this connect to inverted products?
Inverted products succeed when unauthorized access stays rare. Modern identity is the control plane for that outcome, especially as agents and continuous authorization change the threat model.
Related on Inverted PM
- Podcast #27: How the World of Authentication Is Changing
- Podcast #28: Agentic AI Meets Digital Identities with Nick Steele
- Podcast #23: Recovery
- Meet the hosts
- All Inverted Podcast episodes
Connect with the hosts and guests on the video or on LinkedIn to continue the conversation.
🎧 Find the Inverted Podcast on LinkedIn, Spotify, YouTube, Amazon Music/Audible, iHeartRadio, or invertedpm.com.
Explore more
Browse all Inverted Podcast episodes, read the blog, or meet the hosts.
Related: Episode 28 – Agentic AI & digital identities with Nick Steele · Episode 27 – How authentication is changing