You can’t manage IAM at the speeds required today without good data. Sean O’Dell and Andrew Cameron kicked off the series by making it very clear that if your data is a mess, nothing else will work.

Why data comes first

Identity teams today ingest an overwhelming number of signals, including authentication events, device posture, network behavior, location anomalies, entitlement usage, and more. In theory, this should enable adaptive, continuous identity management. Alas, in practice, it’s often noise.

Session 1 focused on how to turn that noise into a living, contextual identity profile that organizations can trust. The more data you pull in, the more effort it takes to clean, transform, normalize, and verify it. Without a structured approach, real-time signals (and we do love Shared Signals!) can’t be used meaningfully for security or access decisions.

This isn’t a tooling problem as much as it is a data hygiene problem. Continuous identity, according to both Sean and Andrew,  only works when the inputs are clean.

The identity fabric: a layered model

To frame the conversation, Andrew and Sean described a fabric-based model for workforce identity, one that organizes real-time signals into a structure IAM teams can build on.

The architecture discussed follows five major layers:

1. Workforce Identity Data Platform (Core) – Aggregates identity signals and applies transformations, normalization, and verification.
2. Identity Fabric / Continuous Ingest & Analysis – Ensures signals are captured as they happen.
3. Functional Plane – Implements standards such as Shared Signals and identity verification workflows.
4. Orchestration Layer (Signal Plane)-  Translates, routes, and processes signals for policy-driven decisions.
5. Action Plane – Executes access changes, risk responses, and lifecycle updates.

If verification at the ingest stage is weak, every downstream decision is compromised.
Garbage in, garbage out.

Data models and identity graphs

One of the biggest takeaways from the session for me was the shift from making decisions only at admin-time or run-time to using analytical and operational graphs that inform decisions continuously.

That requires structuring identity data into interconnected models, such as:

• Enterprise Graphs — capturing relationships, teams, and reporting structures
• Identity Graphs — tracking authentication events, account lifecycles, and risk
• Entitlements Graphs — mapping access rights and whether they’re used
• Shared Signals Graphs — enabling bidirectional trust updates between systems

These graphs form the context layer that continuous identity depends on.

While I’m sure we’re going to discuss this in more detail in the next few webinars, here’s a sneak preview of what we’ll hear: The orchestration hub and the data platform should remain separate. Blending them increases the risk of operational bottlenecks and muddies the clarity of responsibility between “understanding identity” and “acting on identity.”

The road ahead

Session 1 set the stage for what’s coming in the next three parts of the series: orchestration, decisioning, and automation. But the foundation—data—cannot be skipped or assumed.

Clean data isn’t glamorous work, but it is the most strategic investment an identity program can make. Without it, continuous identity is just an aspiration.

With it, continuous identity becomes the natural next step in modern IAM.

Stay tuned for Part 2 on Orchestration.

Disclaimer: The views expressed in the content are solely those of the author and do not necessarily reflect the views of the IDPro organization.

Author:

Heather Flanagan, is the Principal at Spherical Cow Consulting, where she helps organizations navigate the fast-moving world of digital identity and Internet standards. With more than 15 years of experience translating complex technical concepts into clear, actionable strategy, Heather is known for her ability to bridge communities, guide collaborative work, and make standards development a little less intimidating.

Named to the 2025 Okta Identity 25 as one of the top thought leaders in digital identity, Heather is also a regular speaker and writer, focusing on standards, governance, and the real-world challenges of identity implementation. If there’s work underway to shape the future of identity or rethink how the Internet functions, she’s probably in the middle of it.

The post Continuous Identity, Part 1: Why Your Data Foundation Matters More Than Anything appeared first on IDPro.

How Experience Impacts Identity Professionals’ Skillsets

We examined responses from IAM professionals with varying years of experience and categorized their expertise in different identity-related areas. The goal? To uncover how expertise develops over time and what this means for the future of identity management.

Key Experience Groups Analyzed:

• 0 – 2 years: Early-career professionals entering the IAM field.
• 3 – 5 years: Mid-level professionals building their expertise.
• 6 – 10 years: More experienced professionals refining their specializations.
• 11 – 15 years: Senior professionals leading strategic IAM initiatives.
• 15+ years: Experts and veterans shaping the industry’s direction.

The Skills That Define Each Stage of an IAM Career

Early-Career Professionals (0-2 Years) – Building Foundations

• Those with 0-2 years of experience focus primarily on authentication, authorization, and cloud-based identity solutions like IDaaS (Identity-as-a-Service).
• Many also highlight API protection and access certification as key areas of early exposure.
• However, this group often lacks experience in governance, compliance, and more advanced security architectures.

Takeaway:
New professionals should focus on strong fundamentals like authentication protocols, access control, and API security while seeking exposure to governance and compliance areas.

Mid-Level IAM Professionals (3-10 Years) – Broadening Knowledge & Specialization

• Access certification, identity governance, and directory services become more prominent in this stage.
• Many professionals begin working on privileged access management (PAM) and multi-factor authentication (MFA) implementations.
• Skills like risk-based authentication and policy-based authorization gain importance.

Takeaway:
Mid-level professionals should hone their expertise in governance and directory services while exploring advanced security measures like PAM and risk-based authentication.

Senior & Expert-Level IAM Professionals (11+ Years) – Shaping the Future of Identity

• Those with 11+ years of experience are more likely to work in identity governance and administration (IGA), federated identity, and self-sovereign identity (SSI).
• This group is leading discussions around verifiable credentials, decentralized identity, and blockchain-based authentication.
• They are also deeply involved in setting enterprise-wide security strategies and compliance frameworks.

Takeaway:
Experienced IAM professionals should focus on emerging trends like decentralized identity while shaping organizational security policies and governance models.

Key Insights from the Survey Data

Experience Brings Specialization:

While early-career professionals focus on fundamental security practices, mid-career experts develop deep specializations in governance, risk management, and advanced security protocols.

Governance & Compliance Come with Time:

Most professionals don’t engage with identity governance and compliance until 6+ years into their careers—suggesting these are skills best learned through hands-on experience rather than theoretical knowledge.

Cloud & API Security Are Crucial at Every Stage:

From newcomers to veterans, API protection, cloud IAM, and authentication technologies remain key focus areas, reinforcing their role as core competencies in identity security.

How to Advance Your Career in IAM

• For Beginners (0-2 Years):
  • Learn authentication, authorization, and cloud IAM basics.
  • Gain hands-on experience with IDaaS, MFA, and API security.
  • Build a strong foundation in identity standards like OAuth, SAML, and OpenID Connect.
• For Mid-Level Professionals (3-10 Years):
  • Develop expertise in governance, compliance, and privileged access management (PAM).
  • Work on risk-based authentication and federated identity implementations.
  • Get familiar with identity governance tools and architectures.
• For Senior Professionals (11+ Years):
  • Lead strategic security initiatives and develop IAM policies.
  • Stay ahead of trends in decentralized identity, verifiable credentials, and blockchain authentication.
  • Contribute to industry standards and best practices.

Final Thoughts: The Future of IAM Careers

IAM is a rapidly growing field, and professionals who continuously adapt and specialize will be in high demand. Whether you’re just starting or have decades of experience, understanding these trends can help you navigate your career strategically. Make sure you respond to next year’s IDPro Skills, Programs & Diversity Survey! It only gets better the more people respond.

What do you think? What skills have been most valuable in your IAM journey? Let’s chat about it in our members-only Slack!!

Want More Insights Like This?

Join IDPro for expert insights around IAM trends, career tips, and more!

Author:

Heather Flanagan, Principal at Spherical Cow Consulting, comes from a position that the Internet is led by people, powered by words, and inspired by technology. She has been involved in leadership roles with some of the most technical, volunteer-driven organizations on the Internet, including IDPro as Principal Editor, the IETF, the IAB, and the IRTF as RFC Series Editor, ICANN as Technical Writer, and REFEDS as Coordinator, just to name a few. If there is work going on to develop new Internet standards or discussions around the future of digital identity, she is interested in engaging in that work. You can learn more about her on LinkedIn or reach out to her on the IDPro Slack channel.

The post From Beginner to Expert: How Experience Shapes Identity Professionals’ Skillsets appeared first on IDPro.

Now, it’s time to welcome a new leader to help shape IDPro’s future. With the board size set at nine members, we have one open seat for an engaged and enthusiastic professional to join us in July 2025.

What It Means to Be on the IDPro Board

This isn’t a ceremonial role: It’s hands-on! IDPro’s board is operational, which means rolling up your sleeves to keep things moving. Board members typically contribute 10–15 hours per month, participating in monthly meetings, managing projects, and engaging with existing and potential members.

If you’re passionate about the practice and the profession of digital identity and want to actively contribute to the success of IDPro, we’d love to see you throw your hat in the ring. As a board member, you’ll:

Help steer IDPro’s strategic direction
Support financial health and organizational growth
Strengthen the IAM community and professional network
Work alongside industry leaders and practitioners
Gain leadership experience and visibility in the field

We value collaboration, inclusivity, and diversity; we encourage identity professionals from all backgrounds to apply.

Ready to Nominate?

If you or someone you know would be a great fit, now’s the time to act! Self-nominations are welcome—after all, who knows your passion and skills better than you?

To apply, email director@idpro.org for the nomination packet.
Deadline for completed nominations: April 30, 2025.

This is your chance to make a real impact in the world of digital identity. We can’t wait to see who steps forward!

The post Join the IDPro Board – Nominations Now Open for 2025-2028! appeared first on IDPro.