Show Notes
Who Really Owns Your Consent? From Messaging Apps to Payroll System In this episode we discuss how to build a privacy-first payment ecosystem and are we ready to challenge the convenience-first mindset that says “Just store the card, it’s easier.”
Messaging apps raised the bar. Identity systems are catching up. It’s time for financial systems to follow, to make consent the default, not the afterthought.
More from The Identity Navigator
The Badge That Printed Itself: A SharePoint TokenForgery, Decoded Word by Word One line from my morning threat intel digest: “CVE-2026-55040. Critical. CVSS 9.1. SharePoint on-prem authentication bypass, under active exploitation.” This episode stops and takes the whole sentence apart, from first principles, until it reads likeplain English. Then we walk the heist: how a stranger with no account and no password handed SharePoint a homemade admin token, and SharePoint said welcome back.
Three labs. Five breached companies. One testing vendor named Irregular.
Everyone is using AI. Almost nobody can prove what it’s doing. In this solo episode, we design a runtime AI governance platform from scratch on a whiteboard, and then meet PulseAI, the product IAM veteran Amit Masand built at IDMEXPRESS. With the numbers justifying the problem, an honest competitive map, who it’s not for, and a free AI-traffic risk assessment for listeners. Links PulseAI by IDMEXPRESS: idmexpress.ai Company site: idmexpress.com) Amit Masand on LinkedIn: linkedin.com/in/amit-m-67b4692 Contact: [email protected] Listener offer: mention this episode for a complimentary risk assessment of your AI traffic, no commitment.
Previously on The Identity Navigator (recommendedlistening before this episode): Episode 40: SCIM - The protocol that finally made provisioning grow up
0-40% of SaaS accounts in the mid-2000s belonged to people who'd already left the company. Ghost accounts, quietly sitting there — and that sadly hasn't changed much today. This episode: where SCIM came from, what it actually solves, and what it still doesn't. Core RFCs: RFC 7642 — SCIM: Definitions, Overview, Concepts, and Requirements RFC 7643 — SCIM: Core Schema RFC 7644 — SCIM: Protocol