The Identity Navigator

Rohit Agnihotri
  • 5.0 (3)
  • TECHNOLOGY
  • UPDATED BIWEEKLY

Welcome to "The Identity Navigator," your compass in the world of Identity and Access Management (IAM). Join us as we navigate the complexities of digital identity, security, and access control. Stay informed with expert insights, industry trends, and practical tips to safeguard your organization's digital assets. Whether you're new to IAM or a seasoned pro, tune in to unlock the strategies that will elevate your security posture. Subscribe to The Identity Navigator podcast and chart your course to secure, efficient IAM solutions.

  1. 12/21/2025

    #31 Exposed – When Vault Becomes the Breach: Inside Cloud Secrets Heists

    In this episode of The Identity Navigator, I dig into how my favorite cloud secrets managers—AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, Kubernetes Secrets, and HashiCorp Vault—can quietly turn into an attacker’s jackpot when configuration, permissions, and monitoring fall behind. Using MITRE ATT&CK technique T1555.006 as my backbone, I walk through real-world campaigns like LUCR-3/Scattered Spider and SCARLETEEL, break down the full attack chain from leaked IaC and developer creds to mass secret harvesting, privilege escalation, and stealthy exfiltration, and show youexactly what to watch for in API activity, policy changes, and cloud-native logs. You’ll leave with practical playbooks for least-privilege design, secret rotation and vault hygiene, multi-cloud and Terraform hardening, and cloud red teaming with tools like Stratus Red Team—plus culture-first tactics to make “I made a mistake” a safe sentence so both human and machine identities stay out of the breach headlines theidentitynavigator@gmail.com https://www.linkedin.com/in/rohit-agnihotri

    18 min

  2. 11/15/2025

    #30: The Consent Crisis

    Who Really Owns Your Consent? From Messaging Apps to Payroll System In this episode we discuss how to build a privacy-first payment ecosystem and are we ready to challenge the convenience-first mindset that says “Just store the card, it’s easier.” Messaging apps raised the bar. Identity systems are catching up. It’s time for financial systems to follow, to make consent the default, not the afterthought.

    14 min

  3. 10/05/2025

    #29 The Evolution of IGA Tools

    Identity Governance & Administration didn’t arrive fully formed, it evolved. In this episode we walk through the journey of IGA. From homegrown scripts and spreadsheets to heavyweight platforms like Sun, Oracle, and CA. The rise of governance-first thinking with SailPoint and Saviynt . How compliance, cloud, and complexity reshaped the market Email: theIdentityNavigator@gmail.com LInkedIn: /rohit-agnihotri

    50 min

  4. 07/27/2025

    # 28 Hello, I’m Root: When Entitlement Becomes Ego

    Remember when smoking looked cool? For years in tech, holding root access was the same, a badge of honor, proof you were trusted, heroic, untouchable. In tech, we have our own “smoking”, permanent root/admin access. For years, being the engineer with root was a badge of honor. It felt powerful, even heroic. You were the one who could swoop in and “save the day.” But beneath the surface, this creates real risk. Root access becomes not just a tool but a piece of personal identity. We start to believe that if we lose it, we lose our status. In this episode we deep dive into the psychology of root access, the shared toothbrush model of access and access detox campaigns.

    33 min

  5. 06/07/2025

    #27 Where Are the Aliens?

    Have you ever wondered why we haven’t discovered alien life? And how does this connect to IAM maturity, systems thinking, and organizational psychology? In this episode, I dive deep into the Fermi Paradox, explore the complexities of IAM maturity, and draw surprising parallels between the search for extraterrestrial intelligence and the journey organizations face in their IAM evolution. Tune in as we map out the path from noise to clarity in IAM, and maybe even discover the “filter” we all need to overcome. Email: theIdentityNavigator@gmail.com LinkedIn: ⁠⁠https://www.linkedin.com/in/rohit-agnihotri/

    34 min

  6. 05/03/2025

    #26 Bearer Tokens: From Briefcases to Browsers

    This episode was inspired by Ozark: A crime drama where a financial advisor is pulled into the world of money laundering   Ever wondered why simply holding a token grants you access—no passwords, no challenges, just pure possession? In this episode we trace the surprising journey of bearer tokens from their financial origins to the backbone of modern digital identity. Whether you’re architecting an OAuth flow, defending APIs, an Identity enthusiast, a historian, or simply curious about the mechanics behind that “Authorization: Bearer …” header, this episode will reshape your understanding of access control. Email: theIdentityNavigator@gmail.com LinkedIn: ⁠https://www.linkedin.com/in/rohit-agnihotri/

    24 min

  7. 03/16/2025

    #25 Resource Mining - A pre-requisite that is never met

    In the context of IAM, resource mining refers to theprocess of discovering, cataloging, and analyzing resources within an organization's environment to understand their structure, permissions, ownership, and access controls. The goal is often to gain visibility into the resources (e.g., applications, servers, databases, files, or cloud infrastructure), their associated identities and usage patterns , enabling effective governance, security, and compliance. Let's understand this tricks of the trade and how it is applicable to a cloud solution,  zero trust strategy, an AD environment and an AD-Application-IGA ecosystem. Email: theIdentityNavigator@gmail.com LinkedIn: https://www.linkedin.com/in/rohit-agnihotri

    44 min

  8. 03/02/2025

    #24 Self-Healing IAM Systems - A Business Centric Framework

    A self-healing IAM system enhances enterprise security by automating identity governance, mitigating operational risks, and ensuring adaptive security resilience. By leveraging this framework organizations cancreate dynamic, self-correcting identity frameworks that reduce administrative overhead and improve security posture. Self-healing mechanisms ensure robust access management by automatically detecting and mitigating disruptions, policy misconfigurations, or security anomalies. Email: theIdentityNavigator@gmail.com LinkedIn: https://www.linkedin.com/in/rohit-agnihotri/

    23 min
See All (32)

Trailer

Ratings & Reviews

5
out of 5
3 Ratings

About

Welcome to "The Identity Navigator," your compass in the world of Identity and Access Management (IAM). Join us as we navigate the complexities of digital identity, security, and access control. Stay informed with expert insights, industry trends, and practical tips to safeguard your organization's digital assets. Whether you're new to IAM or a seasoned pro, tune in to unlock the strategies that will elevate your security posture. Subscribe to The Identity Navigator podcast and chart your course to secure, efficient IAM solutions.

Information

  • Creator
    Rohit Agnihotri
  • Years Active
    2023 - 2025
  • Episodes
    32
  • Rating
    Explicit
  • Copyright
    © Rohit Agnihotri
  • Show Website
    The Identity Navigator