ISSA-LA Security Summit 2024

IAM and SSO platforms are static and binary – users either pass for access or they do not. "Contextual entitlements" is a concept that refers to the system access and processing rights and privileges that users, services or groups have within specific contexts or situations. These entitlements can vary based on the environment, the role of the user or group, device trust, and legal or regulatory frameworks.

In this session, participants will be able to explain the concept of contextual entitlements for cloud and on-premise access, and how it differs from traditional static and binary Identity Access Management (IAM) and Single Sign-On (SSO) platforms. They will understand how entitlements can vary based on context, and they will be able to identify and analyze the various factors that influence contextual entitlements.

Finally, participants will be able to apply the concept of contextual entitlements to real-world access management scenarios leveraging Cloud Reverse Proxy, CASB, and SASE platforms, incorporating access and data loss prevention policies to achieve contextual entitlement faculties. They will be able to design access control policies that dynamically adjust entitlements based on changing contexts, ensuring a more nuanced and secure approach to managing system access and user privileges.

Learning Objectives:
Understand the concept of contextual entitlements.
Analyze the factors influencing contextual entitlements.
Apply contextual entitlements in access management scenarios. Define, and then identify!