Identiverse 2026 - My takeaways

I put together a short recap video with my takeaways from Identiverse 2026, and the biggest theme that stuck with me was this:

Identity is expanding from access control into action control.

For years, so much of the identity conversation has centered on authentication: proving the right human is at the keyboard, getting them into the right system, and reducing risk at login.

That still matters. A lot.

But this year, the conversation felt like it had moved further downstream.

Who, or what, is allowed to act?
Is that action being taken by a person, a system, an agent, or some delegated workflow?
Who approved it?
What context matters?
Can we trace it?
Can we stop it?

The rise of AI agents and non-human identity made that shift feel very real. The most interesting discussions were not abstract AI hype. They were operational questions about trust, authorization, accountability, governance, and control.

My personal takeaway: the next chapter of identity will be less about isolated authentication events and more about trusted action across connected systems.

That includes humans.
It includes machines.
It includes AI agents.
And it includes the delegated relationships between them.

Identiverse made it clear that the identity layer is being asked to support more actors, more context, more automation, and more real-time decisions than ever before.

Exciting space. Lots to solve. And a good reminder that identity continues to move closer to the center of security and business strategy.

I’d love to hear what stood out to others who attended.