Conference Description
Key Takeaways
- One-day conference focused on identity and access management in AI-driven and hybrid environments
- Covers emerging topics including non-human identities, decentralised identity, Cloud Infrastructure Entitlement Management (CIEM), and Policy-Based Access Control (PBAC)
- Addresses regulatory developments including eIDAS compliance requirements
- Designed for senior IAM architects, security specialists, and digital transformation leaders
- Features participation from major IAM vendors including CyberArk, Okta, SailPoint, and Ping Identity
Introduction
Identity & Access Management Denmark returns to Copenhagen on 27 October 2026, bringing together senior security professionals to examine how organisations can secure digital identities across increasingly complex technological landscapes. Hosted at Parken Stadium, the conference addresses the intersection of artificial intelligence, regulatory change, and identity security at a time when traditional perimeter-based approaches have given way to identity-centric security models.
The timing reflects broader industry pressures. As enterprises accelerate cloud adoption and integrate AI-powered systems into core operations, the attack surface associated with identity has expanded considerably. Machine identities now outnumber human users in many environments, privileged access extends across hybrid infrastructure, and regulatory frameworks such as eIDAS are reshaping how organisations must approach identity verification and trust.
About This Event
Identity & Access Management Denmark is structured as a single-day, executive-level conference combining expert presentations with networking opportunities. The programme is designed to provide practical guidance on implementing modern IAM strategies while offering insight into emerging technologies and regulatory requirements affecting the Nordic region and broader European market.
The event draws participation from established IAM solution providers including CyberArk, Okta, SailPoint, Omada, RSA Security, Ping Identity, BeyondTrust, Matrix42, cidaas, Bsure, and MPWR Consulting. This vendor presence reflects the breadth of the IAM market, spanning workforce identity, customer identity, privileged access, and identity governance disciplines.
AI Integration and the Evolving Identity Landscape
Artificial intelligence features prominently across the conference agenda, reflecting its dual role as both an enabler of improved identity security and a source of new risk. On the defensive side, AI-powered identity analytics can detect anomalous access patterns, automate access certification processes, and enable predictive access models that anticipate user needs while maintaining least-privilege principles.
However, AI also introduces complications. Large language models and automated systems require their own identities and access credentials, contributing to the rapid growth of non-human identities that many organisations struggle to inventory and govern. The conference examines how identity visibility and intelligence capabilities can help security teams understand who—and what—has access to critical systems.
Predictive access represents one of the more forward-looking topics on the programme. Rather than relying solely on reactive access requests and approvals, predictive models analyse user behaviour, role patterns, and business context to provision appropriate access proactively. When implemented effectively, this approach can reduce friction for legitimate users while maintaining security controls.
Privileged Access and Non-Human Identity Management
Modern Privileged Access Management extends well beyond the traditional use case of securing administrator credentials. Today’s PAM implementations must address service accounts, API keys, certificates, and the secrets used by automated processes and DevOps pipelines. The conference explores how organisations are adapting their privileged access strategies to accommodate these requirements while maintaining operational efficiency.
Non-human identities present particular governance challenges. Unlike human users, machine identities may be created programmatically, exist temporarily, or operate across multiple environments simultaneously. Many organisations lack comprehensive visibility into their non-human identity population, creating blind spots that adversaries can exploit. The programme addresses practical approaches to discovering, classifying, and governing these identities throughout their lifecycle.
Secret management intersects closely with these concerns. Hardcoded credentials, improperly stored API keys, and inadequate rotation practices remain common vulnerabilities. Centralised secrets management platforms can mitigate these risks, but successful implementation requires coordination between security, development, and operations teams.
Cloud Entitlements and Policy-Based Access Control
Cloud Infrastructure Entitlement Management has emerged as a distinct discipline within the broader IAM landscape. As organisations operate across multiple cloud providers, the complexity of managing permissions, roles, and policies multiplies. CIEM solutions help security teams identify excessive permissions, detect risky configurations, and enforce least-privilege access across heterogeneous cloud environments.
Policy-Based Access Control offers a more dynamic alternative to traditional role-based models. Rather than assigning static permissions based on job function, PBAC evaluates access requests against defined policies that can incorporate contextual factors such as location, device posture, time of day, and risk score. This approach supports more granular access decisions and can adapt to changing conditions without requiring manual role modifications.
The relationship between CIEM, PBAC, and broader Identity Governance & Administration platforms reflects ongoing consolidation in the IAM market. Organisations increasingly seek unified approaches that can address workforce identity, privileged access, and cloud entitlements through integrated platforms rather than disconnected point solutions.
Regulatory Compliance and Decentralised Identity
The eIDAS regulation continues to shape identity practices across European markets. The framework establishes standards for electronic identification and trust services, with implications for how organisations verify customer identities, issue credentials, and maintain audit trails. The conference addresses practical compliance considerations and how eIDAS requirements intersect with broader IAM strategy.
Decentralised identity represents a longer-term architectural shift that may fundamentally change how identity verification works. Rather than relying on centralised identity providers, decentralised models enable individuals to control their own credentials and selectively disclose attributes to relying parties. While enterprise adoption remains nascent, the technology has potential applications in customer identity scenarios, supply chain verification, and cross-organisational trust relationships.
Customer Identity Considerations
Customer Identity & Access Management operates under different constraints than workforce IAM. Customer-facing systems must balance security requirements against user experience, accommodate diverse authentication preferences, and scale to support potentially millions of external users. Privacy regulations add further complexity, requiring careful attention to consent management, data minimisation, and cross-border data handling.
The conference examines how CIAM strategies are evolving to address these challenges while supporting business objectives around customer engagement and digital service delivery.
Who Should Attend
The conference is designed for senior professionals responsible for identity and access management strategy, implementation, or oversight. Relevant roles include IAM architects, identity governance specialists, security directors, IT operations leaders, and digital transformation executives. Attendees typically represent large enterprises, government agencies, financial institutions, healthcare organisations, and industrial companies where identity security carries significant operational and regulatory implications.
The programme assumes familiarity with core IAM concepts and focuses on advanced topics, emerging technologies, and strategic considerations rather than foundational material.
Conclusion
Identity & Access Management Denmark 2026 arrives at a moment when the discipline faces simultaneous pressure from technological change, threat evolution, and regulatory development. For organisations navigating the transition to AI-augmented operations while maintaining security and compliance, the conference offers an opportunity to examine how peers and vendors are addressing these challenges in practice.