Conference Description
Key Takeaways
- One-day conference exploring how artificial intelligence is reshaping identity and access management practices
- Covers non-human identities, AI agents, privileged access management, and cloud governance
- Designed for IAM professionals, cybersecurity leaders, and IT security executives
- Addresses regulatory compliance, supply chain identity risks, and policy-based access control
- Takes place 5 November 2026 at Emirates Stadium, North London
Introduction
Identity & Access Management UK returns in November 2026 to examine how artificial intelligence is fundamentally altering the way organisations manage digital identities. The conference brings together IAM practitioners, cybersecurity leaders, and technology strategists to address a central challenge: as AI agents, cloud infrastructure, and machine identities proliferate, traditional control-based approaches to identity management are proving insufficient. The event focuses on building trust across an increasingly complex ecosystem of humans, machines, and algorithms.
This shift reflects broader industry pressures. Enterprises now manage exponentially more identities than they did five years ago, with non-human identities—service accounts, API keys, IoT devices, and automated processes—often outnumbering human users by significant margins. Simultaneously, regulatory frameworks continue to evolve, demanding more rigorous governance and auditability across identity lifecycles.
About This Event
Identity & Access Management UK is a single-day, in-person conference held at Emirates Stadium in North London on 5 November 2026. The programme combines keynote presentations with expert panel discussions, structured around facilitated networking that matches attendees based on shared professional interests. The format is designed to serve both technical practitioners seeking implementation insights and strategic leaders evaluating organisational direction.
AI, Non-Human Identities, and the Expanding IAM Perimeter
A significant portion of the conference agenda addresses the management of non-human identities, an area that has grown increasingly complex as organisations adopt AI agents, robotic process automation, and interconnected IoT and operational technology systems. These machine identities require authentication, authorisation, and lifecycle management just as human identities do, yet they often operate at speeds and scales that traditional IAM frameworks were not designed to accommodate.
The conference examines how AI is both a subject and a tool within modern IAM. AI agents acting autonomously within enterprise systems require their own identity credentials and access policies, while AI-powered analytics are simultaneously being deployed to detect anomalous access patterns and enforce dynamic, risk-based controls. This dual role creates new architectural considerations for security teams.
Governance, Compliance, and Policy-Based Access Control
Identity governance and administration remains a core theme, with particular attention to how organisations can implement policy-based access control in cloud-first environments. PBAC offers a more flexible alternative to traditional role-based models, allowing access decisions to incorporate contextual factors such as device posture, location, time, and risk scores. However, implementing PBAC effectively requires mature data practices and clear policy definitions.
The regulatory landscape adds urgency to these discussions. Evolving data protection requirements, sector-specific compliance mandates, and increasing scrutiny of third-party access all demand that organisations maintain comprehensive visibility into who—and what—has access to sensitive resources. The conference addresses how identity-centric approaches to risk and compliance can help organisations meet these obligations while maintaining operational agility.
Privileged Access, Secrets, and Supply Chain Identity
Privileged access management and secret management feature prominently in the programme, reflecting ongoing concerns about credential theft and lateral movement within enterprise networks. As organisations extend access to partners, contractors, and supply chain participants, the challenge of managing privileged credentials across organisational boundaries becomes more acute. Certificate management and the secure handling of API secrets are closely related concerns, particularly in environments with extensive automation.
Supply chain IAM has emerged as a distinct discipline, requiring organisations to verify and govern identities that originate outside their direct control. The conference explores frameworks for extending identity assurance to external parties without creating unacceptable risk exposure.
Customer Identity and Digital Wallets
Customer identity and access management represents another significant topic area. CIAM implementations must balance security requirements with user experience expectations, particularly as digital wallets and decentralised identity models gain traction. These technologies offer the potential for users to control their own credentials while reducing organisational liability for storing sensitive identity data.
Who Should Attend
The conference is designed for IAM professionals, cybersecurity leaders, IT security managers, solution architects, and directors of risk management. Attendees typically represent large enterprises, financial institutions, technology companies, and industrial organisations with complex identity requirements. The programme accommodates both technical specialists evaluating specific implementations and executives shaping broader security strategy.