Building Identity for an Open Perimeter
summary
Netflix shifts from a network perimeter to identity-first zero trust by building a federation platform called Meechum that issues SAML/OIDC/OAuth tokens, uses Google Cloud Identity for employees and a custom IdP for B2B, and provisions identities from HR event sources like Workday and production events. Adaptive auth combines MFA (push, TOTP, security keys), runtime heuristics, app risk, and device health collected by a native app stethoscope. Integrations are OpenID Connect self-service and API-first (ALB auth and CI/CD hooks), with device checks non-blocking today.
AI-written summary · about
chapters (5)
- 0:00Building Identity for an Open Perimeter Tejas Dharanshi
- 2:48Location Independent Security Approach (LISA) NETFLIX
- 9:15Are all access patterns the same?
- 15:45Federation Hub (Layered Security)
- 23:17Identity as the Security Perimeter
related talks
30mArmy of Proxies! How Netflix scales identity based zero trust...
21mEarning Trust in Identity at Scale
28mIdentity: From Legacy to Microservices
36mCloud Native Identity Management
08mModern Identity Management and Learning from Developers Around the World
32mPlatform Security that will Last for Decades
35mIdentity and Access Management for the Decade Ahead
27mFrom AuthN to AuthZ: The Future of Identity