Authors / Eric Olden
Photo of Eric Olden

Eric Olden

Co-founder and CEO at Strata Identity

About:

Eric Olden is widely recognized as one of the architects of identity management on the Internet. He created the first single sign-on product for web applications, launched the first Identity as a Service company, and co-authored the ubiquitous SAML identity federation standard, which allows users to move seamlessly between secure websites without logging in, like when you navigate from your online banking site to redeem points on a travel site.

He is currently CEO and co-founder of Strata Identity, which allows companies to mix and match incompatible cloud identity systems, saving customers millions of dollars and months of manual labor per project.

Strata Identity’s customers include major brands such as Kroger, Navy Federal Credit Union, Publix, and Annexus. The company has been named a “Cool Vendor” by leading analyst firm Gartner, a SINET16 Innovator, a top cyber security startup by several media outlets, and runner-up for Most Innovative Company at the 2021 RSA Conference.

 

Specialization:

Eric Olden specializes in identity management, pioneering innovations in federated identity, multi-cloud Identity Orchestration, and policy governance to help enterprises securely and efficiently manage identities across diverse cloud environments.

 

Education:

BS Sociology, with a minor in Large Object Weight Estimation, University of California, Berkeley

 

Accomplishments

  • CEO of Strata Identity and previously founded three other software companies
  • Co-author of the SAML standard
  • Wrote a new standard called IDQL, solving the policy, compatibility, and security issues between multiple clouds
  • Created the first pre-integrated SSO platform and the first IDaaS company
  • Author of the book, “Identity Orchestration for Dummies”
  • Holds several patents in identity management and cybersecurity
  • Forbes Technology Council Contributor
  • A frequent speaker at leading industry events and guest podcasts

The latest from Eric Olden

Agentic Identity
Human-in-the-Loop: A 2026 Guide to AI Oversight That Actually Works

Simulators don’t just teach pilots how to fly the plane; they also teach judgment. When do you escalate? When do you hand off to air traffic control? When do you abort the mission? These are human decisions, trained under pressure, and just as critical as the technical flying itself.

Strata in the News
New Survey from Cloud Security Alliance, Strata Identity Finds That Enterprises Are in a “Time-to-Trust” Phase, As They Build Foundations for AI Autonomy

Agentic workforce is scaling faster than identity and security frameworks can adapt SEATTLE – Feb. 5, 2026 –The latest survey report from the Cloud Security Alliance...

Agentic Identity
Zero Trust Demands Zero Standing Privileges

Zero trust is one of the most overused phrases in security. It’s also one of the most misunderstood. Zero trust isn’t a product. It isn’t a...

Agentic Identity
If You Can’t Explain an Agent’s Actions, You Can’t Defend Them

Audit has a reputation problem. Too often it’s treated as a logging exercise – something to satisfy compliance after the system is already built. That approach...

Agentic Identity
Why Agentic AI Forces a Rethink of Least Privilege

Key Takeaways The static way we implement least privilege is broken. Traditional least privilege assumes access can be designed in advance. Agents reason, plan, and adapt...

Agentic Identity
Why One Compromised Agent Can Take Down Everything You Built

Every serious security architecture starts with an uncomfortable assumption: credentials will be compromised. Not maybe. Not hypothetically. Eventually. Most systems are designed with that assumption baked...

Agentic Identity
Zero Standing Privileges for AI Agents: How to Stop Privilege Drift in Agentic Systems

Key Takeaways Privilege drift is the number one reason AI pilots die in security review. Access must be considered from the creation of an AI pilot;...

Agentic Identity
Building an AI Pilot’s License — From Sandbox Hours to Production Readiness

Pilots don’t just train in simulators; they log hours and earn licenses. A private pilot needs a minimum number of simulator sessions before solo flight. Commercial pilots need even more. The process is standardized, measurable, and required.

Agentic Identity
Training for the Unexpected — Why Identity Simulation Matters More Than Unit Tests

Enterprises adopting agentic AI face their own black swans. Identity outages, token replay attacks, or rogue agents don’t happen every day, but when they do, the impact is massive and immediate. The problem is that most organizations still rely on unit tests, integration tests, or static code reviews.

Agentic Identity
The Agentic Identity Sandbox — Your flight simulator for AI agent identity

We’ve all heard the promises about agentic AI transforming business operations. The reality? Most enterprise AI agent projects never make it past the pilot stage, and it’s not because the technology doesn’t work.

Agentic Identity
Rogue agents: When your AI decides it knows better

Left unchecked, agents will escalate permissions, chain tokens, and quietly gain more access than intended. They aren’t “malicious” — they’re opportunistic.

Agentic Identity
Over-scoped agents: The permission sprawl that will end you

Every engineering team is spinning up agents. And they're all over-scoped because nobody wants to be the person whose agent doesn't work.

Agentic Identity
Blind spots: Your agents are operating in complete darkness (and so are you)

Traditional IAM logs were built for humans clicking buttons. Your agents are executing complex decision trees at machine speed. It's like trying to track Formula 1 with a sundial.

Agentic Identity
Human-in-the-loop: When your AI’s creativity becomes your legal liability

Here's the truth nobody wants to admit: Your autonomous agents are making promises right now that you don't know about, can't afford, and will be legally forced to honor.

Agentic Identity
Agent credential replay: Why bearer tokens are digital cash in a tornado

Here's what should keep you up at night: Your agents are passing these digital IOUs to each other thousands of times per second. Each handoff is an opportunity for theft, confusion, or replay.

Agentic Identity
The compliance gate: where AI dreams go to die (or get born)

The difference between projects that die at the gate and those that sail through isn't luck. It's infrastructure. Specifically, identity infrastructure that makes compliance say yes:

Agentic Identity
Measuring ROAI: The numbers that separate AI winners from AI wannabes

Here's what nobody tells you about ROAI: You can't measure it in PowerPoint. You can't calculate it in pilots. You can only count it in production.

Agentic Identity
From Pilot to Production: The Identity Bridge Nobody Wants to Talk About

Your security team isn't trying to kill innovation. They're trying to keep you employed. When they look at your AI agents, here's what keeps them up at night:

Ready to make identity consistent?

Use Identity Orchestration to integrate, automate, and secure identity and apps across hybrid and multi-cloud environments

Get a demo

Secure your AI Agents, before they take action
Get started
Skip to content