Identiverse

What this conference is for

Identiverse is the largest identity-focused conference in North America. Run by CyberRisk Alliance, its 2026 Las Vegas edition at Mandalay Bay was the 17th and drew more than 3,700 attendees and close to 200 sponsors, a record per the organizer. In 2026 it also added a two-day Washington, D.C. event (November 9 to 10 at MGM National Harbor, with registration open), themed around fraud, AI, regulation, and trust, aimed at the policy and public-sector audience the Las Vegas show reaches less well. Unlike a single-vendor user conference, its program spans the entire identity stack: workforce IAM, CIAM, PAM, governance, authorization, decentralized identity, and the standards work underneath all of it. It is where the people who build identity systems compare notes on what is actually working.

When and where

Identiverse 2027 returns to Mandalay Bay in Las Vegas from June 28 to July 1, 2027. Registration and the call for presentations are both open; the organizer has not published a submission deadline on the main site, so check the submission portal before planning around it.

Who should attend

Architects and engineers who want deep technical sessions, identity and security leaders tracking where the market is heading, and anyone working on standards. The hallway track and practitioner community are as valuable as the stage.

Identiverse 2026 recap

Identiverse 2026 ran June 15 to 18 in Las Vegas, and the agenda made the year's center of gravity clear. A few threads dominated:

• Agentic and AI identity moved from theory to roadmap. Identity for AI agents, scoped and delegated access, and the authorization questions around autonomous software were everywhere, reflecting how fast non-human identity has become the field's hardest problem.
• Passkeys at enterprise scale. The conversation shifted from "should we" to operational reality: recovery, enrollment, and rolling phishing-resistant authentication across a workforce. See our passkey rollout checklist.
• Deepfakes versus identity verification. Defending remote proofing against AI-generated documents and injection attacks was a recurring theme across the identity verification track.
• Verifiable credentials and wallets kept maturing, pushed by eIDAS 2.0 and the W3C VC Data Model.
• Session security and ITDR. With token theft now a primary attack path, continuous evaluation and identity threat detection drew large audiences.

The throughline: identity is now the security control plane, and the workload is shifting from authenticating humans to governing machines and agents. For our take on the agentic shift, see the blog.

Coverage

We cover Identiverse in full. This recap is independent community coverage of themes and takeaways, not an official summary. Always confirm specific announcements with the vendors and the official site.