Opening Keynote: Trust: The New Frontier in Technology

[Music] [Music] what does it mean to trust someone to put your confidence in someone or something Trust is something you feel something you earn and something you give with the advent of new technology we've been asked to trust a greater number of people and things than ever before a website a device a driver a date the strangers renting your house for the week the people you accept it as friends who you've never met in real life over the years we've established symbols of trust ways of verifying who we are and what we promise we give our word through handprints handshakes seals signatures and now oddly we're back to prints these declarations are critical because it makes us vulnerable it means we are giving away something we care about and as our world grows bigger with each new person site and device the more fragile trust becomes the easier it becomes for trust to be broken trust is precious it's timeless as our networks expand both physically and online the opportunity to earn and protect our community grows all the more significant it's scary but it's also incredibly exciting because with trust comes endless possibilities ladies and gentlemen please welcome Octus chief marketing officer Ryan Carlson [Music] good morning welcome to octane 19 and welcome back to San Francisco are you excited we have been working so hard all year for everything you're gonna see in this event and I can safely say that I speak on behalf of the team or we are super excited for it that it's finally here Trust is certainly a timely topic in technology today and we're gonna talk about it here this morning and this week but we also think that Trust is a timeless topic it's why we explored the history of trust in that opening video once again with the help of our good friends from epic digital we're really happy with how that turned out octane 19 is our favorite event every year for many reasons first and foremost in our mission to connect everything octane is our chance to connect with you and to connect all of you with each other in doing that we're building on this movement this movement that was started right here in San Francisco for the first octane many years ago but clearly octane is much bigger more breakout sessions more labs more keynote speakers more customer speakers than ever before and more sponsors in red before we have 80 sponsors for octane this year these partners are an indispensable part of bringing octane to you every year please make sure you see them in the expo hall later but let's give them a big round of applause right now now is our theme for octane this year now is the time the opportunity to move your company forward to think bigger to move faster to use technology to its fullest potential has never been more clear the time is now and the time for me now is to introduce our keynote speaker Todd McKinnon infuses a sense of urgency into all that we do at octa but it's the sense of urgency that comes from a place of commitment a place of purpose our opportunity at octa has never been more clear our time is now to be responsible for you as customers to make you the very best that you can be and Todd leads the charge I'm proud to work alongside him I'm honored to introduce him please join me in welcoming to the stage our CEO and co-founder Todd McKinnon Todd hello octane it's great to be here back in San Francisco our hometown after four years in Vegas a four year run I sound like Celine Dion octa recently celebrated its tenth birthday a decade of building octa a lots changed for us Freddie and I professionally as well we started the company together in 2009 here's a picture of us in those early days in front of our first whiteboard just after we started working together if you look at this picture you can see our grand plan for world domination is written on the whiteboard why is that funny and if you can see we lay out the timeline over the next six months we did have a sense of urgency and I laugh at this because you can see that the revenue is going to start after three months right over my head it says revenue starts I took a little bit longer but the essence was there the spirit was there and we've made a lot of progress over the years here's Freddie and I toasting ten years as a company we had a few more people that the team we'd built up joined us and celebrating that big milestone growing from two people up to nearly two thousand and along the way we had all these All Hands meetings every week getting together as a team talking about what we were trying to accomplish here's a picture of one of our first All Hands this you are looking at the entire octa company at our first All Hands meeting along with computers that are vintage 2009 you can tell computers have advanced a lot as well here's a recent All Hands we did to celebrate 10 years we filled up a whole stadium well not really a stadium but a theatre but you get my point and this is including not including the people that were on line around the world that are part of this movement now is our team and here is our first octane octane 13 identity ladies and gentlemen is hot and if you look at this picture so we went four years without an octane we unleashed this force on the world with octane 13 and I think there were 62 people there but we were very proud of those 62 people don't you laugh and if you look at the person on the stage That's not me and although it looks like Malcolm Gladwell that's not Malcolm Gladwell he would come a few years later at octane 16 this is our our former VP of product Michael fire tag who look to just like mike malcolm gladwell but that was what we were doing for entertainment look-alikes at octane 13 and here's a picture last year octane 18 it's grown it's even bigger this year take a look around it's amazing thank you for coming and this is possible because of you so it's an honor to be here with you it's an honor to talk about this movement we're on and do it along with such a great group motivating group it's incredibly satisfying technology's changed a lot in ten years as well the things that did not exist 10 years ago it's an amazing list its life impacting we use these things every day there's been many big trends starting with cloud octa was about cloud we got excited about enabling the cloud and building that the identity layer for the cloud and helping companies transition to the cloud and that to our great fortune has really come to fruition with cloud is the dominant computing model moving forward but there's been many more trends think about what's happened with networking 4G is completely rolled out people are talking about 5g and what that means for the world and broadband is everywhere it even works on planes which is amazing Mobile Mobile has been a huge onrush of technology it's really become the remote control for our lives we can control the world from the phone whether it's hailing a car getting food delivered getting anything we want delivered incredibly impactful you know I was thinking today I drove away from the house and I can control my garage door while I was driving away I always forget that so it's really good to be able to shut that thing or my thermostat is amazing social networking changed the way we've impacted with interacted with people how we've influenced the world machine learning artificial intelligence these trends go on and some people think that augmented reality or virtual reality will replace the mobile devices the way we interact with the world and what's unique about all of these trends is not any one in particular it's that when you take them all together when you take them all together they're pervasive they're impacting every organization in every industry no industry is exempt so what this means is you're at a technology company conference but congratulations because you are also a technology company there's no denying it it's impacting every industry we talk about retail and what ecommerce and Amazon are doing for retail but it's not just retail it's every industry so you need to be a technology company or your replacement will be a technology company think about other industries everyone's trying to be the Amazon of their industry until Emmas before Amazon is the Amazon of their industry and media music has been flying and it's dying and now it's coming back with streaming or cord-cutting what's happening into linear TV or who's making movies is it Netflix is it Amazon is it someone else is it Studios huge change their healthcare healthcare is a massive industry science leading to new treatments technology automating the patient experience all the way to the back office the whole healthcare supply chain or transportation almost as big as health care autonomous vehicles what happens with logistics and routing around that the list goes on and on it applies to every part of your business it's not just your website it's not just about making your mobile app better it's about your customer your employee experience giving them the best technology it's about your supply chain it's about interacting with your partners the impact of technology is pervasive and we're doing a great job as a collective group here of taking this reality head-on and thriving and that's been the most satisfying thing for us over the past 10 years so thank you [Applause] and there's a great example to bring this these ideas to life and we'll share it with you now Ella financial is a top 20 u.s. bank we also are among the biggest auto finance providers in the United States today Li Financial is the original FinTech disrupter digital is all we do we work with eighteen thousand auto dealerships across the u.s. we have more than seven million customers so as customers have become more technologically savvy their expectations are they can transact from their pockets and we want to meet them where they are so we have a full range of mobile applications and online capabilities for our customers to be able to do the things that they want to do when they want to do them at octa we're good at welcoming people so please join me in extending a great octane 19 welcome to Meghan Crespi from Ally Financial she's the chief technology officer [Music] hi thank you for joining us tell us a little bit about a lie it's 100 years old yeah 100 years old this year a little older graduate here's thanks thank God a spider like nine decades yeah so Li financial we are celebrating our 100th anniversary or 100th birthday this year about 10 years ago we were thinking about our customer base and really what they needed what else could we do for them as we contemplated that we realized that customers didn't need another Bank they needed a different kind of Bank a bank that was focused on them their needs the way that 21st century consumers wanted to transact and we went out and did just that in fact we were one of the first online only digital banks we consider ourselves to be the original FinTech disruptor to be honest so you're the chief technical officer yes so what does that mean it Ally that means different things at different organizations I'm curious what that means how do you fit into that role of disrupting yeah so at Ally the CTO is responsible for running with a huge team of really dedicated people the technology that runs our business we have a very robust auto finance business we're one of the top auto finance lenders in the country and we have an online-only bank with a lot of different products if you haven't checked us out I or do to do that my role in particular is over the way we operate our data centers the way we think about our hybrid cloud model and the way we think about enterprise architecture is it is there debate or discussion about if you're a technology company or is that is that clear yeah that's entirely never have to fight that battle that's right yeah we are absolutely a technology company have been but even more so since we started our online only bank we have no bricks and mortar we have no branches and so we meet our customers as I said in the video where they are they expect to be able to transact from their pockets on their mobile phones and that's what we need to do they can't transact in a physical location and so technology is all we do yeah when you how did take me through when you think about orient and orienting around the customer experience is that a different it's is that a different process than you know it's different process in thinking about finance or strategy around how you attack a financial market yeah how do you I'm just curious about how you orient the group around thinking about the customer experience it sounds like this there's no branches yeah mobile app's important how do you how do you think through that yeah so we're customer centric as I mentioned earlier when we thought about building an online bank it was really putting the customer first we have a number of focus groups we have a number of customers who we interact with we have product teams that are comprised of business people who are thinking about what products we want to put forward in the marketplace have digital teams as well as technology teams that all come together to think about kind of what's the next frontier in digital financial services how do you how do you think about build versus buy there's so many things it sounds like you've really done a good job of building this really engineering team development team design team and if I know anything about design and development teams they think they can build everything yeah how do you think about what to build versus what to buy yeah as with any company funds are not unlimited right and with all of the exciting things we want to bring to market we wouldn't possibly have all of the time to develop them ourselves we spend time developing the things that are really sort of our secret sauce the things that create the customer experience on a consistent basis that our customers and dealers have come to expect from us and we look for partners to provide technologies that underlie that that enable us to build solutions that are robust and scalable and that meet today's security demands and then when you think about it the other thing about customer experiences it's great when it's such a focus but one of the things I've noticed is that the trade-off between trying to make something incredibly secure and actually making the customer experience amazing it's quite challenging yeah how do you how do you balance that so you know sort of over my career which is you know the last so years security and usability in my view used to be at odds it used to be either you had kind of very secure applications or highly useable applications what we're seeing more and more is that there's an absolute understanding of the criticality of providing secure and seamless customer interfaces customers have come to expect that and we for sure need to have that so from our perspective we look for partners that can help us to create frictionless experiences for our customers blending the security they've come to expect along with the user experience that we want to provide yeah I think that's that's a pretty insightful approach the opening video that you saw yeah talked about trust mm-hmm how does it Ally trust goes along with money often how I think about trust yeah maybe let's maybe start with them with when you think about your build versus buying your vendors how do you think about trusting vendors yeah so when we think about vendors we spend a lot of time and energy evaluating potential partners in the marketplace we are very accepting and robust security standards we look for vendors that will honor those standards as well where security is at the forefront of the way they run their businesses as well and then Trust in general is it is it pervasive in the organization in terms of talk about great customer experience balancing security how does trust to play more broadly sure Trust is at the center of the customer experience if you think about it the only way our model works without bricks and mortar is if our customers trust us explicitly that's like people want to go get their money at a physical in past they've wanted to like see the money right there's a run on bank because there was a bank there that's right and nothing involved in runs on banks no we aren't it in fact you know since you brought it up for us if we are unavailable if for some reason our capabilities our mobile app our online presence aren't available it's almost like a run on the bank right you don't have access to your yeah so we take very seriously the reliability the scalability in the availability of the technology we provide to our customers what is that it reminds me what is the UM how's the regulatory environment is it been I mean I know we got a lot more regulation ten years ago with the financial issues how's that been over the last yeah regulation is is tough right it's it's it's intended to be back to your question about trust our customers expect that we're compliant with the regulatory environment which is there for the benefit of all consumers so we are we are very in in in a very good place with our regulators and we have to ensure that all of our technology and the business products that we create are compliant with a regulatory environment today yeah yeah it's interesting it's interesting challenging opportunity when you think about the future the future for a lie how do you it's interesting to think about so the financial services is like every other industry has I think a lot of change that technology can still bring to it what do you think would make that change happen faster in the industry versus what might slow it down yeah is it regulation is it how much of it is technology versus the way people think about things disrupting disruptive companies versus established companies you must think about that a lot it's it's really a multi-pronged issue you need to balance security with scalability with the regulatory environment the demand of the marketplace you mentioned Amazon earlier right it's kind of a business that all of us have come to understand you don't ever have to be trained how to use an Amazon the Amazon app for example so from our perspective we need to keep all of those kind of competing priorities in balance so that we bring the right technology forward for the future use cases of kind of digital financial services of the future it's a great story Megan thank you for coming to share with us and we appreciate you being an octa customers yeah [Applause] [Music] so there the potential of technology is tremendous it's impacting every industry what we can do with it is amazing but it's not without its challenges if you're a technology company there's a war on talent and you're in the middle of the battle and you have to think about what you're building versus what you're buying Megan touched on it briefly trying to make that balance because if you make the wrong decision there you can go down the road with the wrong vendor you can not build something you should have built it's challenging who do you partner with you have to think that through and get that right the regulatory environment is challenging and the first challenge is that a lot of the regulations that we as companies are dealing with are old and out-of-date they made sense in a different technological timeframe but they're out of date and how do we balance moving forward in regulating the things that do need to be regulated well at the same time not going too far and over-regulated and slowing down innovation in progress and it's a tough balance of strike and you have to strike it in a way that brings your customers your employees the regulator's your investors on board and has that and so they have that confidence in you every user that's using your technology is worried about how their data is being used what is this company going to do with my data is it directly tied to the service I want are they use it in other ways is it private am I going to have to go through my whole life and upend it because the data is misused how do you think through those challenges and all of this added together is a tremendously a tremendous amount of complexity for the end users and for everyone else on your environment how they put it together how they secure it how its deployed how the end user uses it and you take these challenge challenges together they're significant because it's leading to an erosion of trust this is a problem this is a problem because we believe in technology we believe in the progress of technology we believe in the potential of technology we believe in the impact it can have and if there's an erosion of trusts if people don't trust the websites what people are doing with their data the benefit for their lives what that leads to is a big issue and technology won't be able to reach its potential and that would be a shame that would be a big problem so Trust is the new frontier you're a tech company and Trust is the new frontier for you and for all of us and we believe that octa is playing a critical role in helping you tackle this exciting new frontier our vision as a company is to enable any organization to use any technology it's about an able Minh it's about thinking about what you're doing what tools and technologies and platforms can help you be successful and we do that by connecting everything every organization every person every device every application every piece of technology in your in your environment connecting it together removing the friction so you can be successful and we achieve this vision with the octa identity cloud it's the first and only independent and neutral cloud identity platform it's built from the ground up 100% in the cloud it's not part of any other platform it's its own platform so it doesn't have a preference it doesn't a favor one application one vendor over another and it's one platform for both your workforce identity scenarios and your customer ID any scenarios supports various use cases across those two product lines that you're all familiar with use cases are things like login a user in have any user register challenging that user for a authentication parameter that's that's required for that use case and at the foundation of the octa identity cloud is the octa integration network integration is in our DNA the more things we connect to the more valuable octa becomes so we've been very serious about this and focused on this since the beginning and as a result we have the broadest and deepest integration catalog in the IND street by far and it's not even close we connect to many many many things in your ecosystem and we strive to connect everything over time because the environment you're in it's best-of-breed not by choice but by reality people talk about best-of-breed sometimes are sweet and you're going to use a sweet vendor as if you have a choice but the reality is no one company makes all of your devices all of your computers all of your platforms all of your databases all of your applications all of your middleware all of your networks all of your it's just not not possible it's it's best-of-breed by choice and if you think about what identity does in this environment identity is the key to so much of this it's the key to security how you secure these experiences it's the key to having a great user experience an identity is the connection between people and technology and Trust is about how people feel so it makes sense that identity is the key to trust so what we're really building is a trust platform it's an identity platform but it's really a trust platform and we're unique in our ability to provide this we're independent and neutral we don't have a horse in the race we want what's best for you in terms of technology and we have a track record we have a decade of doing this we have a decade of hardening the surface making it scale making it secure it's built into our culture it's built into our DNA and a proven track record and probably at least as important maybe more is we have a team of people built around it a team of people that culturally are focused on making you successful that's their sole purpose that's what they wake up in the morning passionate about doing so last week many of you that are from the United States know this was opening day in major league baseball the crack of the bat the smell of the grass opening day well if you worked in octa engineering you ought that also meant that you were in a war room making sure that the octa implementation from major league baseball calm for the millions and millions of streaming streaming users was working and reliable and secure and now we're gonna have a conversation about that with my next guest please join me in welcoming to the stage the chief information security officer of Major League Baseball Neil Boland [Music] [Applause] [Music] all right Neil thank you for coming Major League Baseball did you play baseball and literally he played Little League right hit play shortstop I played first base first base yep I'm not my play catcher that's why I didn't last long [Laughter] tell us about your role what does this see so at Major League Baseball I mean I'm assuming it has something to do curity but tell me about your the purview of your role I mean it it covers all the things you think about digital security but also leads into physical security at the end of the day because everything is now interconnected so you know our fans makes use your word before and trust us or entrust us when they're in our ballparks for their you know both their digital safety in terms of the information they provide us but their physical safety so we're thinking about all those things across that whole spectrum in terms of like how we manage information secure information that might touch a transaction or might touch like an industrial control system that secures a ballpark it sounds very broad the expansive role is how does it does Major League Baseball did they to use the language we do like talking about trust and Trust is the trust as a platform and Trust as a thing or is it is it more indirect is it more about security no it's Trust is pretty it's a value to theme I mean it's an institution that's been around for 150 years and you know we're known as America's pastime and you know people have you know really great experiences growing up we talked about Little League with baseball and you know when you think about like your kids you think about like what you want them to get involved in when you think about your experiences there's an inherent trust that you want to have that all that's gonna be okay and be safe and and be an experience that you can think back to so from a brand heritage standpoint from a reputation standpoint Trust is pretty crucial yeah it's almost like a it's a it's cultural almost yeah that's part of the American culture on opening day I mentioned the octa war room what were you trying to accomplish from the major league baseball perspective I think that would be interesting to chat about I mean aside from keeping my job yeah yeah that all worked oh yeah we both know we it was a big big change for us you know we went from having built a prior you know a word winning platform from scratch and have it be very proprietary and there's a lot of pride of authorship in that we have just an amazing development team I mean these guys are the best and as they were looking at the next evolution of MOV comm we considered you know what to do with identity and I think everybody felt that it was worth taking a look at partners and proven partners that were already working with like octa yeah and seeing if we could extend that success that we had for the clubs and for the work force out to our fans our consumers so we came to octa last year and you guys rose to the occasion and we talked about bringing tens and tens of millions of fans on board to the to the platform and be and to be ready for opening day this year so it was a huge push a lot of our development teams working day and night to get us to where we were just a week ago and we were leaning heavily on octa to get there so we established that war room in Chelsea Market in Manhattan with you know a lot of folks from your team a lot of folks from our development team a lot of folks from the cyber and InfoSec team there and it was great to be together to enjoy opening day but to make sure that everything went off without a hitch which it did and it was great yeah I was I was really happy about that I tell you a funny story me too I'll tell you a funny story I was I know we were following the progress of the implementation and I know we were rallying around to support it I just realized I use a lot of baseball language rallies you know that's things anyways rallying around to support it and I was watching TV and then the t-mobile commercial came on where t-mobile and Major League Baseball doing a promotion where you're going to log into it you get a new phone you log into t-mobile and I said oh yeah we better get that war room there's a lot of people for sure but Aqsa crushed it I have to say you know I think you know folks were nervous because it was new and new for us you know having you know developed everything ourselves in the past but you know you guys were a great partner you brought your whole team to bear there's a ton of excitement I think there are a lot of baseball fans of doctah two's yeah you know we got one right here it's got guys in the room were wearing their colors and such which was good and you know just just you guys were literally you might as well have had mlb.com email addresses yeah your whole team functioned as if they were on my team which and that's trust right yeah makes me very proud yeah DM so you mentioned earlier that you were an octa customer you use doctor for your employees workforce and then you later adopted us for customer identity Major League Baseball comm talked about that internally how did that happen in terms of getting people's confidence for that new use case how did that play out internally yeah we had to solve identity at MLB internally first and for you know a variety of reasons most of them related to security but then the the model kind of turned quickly and user satisfaction upon implementing octa just went through the roof to the point where you know I have a cyber program that has you know over a dozen different technologies in it octa being one of them and when you ask people you know what their favorites are our octaves right up there at the top and I think a lot of that is because you know for me you're helping me secure the organization but for my user you know the internal workforce user you're making their day better and like kind of reducing you know you're a frictionless here but reducing friction making it effortless to move from you know mode to mode and such so people love it and so we get tremendously positive feedback and kind of riding that wave of positive feedback took us to look at the consumer space and like how do we take that success outside to our consumers and have that same kind of like satisfaction experience and success in that space so you know that was the the bet that we made and we were able to pull that off so I'm pretty pumped about that yeah we talked a lot about internally at the company about you know customer success leads to great things so the more you successful you can make customer the more that want to use you and the more they talk about it so it's a real important part of our strategy what would it have taken for you to build this yourself I think about 10 years conferences well we built the last platform ourselves and it did take longer than it certainly took this time and I'm sorry I thought revenue was going to start I saw that the was good but you got there the the thought for us was that you know we are you know as you're the last speaker say we wanted to focus on the the business of baseball and you guys have crushed the business of identity and it just keeps getting better and I think like we're using like this much of your product you know capabilities which is like this so we're excited about where this takes us and we can let you guys worry about that aspect of things you know knowing that like you think about it the same way that we do you care about it the same way that we do both from a security standpoint and from like a visionary standpoint in terms of enabling our key constituents our employees and our consumers and you know the roadmap for us kind of brings those two groups closer to closer and closer together and enabling them off of one common identity platform is gonna be amazing it's gonna open a ton of new doors for us yeah that's that's exciting baseball is very metrics driven everyone everything's quantified and analytics are are used what are your metrics or objectives for identity you have like a batting average for it I think you know it happens in two modes right one is that you know we have metrics as a relate to you know security incidents and breaches and such and by far octa has impacted that metric tremendously bringing that number down down down good it's positive impact it's positive super and and then on the consumer side you know the metrics that you and I focused on for opening day were things like you know the demand which we saw goes significantly up from last season which is good for baseball and I think it was good for the the use case that we put forth octa I think actually really you know rose to the occasion optimized our use cases so where we thought we were at and where we got to I mean you guys far exceeded those numbers they were just around like again on the consumer side you know response time you know latency and ultimately customer satisfaction there we talked about technology and how it's impacting industries how is the um I mentioned baseball has been very analytical and quantitative how is the all the new data about launch angle and speed and how is that impacting things you know all the baseball now has tons more metrics about how fast every ball is hit how hard every throw hat they know the spin rate on every pitch is that how is that changing things I mean think about it from a sports science perspective right you think about things like managing you know injuries and optimizing behaviors to improve performance but also to make sure that people have like longer careers and such so there's a lot of that as relates to that type of those types of models so I think that's to me the most exciting thing because it keeps you know it protects you know younger players coming in from like potential mistakes or methods that might like diminish yeah less folklore and more actual science but commit and then you know and then understanding like how you can improve your gaming getting those metrics into the hands of like the people that it matters the most - yeah well we really appreciate you being an octa customer and we're honored to stand behind you as you bring your product in your brand to the world thank you very much Neal thank you look forward to the road ahead yeah yeah [Applause] it's great to chat with a customer like Neil and Major League Baseball about how they're using multiple products from the octa portfolio products are a very important part of our strategy but they're just one part of it it's broader than that in addition to products we focus on integrations and making sure that you have this comprehensive set of integrations and we pair those products and integrations by supporting use cases these are powerful use cases that help you get your jobs done and it's related to data because the more success you have with use cases the more data that's generated and the more value we can take from that data and pump back into those products for you this is our strategy it's comprehensive if you talk to other vendors in the industry they may have one of these elements or maybe two they probably don't have all four and they certainly don't have all four of these and they don't think about them in the related way that we think about them it's a it's a comprehensive strategy and today we are moving all of these areas forward starting with data we see billions of authentication events every year on the active service and we're continuously looking at ways that we could take that data and gather insights from it and funnel that back into the products to make them better and make them more valuable for you and we're doing that with a new capability called risk-based authentication this takes all that treasure trove of authentication data and pairs it with machine learning to bring actionable intelligence to our adaptive authentication products so everyone in here has knows the concept of risk and what makes a nice indication or a user risky or not risky whether it's a unknown machine or whether it's a foreign network or a device that you're suspicious about the posture of that device we know the concept of risk the problem is if you try to use products to take that risk profile and build a bunch of rules out to kind of capture that you quickly run into a problem where it's you think you need a few rules and then you have to add some more rules to catch a corner case and then you add some more and pretty soon you have a full time job of maintaining these rules and the effect of it and the impact of it is actually not even that positive so what we've done is we've taken all of the data across every customer every user using octa and with the machine learning figured out what constitutes different risk profiles and then we exposed that to you so you can decide what you want to do based on those different risk profiles whether it's you want to challenge with multi-factor or a hard hard token multi-factor or maybe a lower risk user can just come through with no password and this is an enhancement that will is applied directly to your adaptive multi-factor authentication product or your adaptive single sign-on product so the product gets better with you not having to do anything it's very powerful this is an early access today and it would be generally available in the second half of this year it's a the this this is going to make things much better much secure and much easier to use integrations we talked about him a lot they're really the lifeblood of our platform when we started octa there were a couple unique things about it and one of the unique one of the unique things that was built from the ground up as a cloud service the other unique thing was that it was delivered as a prepackaged end-to-end solution prepackaged with the integrations you would need to connect your technology to be successful and this is important because the products at the time before this the identity products were more toolkits they based based on protocols and they left too much of the work up for you we changed that with this pre integrated approach and at first we built all of the integrations ourselves we went out and got customers we talked to them about what we were using we went back and inside of our metadata based platform we built the integrations and then we got that customer successful moved on but over time we knew that if we wanted to connect everything this wasn't going to be enough we need to we needed to take a different approach and that approach is really to open things up open things up it's the power of open we had to be an open platform for this region scale we needed to enable everyone to build these integrations whether you're a customer or a partner build the integrations upload them into the octa integration network sharing with the community the platform gets more powerful that's the power of open and this is the hallmark of great platforms harnessing openness to deliver value to the entire ecosystem people mean different things when they talk about the word platform it's a very heavily used word in technology and we actually have a precise meaning of it sometimes people talk about platform they mean something broad and solid write that like you could stand on and it's not going to fall down some people mean it's just a technology with multiple products that's a platform we mean a platform is open it lets other people contribute to it extend it customize it make it their own build a solution on top of it the quintessential example is the iPhone when you first got your iPhone it had a calculator a phone a few other apps it wasn't until later they opened it up with developer kits and the app store and it turned into what it is which is the remote control for our lives with millions of applications and even entire industries built on top of the iPhone that is the power of open more value for customers more value for the ecosystem and today we're taking this philosophy that we did in the octa integration network and taking it even further with octa hooks octa hooks as a developer you there's two ways you build integrations there's single sign-on integrations or there's lifecycle management integrations lifecycle management integrations 4d provisioning and provision users an octopus is going to completely expand what's possible with the octa integration network it allows any developer to customize and extend important events inside of octa events like login registration deleting the user changing the user all of these events these critical points in time you can extend with your own code and what that does is it makes some things that you're doing today far far easier easier create easier to maintain and it makes some things possible that aren't even possible today so let me show you what I mean imagine your code running in response to events happening inside the identity cloud for example if you want to respond to a user being registered with a marketing campaign in Marketo you can do that with an octa hug or let's say you want to when a user logs in or registers you want to check your own database your own database of known trusted customers or you want to use a partner like Experian to do some sophisticated fraud checking to make sure that's a really user you can do that with a hook the possibilities are endless I could go on and on about the possibilities hooks is incredible it's available in production today it's available in production today you can start using it right away and what is hooks gonna do what is hooks gonna do for us what is the power of open gonna do we think about the breadth of our integrations hooks is going to expand that tremendously think about 6,000 integrations today accelerating quickly to 60,000 and beyond that's the kind of impact we're talking about depth breadth of its integrations that's what's important about this and that's why I'm so excited about octa hooks so integrations and how many systems you can connect to are very important but that's the foundation that's the that's the plum Manor that's the fabric what really pays the bills is the use cases use cases deliver value to you so you can have more Eva you could get more value out of octa and in turn deliver more value value to your businesses so you scan when I say use cases it's important understand I mean so a use case can be as simple as just logging a user in having a single single sign-on from your octa log into another app registering a user authorizing a user and now I'm excited to share how we're opening up this capability in a way that's tremendously impactful for you and your organization's every product you use from octa is built on these five fundamental building blocks these building blocks of identifying users authenticating them enrolling them activating them authorizing them it's a these critical building blocks and last year we were thinking about this internally and I challenged the engineering and product teams to take a step back take a longer-term view and think about what would happen if we took the power of open and applied it to the core of the octa identity cloud and the result is a profound step forward called the octa identity engine yeah it's it's incredible it's it's a customizable cell set of building blocks for every identity used case so it's all configurable via our API or you can use the admin console and you can take these core building blocks and customize exactly and make them solve every specific identity use case you have so you're not you're not limited to the use cases out-of-the-box you can customize them to extend to any use case possible and when you think about what we're doing we're opening this up we're moving from this solution approach to this platform approach which is very powerful but it's a little different than some other platforms if you think about the Amazon Web Services platform that's very very great it's very very fine-grain the services are very low-level and it leaves a lot up to the developer or the user to stitch them together we've taken a more balanced approach we've taken ten years of lessons building the oxide entity cloud and we have we've worked very hard to strike the right balance between what you need out of the box and what should be predefined for you and what should be customisable to get you to these this flexibility and supporting all these use cases and this applies both to our workforce and our customer identity products to let you do things that are incredibly are really going to have incredible impact on your world so for example you you might want to and this is a very powerful in common use case you might want to on if a customer is coming to your website you might want to not write upfront make them register with a username and a first name and last name an address and a password it's like it's a little forward right you want to get to know them a little better before you ask them for all that information what this allows you to do is just tell the identity engine what you want to do hey when the first person first comes to the site just ask him for their name so I can personalize a little bit and then going forward you can ask them for more and more and maybe when they're ready to buy something or sign up for your service you can ask ask them for a credential and complete the transaction or maybe for your employees you want to have the flexibility to have different branding four different subsidiaries inside of your company that's the so these are some examples of the power of these the unlimited number of ways that you can use the octa identity engine to take your deployments of octa and take the impact to an entirely new level so the opt identity engine is in beta today it's being used successfully by beta customers and it's going to be available in production in the second half of this year so this is sweet this is sweet you have to see this in real time to understand the power of this so I'm going to bring out our amazing demo team that's going to blow you away with this [Music] [Applause] hello everyone my name is John and for this demo I will be the vice president of engineering at ticket Co where we connect fans to their favorite artists now one of my key missions is to ensure that we are building trusted tailored customer journeys that are timely integrated with the rest of our technology stack now nowhere is this more important for us than during the registration process after all if someone comes to our registration page and encounters friction they may never become a customer of ours up until now we have been using octaves predefined registration process but my growth hacking team tells me we can really optimize this page for increased signups and reduce abandonment if we do two things first of all kill the password and then secondly delay asking what people's favorite genre is until later on in the user journey so the art identity engine allows us to securely customize the user journey to do just that so we've rebuilt our experience on top of the art identity engine underneath it all sits the same admin console that my team already knows and loves you can see we have a few test users configured here but we're ready to get this out into market let's take a look hi everyone I'm Daisy I'm just your average concert goer and I found this website ticket Co offering discounted event tickets it looks like if I register today I can get 20% off the final price of my ticket so I definitely want to go ahead and do that the registration process for a ticket Coe is simple it's easy I just need to put in my name and my email address and I'm good to go so once I've done that it looks like ticket Coe is basically just taking me to their landing page a couple of events happening in the city One Direction concert Weird Al Lana Del Rey but none of these actually look that fun to me at the moment so I'll just come back when there's something better going on but when I head over to my inbox yup it looks like tikka Co has already sent me my discount code with a few additional events happening around the city all right so let's pause there and take a deeper look at TJ's journey with us thus far so first of all we took her context the fact that she's a new user looking to browse our site for the first time and use that to inform her journey through the Arta identity engine because his first experience we want it to be as frictionless as we're prompting her only to register her name and email before authorizing her to browse so let's go back over to our directory here let's refresh it and yep looks like Daisy was now registered and you can see that she has a status of no password because we haven't prompted her to enroll one yet now the second part of teh Jews journey was a tight integration into our email marketing system Marketo our marketing team wants to ensure that newly registering users are automatically put into the appropriate email drip campaign so that they immediately receive a great welcome email that's tailored for them so in order to do that we are going to use off two hooks to extend octa and we wrote a little bit of custom logic to instruct Marketo on what to do so whenever a new user registers in octave we're going to trigger an event hook that calls this function to add the user to a Marketo list we are going to create the user as what Marketo calls a lead then we're going to figure out what geographic list they should be in and then put them into that particular list which is why you sautes you receive a welcome email for San Francisco let's check back in on her alright so back in my inbox I have this email from ticket Co with a few additional events happening in the city I've been wanting to check out the Beyonce concert for a while so I'm gonna go ahead and grab a couple of those tickets before they get sold out but it looks like before I can finish Lee officially finish up my purchase I just need to complete my profile seems really quick though I just need to send myself an email so let me head back over to my inbox now and yep it looks like ticket Co has already sent me that one-time authentication link I just need to click on that to keep going it looks like one more thing I need to provide to ticket Co is just my favorite type of music hopefully they can send me some cool discounts in the future and once I've done that it looks like I'm ready to proceed to checkout and that was honestly the easiest signup experience I've ever gone through didn't even have to enter a password I think the queen bee would approve all right so we were able to kill the password let's take a look at how we were able to do that so when Tina shoe came back to us we now had different context about her now that she's an existing user looking to purchase for the first time again informing her trip through the Arta identity engine so we got her identity and because she's now looking to access a more secure application we need to validate her email address as well as Authenticator so you saw us enter a one-time email magic link in order to do that so enabling a great seamless password list experience now a she's action also indicated greater engagement with our service so we're taking the opportunity now to ask her what our favorite music genre is which essentially allows us to progressively build out her profile over time in a non-disruptive way so again this is some really important information that our marketing team wants to know so we're going to use octave hooks again and so we've written a little bit more code to instruct Marketo what to do so whenever a user updates their profile in octa in such a way we're going to trigger an event hook which is going to call this function to now put that user in a genre specific Marketo list so we're going to figure out which genre list they should be in based on their favorite genre and then add them to that list so going forward TV is only going to receive personalized emails about pop events occurring in San Francisco now the last part of the journey was actually invisible to taze you so here a ticket oh we've had some issues around people creating fake accounts in order to get around our ticket limits so we need to a way to prevent this from occurring during the registration process so we're going to use a hook again this time we're going to use an inline hook which allows us to modify a process occurring within octa so you can see we've added an inline hook here to the registration process it's going to do a little bit of identity proofing for us and we're pointing it at some custom business logic that we've written now what the business logic says is that when a new user submits that registration form we're going to pass that information over to our identity proofing partners including experienced they are going to pass back to us a risk score and recommendation on whether or not they think this is a real person or not if it's not we're going to instruct octa to deny registration but if it is like tased you clearly a real person we're going to go ahead and create the user with a unique customer ID let's take a look at what would have happened otherwise it's key to the hacker camp all right so we have a hacker here who really wants those Beyonce tickets and they've gotten so far as to actually create a program that automatically creates fake accounts on our site so let's pause here and look at the logic going on so we're passing this name and email over to our identity proofing partners they're looking at it and saying hey this is an unknown name with an email age of zero days meaning this person just created this email address so the likelihood that this is a fake user here is high we're going to take that information and instruct octa to deny registration let's go back to the live view and yep looks like our hacker got an error message and has and is asking them to contact us for some further validation I have a sneaking suspicion though they're not going to reach out to us and they'll just move on to the next site so hacker thwarted so organizations like ticket Co need to create trusted tailored customer journeys that are tightly integrated with the rest of our technology stacks all at the same time we need to optimize the customer experience keep our developers laser focus on our core mission and secure our customers octa hooks and octa identity engine are two major upgrades that allow us to securely customize the user journey unlocking the password list user progressive profiling and the ability to extend octa with custom logic if you'd like to learn more about this demo check out the extending octa with code session immediately following this keynote or find us at the customer identity hub in the exa Mahal thank you awesome that was incredible think of the power of those use cases and those integrations that octa hooks and the octa identity engine you're going to power that's the power of open and there's even more there's if you think about this whole set of things together we recently did an acquisition and this acquisition is going to take all of this and expand it even further octa workflows is the technology we acquired think about what we can do with this we can have instead of having developers writing code to build hooks ophtho workflows is a no code workflow platform so that even if you're not a developer you can visually and graphically define these workflows that can run in response to hooks we're going to use this in that way we're also going to use this around our lifecycle management product octa workflows is going to supercharge that product to make it even more extensible more customizable and more powerful to directly address specific scenarios you have today with no code with a visual designer it's amazing and then pair that with what we can do as the really beyond just code the runtime engine behind behind hooks it's I can't I can't I'm so excited to see where we're gonna take this so you have to really check it out and see it in person to get a sense of this potential so we're going to bring the demo team out here again to get a look at it and take you through it [Music] morning we are excited by the infinite integrations that this workflow technology will enable for our customers and today we're going to show you one of these integrations which pairs these no code workflows with Octus new risk based authentication to automate an entire end-to-end security workflow from detection to response now we want you all to actually participate in this demo with us so instead of me coming on stage and telling everyone to put their phones on silent we actually want you to put your phones on loud seriously go ahead and pull out your phones right now and take it off do not disturb pump up the volume and then just send a text the letter A to this number right here to participate and don't worry we're not going to be storing your numbers it's just gonna be used for this demo and we'll leave this on stage for a little bit so let's get to it in this demo I'm Nick an employee for Echo group and I'm T's you an admin at Co group now let's start by taking a look at how we can use octa sign-on policy to detect risky logins I have my sign-on policy here that includes rules for high medium and low risk and when I look at the details for the high risk rule what I've defined is on a high risk login event and users need to provide a password but in addition to that they need to provide a strong authentication factor in this case that's a Fido to da no security key now once we've set these policies we can also take some native steps to further protect and use their accounts which you'll see in a couple of minutes but now that I've set up the sign-on policies to detect risky login let's take a look at how we can then use our workflow designer to respond to those risky logins so I'm not really a coder myself but I have this intuitive designer that helps me to create security incident response workflows now what we've set up so far here is for a text message to be sent out to our first responder team that's all of you when an end-user report suspicious activity on their account and that's done through an integration with Twilio now let's look into the details on how we've done that and how we can add to this and we want to look at this from left to right so the first item that we have on the left here is an alt account compromise card and this gets triggered by an octa event hook anytime an end-user report suspicious activity thereby indicating potential account compromised now the second item is the message itself so I've crafted a message here and the great thing is that all I need to do is drag and drop that message into the Twilio card and in a couple of minutes you'll all receive that text message now the next integration that I want to set up is for my psych ops team to also be notified via slack when an end-user report suspicious activity on their account and you can see immediately we have hundreds of enterprise ready out-of-the-box app integrations in this case I'm going to choose to integrate slack and send a message to a specific channel that's my psych ops channel now the next step here is to just customize the message that we actually want to be sent out through slack and again all I need to do is drag and drop that message I'm already using for Twilio we'll go ahead and give this a name I'll call it incident alert and we can save this so once we've finished this up you can see how without writing a single line of code I was able to create an end-to-end security incident response workflow what do you all think now taze you your timing could not be better in setting up those security workflows because the hacker cam is back and here we have some cliche looking hacker in a hoodie actively trying to compromise my octa account as we speak but uh looks like he was just denied by that security key alright so we expected for this login to be blocked and the reason for that is Octus machine learning capability is detecting anomalies across all of NICs pass login history so in this case those anomalies resulted in a higher risk score and because of the policy you had seen me set up an octave requiring a Fido to know key we were able to block that bad actor from logging in Daisy let's cut to my screen really quick because I just received an email that suspicious activity was detected on my account and I think I want to click this button to report it because that was clearly not me trying to log in just now so I've customized the actions that I want octa to take when an end-user report suspicious activity the first is at an Oregon man will be notified via email second Nick is going to be signed out of all the devices on which he has an octa session and third he's going to be sent a password reset email so you can go ahead and refresh that and report activity and that helps to train our machine learning model to continue making intelligent access decisions in the future so now when Nick refreshes his page you can see that he has been logged out of octa and he has that password reset email in his inbox now the next integration that you had seen me set up with what that designer was for bicyclops team to be notified via slack when an end-user report suspicious activity so here you can see that because Nick had just reported activity on his account my psych ops team has in fact received that incident alert message it is you it looks like your team might be off the hook here because I heard some phones going off in the audience which means the first responders have been alerted with very clear instructions on what to do this week so what did we see here using these no code workflows we pushed octa security events into incident response tools we also automated the detection of those high-risk events using octaves new risk-based authentication to create a fully automated end-to-end security workflow from the action - response now this is just one of the unlimited integrations that this will enable for our customers there is so much more to come thank you Thank You Nick Thank You taze you that's incredible I can't wait for that to be used by all of you and it's it's so exciting because if you think about hooks the creativity that this is going to unleash in the community you're going to create things we haven't even thought of and that's going to translate back into value for all of us so we're going to move from with we're gonna move it's very clear to me that we're gonna move from sixty thousand integrations to six hundred thousand integrations if you think about the potential of hooks the potential of the octa entity engine and plus the no code workflows you add that all together we're going to infinity infinite integrations because that's ultimately what it's about what it's about is taking the concept of integrations and making them so ubiquitous that they disappear you don't have to worry about it you know anything you want to use is connected so it removes that friction and delivers that value to you and that's the that's the power of open its infinite integrations it's unlimited use cases and the most important thing about it is we will enable you to achieve things that are even beyond what you thought were possible with octa that's what's so exciting about for us this is really the the the fruition of our platform vision this is the fruition of open opening things up letting the community extend them contribute them back infinite integrations infinite use cases coming back to you enabling you to be successful with octa and move your organizations forward so in addition to everything you've seen so far we have two incredible exciting product announcements and there's things that you've been asking us for for a while and we're excited to deliver them today the first product confronts the reality of the hybrid Enterprise head-on and it's called the octa access gateway I thought that this one would get a big round of applause you've known octa for access management to cloud applications we do an incredible job of that and over time we've extended this coverage to on-premise applications by supporting protocols and working with our great network provider partners but it wasn't always perfect and it we could do a better job making it simpler for you to use and maintain so that's what the octa the octo access gateway is all about it's a fully delivered octa solution for hybrid access management so it's a complete solution from cloud to ground for all of your needs in this area this means octa engineering octo support we have your back into end and as I talk to customers about this about this these scenarios and these use cases there's a lot of concern in the world about this about what's happening with Web Access Management and what's happening with C a site minder and the future of that product and what's the octa access gateway you can be confident that you have a cloud oriented partner to solve this use case for you and bring you with the realities of the hybrid enterprise into into eventually into a cloud future and you don't have to worry about legacy identity providers to to replace your WAM implementations the the potential the potential impact for you and your organization's on this is is is very profound so that's the octa access gateway now the second new new product that we're here to reveal to you is all around a very very specific an incredibly important resource and it's about securing that resource resource so you are a technology company and since you're a technology company that means you write code and that code has to run somewhere and that code runs on servers and the problem with servers is that many times they're not secured correctly and if a server is breached that's a big deal because it's the home of your code it's the home of your data it's a launching off point to other parts of your infrastructure it's a big deal and often times when teams are working in a DevOps environment and they're trying to be very agile and spin up thousands of servers and get new features rolled out quickly they compromise on security by sharing accounts they have a shared user account shared credentials across many servers in many cases it's it's just too hard to do it any other way so they shared account and then that account gets emailed around the credential gets emailed around gets checked into github hub someone sees that in the repo then that credentials out there and you have a big problem in addition you want flexibility to use your urine for your environment to span multiple infrastructure providers you want to separate your security policy from your infrastructures of service so that you have more flexibility to use different vendors there and finally you need to do all this in a zero trust world you don't want to rely on the network to secure this thing you need to rely on identity and continuous authentication to protect servers in this critical resource so we're addressing this all in a fundamentally new way and it's called octa advanced server access and it brings the power of octa access management to Linux and Windows servers so we do lifecycle management on the server we create user accounts groups specifically for all of your admins no shared account and we replicate that in a scalable way across all of your servers so that means when we also this product also generates a unique cryptic cryptographically secure token for all of your admins and uses that and checks it continuously to make sure that not only do you have a the accounts are not shared but that the the tokens for each access are auditable and highly secure so no more shared credentials you get rid of that security issues that you get rid of that security issue so this one this one you have to see if you to understand the power of it and then how it's related to the octacore directory and how you can take your octave deployment and apply it seamlessly to secure this valuable resource so bring out the demo team and let's see octa advanced server access in action hello again so if the infrastructure landscape is evolving quickly with many organizations now maintaining thousands of servers in the cloud or on premises and so it becomes a monumental challenge to control who has access to all of these servers and managing the access Keys to these servers becomes a huge security risk so what if we could completely automate the provisioning and de-provisioning of access to servers while eliminating the management of keys from the process entirely let's take a look at octa advanced server access in this demo i'm nick a DevOps engineer for ATCO group I'm - an admin group now I can add advanced server access to my tenant just like any other octo integration and just like how I provision users and groups to applications I can now provision both users and groups directly to servers now when I take a look at the list of the servers that I'm managing regardless of whether these are hosted in AWS as your GCP or even on Prem the logon experienced stays the same and of course this is all done using the same lifecycle management capabilities you're familiar with for other octa integrated applications so now let's take a look at what that login experience looks like for our DevOps engineers ok so as a DevOps engineer I spend most of my day in the terminal I'm just gonna start by initiating a login command - advanced server access from here and what you'll notice right away is that kicks me over automatically to a web browser to authenticate with my octo credentials and once I successfully authenticate you'll also notice I've installed a lightweight agent on this machine that's gonna allow me to bind my octave session with this device and do device compliance checks so I'm gonna go ahead and hit approve and then jump back to my terminal and you'll see I'm now successfully logged in as a trusted user on a trusted device and now that I'm logged in why don't I just go ahead and get a list of those servers that tase you just provisioned me for and Wow that's a lot of servers the idea of managing access keys to each of these just seems like a disaster waiting to happen why don't I go ahead and try to log into one of these servers here normally I'd have to jump through two hoops to make this happen go find the right access key and paste it in but just like that access granted no need to manage any keys it just works let's take a look at what happened in the back end here so these audit events represent a user logging into a server in this case that's Nick logging in from this device his MacBook onto this server and at this point in time now the way this works is our platform is a tightly scoped client credential for every user's authenticated and authorized request and that credential expires after one time use waits in case you you're saying I no longer have to store all of my server access keys on these USB sticks anymore right because we're no longer using access keys as the primary metz to get into our servers we don't have to worry about that anymore but what about this email thread that I have going with my engineers with all of our shared keys do I still have to maintain this Wow Nick you shouldn't even have this in the first place please delete that immediately all right fair enough but look to be honest tease you I'm actually really sick of working for ADCO group my boss is a jerk the work is tedious and I just don't believe in the company mission anymore I mean look at the new slogan they just rolled out on these new hoodies beyond next-gen synergy what does that even mean I don't know I think I'm done here well it's all good because we were actually gonna fire him anyways but Nick still does have access to his laptop which means he still has access to all of our servers so in the past it would have been a pain for me to decommission his access because I would have had to manually figure out all the servers he has access to and then delete those keys but now that becomes much easier you're used to seeing octa as a way to decommission users from applications and now that's also true of servers so all I need to do is head over to Universal directory and then deactivate Nick's account and of course if you're using something like Active Directory or workdays your source of truth you can deactivate directly from there as well so I'm gonna go ahead and deactivate Nick's account and then I'll head back over to those same audit logs where we can see immediately Nick has been deleted and therefore he's no longer going to be able to access those same servers all right let's see if that is in fact true here back on my terminal I'm gonna try to log into that same server as before access denied what about getting a list of servers from before denied again looks like I've been deep provisioned from all my servers that was quick great so now you've seen how you can use octa as a central control point for both apps and infrastructure regardless of whether those are reside on Prem or in the cloud and by taking a zero trust approach to Access Management access is only granted after the user and device pair have been established and after that one time use credential has been granted so if you're interested in learning more about advanced there were access be sure to stop by our infrastructure access session happening tomorrow and also check out the security pod at the expo hall thank you let's go all right yes let's hear it for the demo team takes you to Nick Young and the entire team that put those demos together for my next announcement I would like to talk about our new mission which is beyond next-gen synergy octa advanced server access is GA and in production today so you should get up right now run out the back and buy it no just good we got it we got a little we got some more exciting stuff for you and these are some logos on the screen you can see some of the customers that are in production with this getting value from it today so I encourage you to check it out and learn firsthand the value of as you're a technology company extending what you know and love about octa all the way down to your critical surfer server resources and as we think about building this trust platform this is a key component because servers being secure and supporting your development of technology is critical to your brand and how your trusted and avoiding any breaches or security issues so now I'd like to have a conversation with one of these customers about how they're using the product and how it's helping them in their company so please join me in welcoming to the stage from personal capital maxim russo but it's you that's great I liked the octave blue blazer I know right and we did we buy that for you no but I can invoice you for it our our invoicing system is not on the cloud it's very hard to see I see where this is going tell us a lot about personal capital yeah so you know I love the theme about trust here today and you know personal capital where a FinTech disrupter which I hear use a few of them here today and we operate in the wealth management and personal finance space and you know we have over nine billion dollars that we manage for our clients and we also have this platform where people can manage all of their finances for free using our dashboard tools and see all of their pictures and we have about 2 million of them on there and so Trust is paramount because you're not going to share your financial data with me if you don't trust me in the platform right which I assume you did right we talked about this I think you downloaded the app for sure yeah yeah yeah got it all of my personal capital is safe it is with architect technology I love it so you're the you're the see so there I am to see so there is it I imagine that with with with your business it's not hard to get priority or resources is that true you know I think it's I think it every see so wish they had more right but certainly it is a the number one priority across all of our leadership that all the systems need to be secure the data needs to be secure and also you know because Trust is recurrency and actually data is not our currency so we don't sell the data we don't we don't do any a net we Bank on trust trusted or critical enabler what do you what do you about not being very clear with users about your data how do you make that clear to them you is it just the privacy policy is it yeah else well I you know I like to think I wrote a very clear privacy policy and and that's 17,000 pages it is actually it's pretty sick sink and and we try to do away with you know we words and lawyer talk and so you know we had some great conversations with our legal team and so it was good times but we think it's really clear and and again it's it's one of those trust things right tell us about your use of advanced server access how is it going and what is it done for your organization yeah it's it's it's been great so we've we've had that for quite a while now we're pretty early on the platform and you know we looked around a good bit for how we bring in in our authentication stack you know in our zero trust model to the servers and turns out that's actually pretty complicated I was hoping to get some open source thing and and you know build something you know together pretty easily and then work out too well especially MFA which we insist is blanket across that's simpler than it is it turns out to be pretty I did well you know I did turns out it's not so MFA so gosh 10 years so yeah and but then with the advanced server access you know we have we baked these agents into our servers and we have servers coming up and down in an immutable infrastructure paradigm and they come up they provision themselves engineers have access they go through the same flow of log in with octa platform the same session multi-factor than because you you were workforce identity users prior right we our workforce identity oh we were using another competitor that it even works with competitors yeah which all that lame thank you yes and and we're very happy with the with the octave platform and you know it's just very clean technology as we saw in the demo right it's important to have low friction security yeah such that engineers and DevOps engineers are like look I'm using SSH like that's my tool like this this is what I do and this is how all my scripts have been built yeah this needs to work with this like I don't want to jump through 15 some other new UI right and so just whatever I think what everyone yeah it's music to my ears to hear it simple and it works and you're getting value out of it so everyone in the audience what they want to really know is whenever there's a product that a CEO announces on stage and says it's generally available they want to know like is it ready for primetime yeah is it is we didn't even rehearse that no we did not but but it is we've been using it for a good while and and it works really well and and you know we were one of the earliest people connecting with the octave provisioning which makes me super happy because we hate provisioning manually or with scripts and all that and so it all flows very nicely with you know your ad in this role grew have access to this group of servers servers and roll themselves into the different projects so we're using that at scale and it works it works well it's great well maximum thank you very much we appreciate the opportunity to make you successful and yeah thanks for joining us today thanks for hanging over Maksimir so thank you [Music] we've covered a lot we have octa access gateway and octa advanced server access to significant new products that you've been requesting and we're very excited to deliver octa hooks taking the integration network to the next level unleashing the creativity of the community I can't wait to see what everyone's built going to build the octa identity engine takes all of the value of the idea of the identity use cases and opens them up in a way that will address unlimited use cases with the octave platform and risk-based authentication taking that data billions of authentication events across the entire community feeding that back into the products to make them better and you can see there's a cycle here you can see that what we're about is building these leading products built on a foundation of infinite integrations removing that friction connected to everything supporting unlimited use cases and as those use cases are used that data is insightful data it's valuable data solving problems that aren't solved without that data and it leads back into better products and the cycle continues and that the center of this is you this is for no other benefit than for yours it's the most successful ingredient here this you see you can see in this this is a network effect and you're at the center of it you're the key to it the definition of a network effect is that the more things the more usage a system gets the more valuable it becomes more usage more valuable and the faster it grows so the more customer success attracts more integrations more creativity leads to more customers leads to more integrations more use cases more data better products more integrations you can see these virtuous cycles no one else can replicate this they can copy our technology they can copy features but they can't replicate the network it can't replicate the customers the users the data the set of integrations which is which is valuable for you the more customers that use octave the more valuable it gets the more use cases we support the more integrations the more valuable it is the more secure it is the more the less complexity you have to deal with and the more you're connected to and the faster your business could grow the faster you can thrive as a technology company that's that that's the ultimate payoff you thriving in this new world with all of these trends and all of this impact potential abounding you thriving as a technology company we think a lot about this we think a lot about this and it's very critical to us and now to wrap things up today I'm I'm very privileged to be able to have a conversation with a great CEO who is thinks about a lot of these things the same way we think about them you've used their technology even if you don't know it it powers some of the most important and impactful communication experiences in the world today and we used it in the demo and this our next guest is Jeff Lawson the CEO and co-founder of Twilio please welcome Jeff [Applause] [Music] [Applause] ah great to be here thanks for coming absolutely awesome dropped a lot of great products right there I know we are we've been busy we have been busy I do have to tell you it when we get started these are the President Obama chairs yeah these are these are the chairs that President Obama and I sat in last year oh yeah yeah yeah each one they'd been in my bedroom since then this one this one kind of kind of like feels presidential we were going to mark it but we didn't mark them so thanks for being here tell us about Twilio I mean everyone I think everyone knows about Twilio but for those that maybe don't know all of the areas you're in door need a better insight about it tell us a little about Julie oh absolutely so Twilio is a cloud platform that allows software developers to build communications into any kind of software app that exists via almost any channel of communications that exists whether it's voice phone calls text messaging chat video and even channels like facebook Messenger and and whatsapp like any way that you might imagine communicating with a human-being Twilio makes it programmable and Twilio makes it easy for a developer to take the building blocks of communications and embed them into an app and so if you don't know about Tullio you've probably used us maybe even today if you ride in an uber or a lyft and you call the driver from inside the app or you text with the driver you're using Twilio if you make a dinner reservation an open table and you get a text message saying your table is ready you're using Tullio if you sign into many services with octa and you get that text message for two-factor authentication you're using Twilio and so as it turns out communications is just fundamental to building great customer experiences to engaging with your customers across every customer lifecycle touch point you have and Twilio goal is to be the system of engagement that allows you to build amazing engagement all the way down at the developer and then all the way up and all the business systems that you're using every single one of those touch points you have with a customer is an opportunity to wow them it's an opportunity to engage with them and ultimately an opportunity to win them for life and communications is key to that it's an amazing story when you you started Twilio and was it 2007 at 2008 2008 yeah was the I want talk to part questions so was the it was a couple years after Amazon Web Services started right there is pretty early for what Amazon at the time you worked at Amazon right yeah I was one of the first product managers at AWS back in about 2004 I started this so to you it was clear I'm sure it was clear that these programmable api's were the future how when you went out and started talking to people about the idea and maybe started to think about raising money how well understood was that idea that very well stood at all so I went out like in summer of 2008 I went out to go raise the first round of financing for Twilio and you didn't go to Lehman Brothers and asking for digit well close I remember like I was sitting in one of a prominent Silicon Valley early stage investors office and it was like the final checkbox meeting like they're gonna write a big check and we're like oh we're gonna be off to the races and Lehman Brothers collapsed the night before and so I walk into the office and they're like there's no there's no checkbooks open there's no pens that are about to been surprised ah they're like I feel it was just like staring at their BlackBerry's like oh my god the world is collapsing what do we do and I'm like hi I'm here trying to raise money so like yeah we didn't raise money but actually more important than the financial collapse was really interesting 2008 this whole idea that developers would become incredibly influential in the technology decisions that their employers make and become really the people who bring innovation into every company that was not well understood and so I'd go around and say we're building communications but we're building it as a set of api's we're empowering developers to bring modern and amazing communications into their company to engage their customers and the response I got was well developers on a market how'd you hear how big could that be how big could that be oh I had one investor who by the way later did invest say that's a nice lifestyle business and I'm like communicate like that's one of the largest industries in the planet getting reshaped by software getting rebuilt by the software developers of the world it's like if it's a lifestyle business like yeah I want that lifestyle yeah it's a huge opportunity to fundamentally change one of the largest and most important industries on the planet if you think about it like I always think about this the two things that separate human beings from nearly every other species and not nearly every other species on the planet we do two things better than every other species number one we communicate our advanced communication allows us to build our advanced societies and number two we are builders we build tools and we do that better than any other species in the planet and Tulio sits at the intersection of those two most fundamental human things building and communications and that's one of things that gets us so excited and Twilio is about what we can enable our customers to go do and what we can enable our customers to go build because like a lot of the stuff that you just launched Twilio is not a solutions company we're not here like the traditional enterprise software model saying we have a monolithic fixed feature solution to your business problem and you're going like forklift the thing in and then it's gonna sit there for a decade and do its thing and if you want any changes you got to get on our product roadmap see if you can grab the product people right and you know and get them some drinks maybe you'll get your feature done yeah we are an enabling company because we've taken the world of communications broken it down into building blocks and we give it to our customers with the goal of having them rebuild communications in their vision yeah the way they need it to work for their industry for their company for their use cases whatever it is that they see is the communications requirement that they have they are now able to build it they're often able to build it in the afternoon yeah because every big idea starts small and so experimentation is the key to innovation yeah so the more experiments developers and companies can run to flesh out what they think the future of whatever it is they're trying to build is the more experiments you can run the more chance you're going to have to actually drive impactful innovation and so we view our job is how do we reduce the barriers to those experiments and ultimately reduce the barriers to innovation and that is how we will enable every company to go win in their marketplace and serve their customers bad and ultimately I'll innovate their competition yeah it's like it's the power of the of lacking hubris so if you if you don't have the hubris to think you know all the answers you can kind of unleash this creativity yeah and in in in like viewing our role as enabling people yeah as opposed to like I'm here to solve your I'm gonna ride in on my horse and solve your problem yeah as opposed to like I'm an enabler I'm here to listen and help you solve your problem but ultimately make you a better developer make you a better company because you are now empowered its resonates really resonates so I have a question about the early days again so you talked about the developer and and in the platform approach how did you was there did you debate about focusing on communications or was that very clear well you know exactly like when Optus started we we actually started with like a systems management idea and later very early but we later saw identity was like the key to enabling the cloud so in early days of Trulia was it all was clear that it was communications it was a tie between communications and oven mitts yeah yeah but we hold him more of a lifestyle business yeah more of a lifestyle business aid monogrammed very yeah Bluetooth of events no we we kind of always had this idea that we wanted to be a platform for developers to build communications yeah really comes back to my brown yeah you hit on it right away that's kind of I mean we I'm a software developer I had started three companies before Twilio and I was at AWS very early on and we came up with the idea for Tulio because I was thinking back to like what are the problems that I've had in the past that I wish someone had solved for me and there's this sort of substrate in the background of my whole life that seems to like have been there which was at every one of my three companies there were two things in common number one we were using the power of software to solve customer problems faster and better than anyone else in our industry so for example I was the first CTO of StubHub and it StubHub we said oh can we use the power of software in the internet to make buying and selling live event tickets more trustworthy and more seamless than it is you know walking into a street corner and trading cash for you know maybe getting a knife in the side and so we said you know software is the key to this it's you know being agile iterating quickly listening to your customers I'll put this into perspective for you we built the first version of StubHub from the first line of code written to the launch in six weeks yeah that's the pace of software and then that was just the first thing we kept iterating from there and so software was key to our competitive advantage in every company I was previously building but there was a second common thread and every one of those companies we needed communications which just makes sense right if you're trying to build a great customer engagement model you're trying to build a great product eventually you be like and we need to communicate with our customers and every time those needs came up it was yes like it would be great if we could call our customers when this thing happens or text our customers or let them call us or let them text us and we every time that happened we said that was really that's a great idea but I'm a software developer I don't know the first thing about how to make that work like that's magic like making some voltage appear on some wire halfway around the world like I don't know how that works and so we would turn to the industry and they'd have these big multi-million dollar multi-year deployment solutions for us and after realizing I had that experience at three companies in a row I said god there's got to be a better way yeah and we got to bring communications out of its legacy which was physical networks and hardware and all this big expensive slow stuff and modernize it and bring it into its future which is software and I actually think that this motion is actually reinventing almost every category that there is out there yeah we're moving from the early days of enterprise software that was all about on-prem deployments and then the next way yeah that was the 80s and 90s and you had you know s AP and you had Oracle and all the stuff and then you roll ahead to the turn of the millennium and along comes software as a service and SAS is the newest and greatest and shiniest thing in software because you know the company that builds the software also operates it so you don't have to become an expert operator and all these different pieces of software you can pay one company and get essays and get security and always updating always patched and always ready to go and that was a big innovation and so you went from buying like you know cpu licenses and seat licenses so now in the cloud you're buying seat licenses and that's the newest greatest model but believe it or not into a lot of people SAS is still like the biggest thing happening in software yet I would posit that there is something newer you know what the fastest growing company in the history of enterprise software is dr. octo very good just a wild guess AWS yeah right and it's a completely different model they're not selling seats they're not even selling apps and they're selling pieces of infrastructure that enable you to actually go build the things you need and you bake their infrastructure into all the apps that you are building in fact your phones right now sitting in your pocket are like spending money on AWS it's amazing great business model and but it's not just about computing it's not just about storage there's all these services there how are they how does that work are they spending money like if you're like they're making some background request to let go no these these people are all totally focused on us so in their pocket it's like you know fetching new they're not like getting their car and lift it's like it's you know what getting news feeds yeah background and like there's servers all over the world that are doing that work and small amounts of money are made every time those things happen and so you think about the infrastructure of apps whether it's you know AWS or Asscher or Google cloud for compute and storage Twilio for communications you're stripe or ad yen for payments and octa for identity and identity access management it's like these are the building blocks these are the raw ingredients of all the software that we use to run our lives now every day yeah it's a powerful perspective because it really gives you the mindset of you know divorcing from the past and thinking about the framework of the world in the future so as as we were prepping for this we had this idea for a little hackathon so we had this contest this online contest for c2c who in the community could use all of the technology we've talked about today to come up with the most innovative solution because kind of the principle here is don't have the hubris to think that you can figure out what people are going to build let them build it and we're excited to announce the winner of the hackathon the winner is a great solution written by Matt Matt Ches and it's called Aristotle and it's basically an online tutorial to help students study and help tutors help students studying and it you should definitely check it out online it has it has video involved it has communications involved it uses octa for logging and user registration and all the identity aspects of that and it's an amazing example of the power that if you couple two great platforms like am like Twilio and octa of what you can build so congratulations to Matt Matt Katz yeah and Matt for winning the contest you'll receive a $5,000 prize baton here today not bad scratch he's not it was a global contest yeah couldn't make he didn't know he's gonna win in tow how old is he I don't know actually I didn't meet him I saw the YouTube video he's a young guy he's in high school it wasn't like backstage someone told me the price was $10,000 yeah maybe maybe we gave the other half to charity or something that if they don't give you your 10k call me we didn't specify the currency though so yeah it's we've covered a lot of stuff so I'm curious when when so along the journey you talked about this building this basic platform that had basic building blocks to create these amazing experiences if my experience is anything indicative of yours you get tempted along the way to build an app did you ever get tempted to build an app because some of the things you're doing now are more solution like the call center capabilities flex platform so how me talk about that I'm curious to hear your thoughts about that evolution if it wasn't evolution or that's maybe not how you think about the way we started we said we want to be a broad platform that developers can use to build just about anything and so the first many years of Tullio was about building this platform that has any medium of communications whether it's voice text chat video etc that developers can use to embed communications into almost any kind of app and then we go talk to customers and we see how the using our platform one of the most amazing things about building a broad horizontal platform is that you get to meet so many customers solving so many different kinds of business problems and you get to ask them how can we serve you better like what can we do to make your lives easier make your lives better and one of the things that we saw we see these common patterns start emerging from our customer base where developers keep solving the same problems over and over and you know the first thing we observed was that even though developers could build absolutely anything with Twilio they gravitate towards building things that are customer facing that are building customer engagement into their apps like they could build backend they could go build a new PBX for their company or a new video conferencing solution for their company but it turns out that like the internal apps that you use like you actually kind of want some degree of standardization like it's useful like if everyone went off and built their own slack yeah like and you hired your new employees and like they would be like and we had you know first week we're gonna teach you how to use the the chat system it was like wouldn't be that useful or like video conferencing it's kind of useful that like we all have the same video conferencing systems we can Interop and so standardization is good there but in customer engagement like the way you talk to your customers the way you engage them across every part of the customer lifecycle it's actually required that you innovate you need to actually not be the same as all your competitors because if you are you're you're a communal commodity in the eyes your customers and so you need to put developers and your creativity to work listening to your customers and building differentiation and that's what developers are doing with Twilio in fact one of the areas where this was really prevalent was the contact center so we saw a lot of companies like IMG bank or Liberty Mutual going out and building from scratch on top of Tullio contact centers and they were replacing like IMG bank 17 legacy on-premise systems they were trying to throw out and replace them with one new system they're building on top of Tullio and so we go in and we'd ask them you know what what is behind this here first of all thank you for your business but why this isn't the path of least resistance you could just go buy a solution out there why are you building your own and what they would say is that look there's all these solutions out there but none of them meet our needs and they're not flexible enough and it's so strategic it has to be perfect yeah and like you know it's one of these things where you know the contact center is where most customer engagement strategies go to die yeah this is like the minute the minute you have to talk to someone and wait in some giant queue and you know customer relationship turns into a cost center or suddenly and you know it's just it's horrible and so it's a ton of sense customer centric companies were trying to go build something better because they said we need to take control of this roadmap yeah and we said great how can we help you do that they said well you could take and give us the skeleton of the application you know get most of the work done get 80 90 percent of the work done for us then just allow us to plug in the parts of the differentiation that we want and so that's what we did with Toyo flex it's a brand new contact center that out-of-the-box you can deploy it in the cloud in five minutes and it's got voice and chat and text and video and you name it but it's also a canvas that the developers inside a company can use to go build out more customization and so what we think the future of apps and solutions looks like is less about a fixed feature monolithic app and more about the infrastructure for the developers to get hit the ground running really fast with a use case that every company has and so they'd have to go invent it from scratch they have the 90 percent solution sitting there and then they just tweak it and they customize it but it's fully customizable it's not just like here's a few pixels here and if you hear that you can't yeah it's like you need this on this you need to address the spectrum of very customizable to more solution oriented that are just extensible at the edges yeah but ultimately the applications of the future that we use to power our really critical customer engagement workloads they need to be programmable by developers and they need to be a point of differentiation for every company and if you don't allow developers to do that that work to differentiate you're not going to be able to differentiate in the eyes of your customers and so that's where the power of developers comes from and as us as business leaders I think it's our job to empower the developers and the creative and the customer centric parts of our organizations with the tooling and the infrastructure but lets them to do what they do best which is move quickly listen to customers iterate build prototypes and when those prototypes 16 of customers scale them up quickly and companies that do that well are gonna be the companies that succeed in this digitally you know the digital disruption that we're in right now Jeff it's a great story I really appreciate you coming here and sharing it with us at octane 19 thank you very much Thank You Todd great to be here [Applause] [Music] [Applause] so you can see the power of the open platform and how important communications is an identity is and we think about this and we take this very seriously at octa how we can build this open platform to solve the identity use cases for you and further even able to you enable you to be a trusted platform because that's the goal you want to platform you can trust but you also want a platform that makes you trusted we take that responsibility and we bring it to us bring it with us every day in order to impart it to you in closing I'd like to say that if I reflect back to a decade ago the idea of building identity in the cloud was a crazy idea it was a crazy idea you're gonna put identity in the cloud and security and the reason it happened successfully is because of you you trusted in us you believed in us you gave us this foundation to make it happen and we take that fact very seriously and we're honored by that and as we think about the decade ahead we are going to work hard every day to make sure that we earn that trust continuously and continue to pay that back in your success so before I turn it back over to Ryan I would like to say thank you from the bottom of my heart from the entire octane team and the entire octa team have a great event and thank you for your support [Applause] [Music] ladies and gentlemen please welcome back Ryan Carlson that was amazing I'm really proud of all that the team did to put together that event and I'm also proud of a sentiment that octa represents and Tullio does as well and that we also want to give back to our community so I want to close with a really quick call to action octa for good is the the manifestation the formal manifestation of our efforts to make our communities better you're gonna hear a lot about this tomorrow but two years ago we had in our Expo Hall a way to raise money for girls who code last year we had a raid to raise money for charity water this year in the expo hall we have the ability to help you have you help us raise money for the Norwegian Refugee Council you're gonna hear about that more tomorrow as well please do this in the expo hall it helps I also want to talk a little bit about something that we realized that we could do with your help here at octane saw this tweet last year and then I'll let you read it it really resonated with us why give thousands of backpacks to people at a conflict this who probably have conference back box already why not give in this case jacket to the homeless we wanted to do something like that this year you'll notice that none of you have backpacks but you have helped you've helped here in our community in San Francisco with ten schools and we're going to show you the story of that with this video one of the challenges that a school like mine faces as resources we don't have a PTA that raises large sums of money our teachers are engaging in different types of curriculum and instruction inside the classroom where kids have to produce things three years ago I was asking about circle schools because I heard other schools were engaging that and then this year I was really excited to get an email that said hey we've you up with this group octa and we are very lucky to have them and they've given some pretty handsome donations that we've really appreciated I remember getting the email that we got the donations and I felt so grateful and the teachers were excited that there are people out there who are looking out for our children together we had one day yesterday where it was all technology and those kind of needs and today was all real school stuff as well at bucks crayons took everything it was just amazing I'm really excited about where this will go and not just donations but really connection I know teachers requested things that they need to be successful as instructors we're on PBL in steam so I know my teachers actually happy which they're happy I'm happy [Music] thank you to sign in Anna all the team to put that together thank you for your time in attention this morning we will see you back here after the break outside 4:30 for the next keynote thank you [Music]

Channel: Okta

Views: 4,595

Rating: 4.7837839 out of 5

Keywords: oktane19

Id: JpvLgDZa5jc

Length: 116min 10sec (6970 seconds)

Published: Wed Apr 03 2019