Sovereign by Design: Modernizing Federal Identity Without Starting Over

Federal agencies face phishing-resistant mandates, aging on-premises systems, and higher expectations for passwordless—all while where public SaaS is restricted. This stalls progress: deploying modern capabilities requires a cloud environment that agencies cannot use, and replacing what works carries risk agencies cannot take. This session examines how passwordless authentication, access, directory, and governance can be delivered across private cloud, on-premises and air-gapped environments under full customer control, drawing on RSA's own deployment experience. We will cover how agencies can layer modern capabilities alongside the systems they already run, and what that means for M-22-09 and advancing zero trust maturity.