OktaMichael PalermoAnnouncement
Find the intersection of security, AI, IAM, and fun at Oktane
Summary
Oktane 2025 will focus on security, AI, and identity, with programming for protecting software systems that use both human and non-human identities. The event is scheduled for September 24–26, 2025, at Caesars Forum in Las Vegas, and will include the Oktane Developer Lounge, Expo Hall activities, lightning talks, documentation feedback games, and Developer Support consultations. Hands-on labs cover securing enterprise AI with the OAuth Cross App Access (XAA) extension and Model Context Protocol (MCP), automating Okta with Terraform, replacing standing administrative access with time-bound requests through Okta Identity Governance and Workflows, and using OAuth 2.0 Demonstrating Proof of Possession (DPoP) tokens in a single-page application. An Okta Workflows community meetup will add networking, drinks, and appetizers, while the broader event offers learning, expert conversations, and application-focused discussions.
Context
The event is centered on the need for tools, knowledge, and solutions to keep software systems secure as AI expands from traditional user applications to AI agents. It also seeks feedback on how identity documentation can be made clearer and more intuitive.
Approach / What changed
The program combines a Developer Lounge, expert consultations, lightning talks, documentation feedback activities, hands-on labs, and an Okta Workflows community meetup. Labs address Cross App Access and MCP, Terraform-based Okta management, time-bound administrative access, and DPoP token protection.
Takeaways
The Oktane Developer Lounge will feature guidance on securing applications with human and non-human identities, including information about Cross App Access and identity-focused lightning talks.
One hands-on lab combines the OAuth Cross App Access extension with Model Context Protocol to secure AI access to enterprise applications.
The DPoP lab upgrades a single-page application from an OAuth 2.0 Bearer access token to a possession-proof token for additional protection.
Source and freshness
- Source
- developer.okta.com
- Published
- Added to Yomu
Summaries are generated from the original by a language model. Check the original before relying on it.
Keep reading
Related reading
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
The best engineering reads, once a week
One useful email. Unsubscribe anytime.