Identity Security for VCF

Identity is the new security perimeter. In this episode of the Virtually Speaking Podcast, Pete Flecha and John Nicholson are joined by Lee Howard, Head of IAM Product Management at Broadcom, to break down Identity Security for VMware Cloud Foundation and why IAM, PAM, and zero trust access are critical for modern private cloud environments. As part of our VCF Advanced Services Series, this episode explores how identity security has evolved from simple Active Directory authentication and sticky-note passwords to: Risk-based, context-aware access Continuous verification and zero trust principles Privileged Access Management (PAM) with credential vaulting and session recording Protection for both human and machine identities Kubernetes-based, cloud-native deployment inside VCF We discuss how modern IAM platforms leverage standards like SAML and OpenID Connect, how PAM enforces least-privilege access and credential rotation, and how behavioral signals help prevent insider threats and compromised accounts. If you’re modernizing to a private cloud with VMware Cloud Foundation, identity can’t be an afterthought, it must be built into the platform. This episode explains how. What You’ll Learn Why identity is foundational to zero trust architecture How risk-based access adapts authentication dynamically The difference between IAM and PAM — and why you need both How privileged session recording protects against insider threats Why Kubernetes enables scalable, zero-downtime identity services in VCF How Identity Security supports DevOps and API-driven application teams 📌 About the VCF Advanced Services Series This series dives deeper into the advanced services available to VMware Cloud Foundation customers helping you understand what’s possible beyond core infrastructure and how these services enhance security, compliance, automation, and operational control. Watch the full Advanced Services playlist here: 👉 https://youtube.com/playlist?list=PL8_k3uUCO39uFSUmnhzlggmRmEzNQ06GF&si=QNcv8vvkJOM-Gb-V