Most attacks now start with a valid login. Nation state crews and AI powered tooling have made it cheaper to walk in through the front door than to break anything. The harder problem is ownership. Enterprise identity is layered over systems built across three decades and split between security, IT, and whoever inherited the last acquisition, so in most companies no single team owns the whole estate. Attackers do not care about the org chart. Eve Maler, who co-wrote SAML, and Eric Sachs, who leads identity product at Microsoft, sit down with Rubrik Field CTO Noam Perel on how identity estates got this way, what a resilient one looks like, and who should be on the hook for building it.