In this talk, attendees will learn about the new Identity Management features in RHEL 7.3, including:

- Requiring multifactor authentication via Kerberos Authentication Indicator
- Sub-CA for issuing certificates in different security domains
- Topology management and replica installation improvements
- Kerberos principal aliases for load balancing and user name changes
- Server and client performance improvements

I will also demonstrate some exciting new features being developed for the future, including Session Recording and Network-bound Encryption for automatic volume decryption.