Skip to content

About Me

Sagara Gunathunga is the Head of DevRel at WSO2 IAM, an identity architect, and an open-source contributor with over 15 years of experience in identity, integration, and application development. He is passionate about making complex identity protocols practical and accessible for developers, not just IAM specialists.

He is the author of Hands-On Spring 6 and a frequent contributor to leading technical publications such as DZone, InfoWorld, PCMag. Sagara has spoken at major industry events including the European Identity & Cloud Conference, Consumer Identity World, GDPR Summit, and ApacheCon.

He is also a long-standing contributor to the Apache Software Foundation as a Committer and PMC Member across projects such as Apache Axis2, Apache WebServices, Apache Synapse, and Apache Camel, and being elected VP of the Apache WebServices project in 2012.


He is always open to discussing the future of identity, developer experience, and AI.


Conferences (Speaker)

  • WSO2Con Europe - (2025, Barcelona, Spain)
  • European Identity & Cloud Conference - (2019, Munich, Germany)
  • WSO2 Summit Sydney- (2019, Sydney, Australia)
  • Consumer Identity World APAC - (2018, Singapore)
  • WSO2Con Europe- (2018, London, UK)
  • Consumer Identity World EUROPE -(2018, Amsterdam, Netherlands)
  • Consent and Identity Management, Kantara Panel Discussion - ([2018] Amsterdam, Netherlands)
  • WSO2Con Asia - (2018, Colombo, Sri Lanka)
  • GDPR Summit - (2018, London, UK)
  • WSO2Con Asia - (2018, Colombo, Sri Lanka)
  • WSO2Con Asia - (2016, Colombo, Sri Lanka)
  • WSO2Con Europe - (2016, London, UK)
  • WSO2Con USA - (2015, San Francisco, USA)
  • WSO2Con Europe - (2014, Barcelona, Spain)
  • ApacheCon NA - 2011, Vancouver, Canada)
  • Apache Roadshow 2009 - Colombo, Sri Lanka - (2009, Colombo, Sri Lanka)
  • IEEE Industrial and Information Systems - (2007, Kandy, Sri Lanka)

Meetups / Community Events (Speaker)

Articles (Author)

  • Why Quantum-Safe IAM Demands Immediate Action Link

  • Why MCP matters – and how to secure it Link

  • Real-World Security Considerations for MCP Link

  • Quantum-Safe IAM: Why Do You Need to Act Today? Link

  • UMA 2 in Action Part 1 Part 2

  • Seven steps for GDPR compliance Link

  • CIAM: The Future of the (Digital) Enterprise Part 1 Part 2

  • Defining a Winning GDPR Strategy - Introduction to GDPR Link

  • Defining a Winning GDPR Strategy - 7 Steps for GDPR Compliance Link

  • Defining a Winning GDPR Strategy - Identity and Access Management to the Rescue Link

  • Defining a Winning GDPR Strategy - GDPR Compliant Consent Design Link