AI agents reshape identity security

Agentic AI is changing the identity security equation. Enterprises are no longer governing access only for employees and traditional machine identities. AI agents can act on behalf of people, interact with applications and data, acquire permissions and execute work at machine speed. That raises a more complicated question: How does an organization determine who or what is acting and whether that authority should still apply?

“Agentic AI turns identity governance into an execution problem,” said Krista Case, principal analyst and practice lead for cyber resilience and security at theCUBE Research. “Enterprises need to know who or what is acting, whose authority it carries, what it can reach and whether that authority should still apply as the task changes. Customers should evaluate identity platforms on how well they can maintain that context through the full lifecycle of an agent’s work.”

That question will be central to SailPoint’s Navigate event, taking place Oct. 5–8 in Austin, Texas. Under the theme “AI, secured,” the conference focuses on how identity security is changing as organizations add AI agents to an already expanding population of human and machine identities. SailPoint describes identity as a new control point for enterprise security, with this year’s event bringing that idea directly into the agentic AI era.