Security

Okta Expands Identity Security to Safeguard the Rise of AI Agents and Non-Human Identities

by VARINDIA 2025-04-11

Okta, Inc. has unveiled powerful new enhancements to its platform, extending its identity security capabilities beyond human users to encompass AI agents and other non-human identities (NHIs). As organizations increasingly integrate AI and automation into their operations, the updated Okta Platform offers a unified identity security fabric that brings visibility, governance, automation, and control to every identity—human or not.

Okta’s enhanced platform capabilities empower organizations to effectively secure the growing ecosystem of non-human identities by enabling the discovery and classification of these identities across both cloud and on-premises environments. With built-in Zero Trust policies, the platform ensures real-time verification and granular access governance for both users and machines.

It also continuously monitors and evaluates risks, privileges, and anomalies associated with non-human identities (NHIs), while seamlessly integrating identity security into AI-driven automation, APIs, and machine-to-machine communications—ensuring a unified and scalable security framework.

“Amid the excitement of embracing generative AI, companies are moving fast to deploy agentic use cases, often overlooking the need to secure these systems. By bringing these identities into the security fabric, Okta helps organizations govern the digital labor force with the same vigilance as the human workforce,” said Arnab Bose, Chief Product Officer, Okta Platform.

With these innovations, Okta enables businesses to future-proof their identity strategies and maintain robust security across a rapidly evolving digital landscape.

Now available in GA preview, Separation of Duties (SoD) in Okta Identity Governance (OIG) helps organizations mitigate security and compliance risks by ensuring users don’t accumulate conflicting access rights. Through enforcement of SoD policies based on predefined business rules, the feature supports fraud prevention, regulatory compliance, and minimizes the potential for insider threats.