Okta has released new controls for AI agent authentication and delegated access while joining 11 other technology companies to form the Blueprint Alliance, a coalition developing a shared architecture for governing agents across enterprise systems.
Three capabilities are generally available: Agent SSO, Agent-to-Agent Connections and Resource Access Certifications. Agent SSO extends Cross App Access to all Okta single sign-on customers, allowing long-lived keys to be replaced with short-lived tokens governed through identity policies.
Agent-to-Agent Connections sets rules for which agents can call one another and what each can access, while recording the handoff in an auditable chain. Resource Access Certifications provides recurring reviews of agent connections to help administrators remove excessive or unnecessary permissions.
Other announced controls remain planned releases. Agent Gateway will sit between an agent and its tool calls to enforce policies and log interactions as they occur. Endpoint discovery will identify unmanaged agents running on employee devices. A Configuration Designer will visually map connections between agents and resources.
Okta also plans to extend its kill switch to agents connected through the gateway, allowing active tokens to be revoked and running sessions terminated. Its existing administrative deactivation control blocks new sessions. The company lists gateway and endpoint discovery availability for Q3, followed by Configuration Designer and the expanded kill switch in Q4.
The Blueprint Alliance includes Amazon Web Services, CrowdStrike, Databricks, Docker, Google Cloud, Lovable, Okta, Proofpoint, Salesforce, ServiceNow, Wiz and Zscaler. GE Appliances and World Central Kitchen will serve as strategic advisers.
The group’s reference architecture calls for each agent to have a distinct identity and an accountable human owner or operational team. Access should be limited to the task, delegation should remain traceable, and monitoring should continue while agents are running. Response options include token revocation, session termination and controlled restoration of access.
Okta previously extended its agent governance platform to Amazon Bedrock and third-party identity providers. Separate industry work has focused on identifying the people behind agent actions, including Proof’s participation in FIDO Alliance agent authentication standards.
Alliance members are building and testing cross-vendor interoperability using open protocols and security-signal standards. They plan to publish joint results and reference integrations so that a threat detected by one component can trigger a coordinated response across connected systems.
Sources: Okta
–
By the ID Tech Editorial Team
