Identity access management company Okta Inc. today announced new capabilities across the Okta Platform and Auth0 Platform designed to help enterprises securely adopt artificial intelligence agents.

The new capabilities allow organizations to build secure, standards-first AI agents that can be woven into an identity security fabric for end-to-end lifecycle management. The fabric also enforces verifiable trust through tamper-proof credentials, helping organizations prevent AI-powered fraud and streamline onboarding processes.

Up first is the introduction of Okta for AI Agents, a new platform that integrates AI agents into an identity security fabric, enabling organizations to discover, provision, authorize and govern nonhuman identities at large scale.

Okta for AI Agents includes Identity Security Posture Management for identifying risky agents and exposed credentials, Universal Directory for agent registration and ownership attribution and Okta Privileged Access for enforcing least-privilege access. The platform is complemented by Okta Identity Governance and the company’s AI-driven Identity Threat Protection to provide continuous monitoring, audit trails and automated remediation.

The second announcement sees the introduction of Cross App Access or XAA, an open standard that extends OAuth to secure agent-driven and app-to-app interactions.

Launching with early support from Automation Anywhere Inc., Boomi Inc., Box Inc. and Glean Technologies Inc., XAA shifts access control from individual apps to the identity layer, giving enterprises real-time visibility and policy-based enforcement. Okta says the protocol also reduces user friction by pre-approving integrations, minimizing repeated consent prompts. It will be embedded in Auth0 for business-to-business developers to simplify secure integration of AI agents into applications.

The final announcement, planned for the company’s 2027 fiscal year, is Verifiable Digital Credentials, an open standard offering that will allow organizations to issue and verify tamper-proof, reusable identity data such as government IDs or certifications.

VDCs, when launched, will allow individuals to digitally prove their identity or eligibility across applications while limiting exposure to AI-driven fraud and deepfake threats. An initial digital ID verification capability supporting mobile driver’s licenses is slated for early availability in fiscal 2026.

“AI is changing the workplace faster than organizations can adapt. We’re starting to see poorly built, deployed, or managed agents expose the risks of using a traditional patchwork of identity solutions,” said Kristen Swanson, senior vice president of design and research at Okta. “The modern enterprise requires an identity security fabric that can unify silos and reduce the attack surface. Our latest innovations weave agents into that fabric to manage their entire identity lifecycle, leveraging open standards like Cross App Access that help elevate the entire industry and create a more secure AI-powered ecosystem.”

Photo: Okta