Securing Agentic AI Identities @okta

Added: 2026-05-16

[00:00:00][music] [music] >> Hey everybody, really excited for this conversation today. Uh AI agents and identity in this new era is one of the hottest topics right now in cybersecurity and beyond and uh companies are racing to adopt a generic AI.

[00:00:31]And one of the implications in terms of challenges and opportunities for the enterprise. Matt from Okta, how are you?

[00:00:41]I'm good. Uh how are you? Thanks for having me.

[00:00:44]I'm doing great. Really admired uh the work you and the team are doing at Okta for some time. Before that, maybe introduce yourself, who you are, what you do at Okta, and what's keeping you busy these days.

[00:00:58]>> [laughter] [gasps] >> Yeah, my My name is Matt Emler. I'm the uh regional CSO for the Americas at Okta. Uh I've been here for about 9 years. Um I originally started with the uh Auth0 side of the house and came over during the acquisition in 2021. Um but I spend a lot of my time with um security projects in the US, escalations, um you know, calls and and things like this. And really just kind of talking to our customers about um you know, what's going on in both the identity world and and more frequently now how that relates to to uh AI.

[00:01:31]Yeah, such a fascinating topic. Why is it? Why is identity suddenly become the center of the all of these conversations the last couple of years? And uh what what's driving that?

[00:01:42]Yeah, so identity has become more and more of a focus uh these days in the security world because we're kind of moving past a little bit the point where, you know, zero days and, you know, trying to break in the front door that way is becoming as feasible as just trying to, you know, take over somebody's identity and impersonate them to get in. So, identity has become more of that first step that attackers are using. Uh it's a kind of a lower bar for them in a lot of cases to try to get access to networks and to um businesses. And so, we're just starting to see that take a lot more focus away from some of what those traditional methods of security are, you know, your traditional firewalls, your traditional, you know, IDS's, things like that that you might see and more along the lines of, you know, how do we secure our identities?

[00:02:28]Yeah, really important conversation. Of course, non-human identities of uh are now at front and center. How do you describe what that means in plain English for maybe your friends and family who aren't steeped in uh security speak? Sure. So, non-human When we talk about non-human identities, we're talking about um identities or accounts that are not actually backed by a real person. So, uh traditionally for a very long time, this was service accounts, which, you know, they had a single job, a single purpose, they did one thing repetitively. And now, these days, you know, over the last couple years, we're looking more at what this looks like in terms of agentic AI. So, AI agents that are acting on behalf of humans. And so, although they're still not an actual real person, they're able to do things dynamically. They don't have a set path that they're going to follow. So, uh they can, you know, kind of rationalize and make decisions on their own, but they're still not an actual human identity.

[00:03:27]Yeah, really well said. And how big of an uh a trend is this in enterprises that you talk to every day in terms of the machine identity reality, the problem, let's say, even? Is it, you know, thousands in a large enterprise?

[00:03:43]Are we going to get to millions this year or next?

[00:03:46]Yeah, so, um one of the biggest things I hear across, uh you know, all of our customers that I talk to is just the you know, increasing pressure that they're feeling from either their you know, their board or their CEOs that you know, we can't fall behind. You know, we this AI push is big. So we need implement now. We need to implement fast. We need to make sure that we stay ahead of our competitors. And a lot of times what that's causing is security to fall a little bit by the wayside and and you know, the efforts to try to roll these things out as quickly as possible. So what's keeping security teams up at night is you know, the speed at which they're being forced to allow this sort of these sort of things to operate in their networks. And a lot of times the big issue is is they don't even know how many are in their networks. And that's that's the big problem and where a lot of that heartache is coming.

[00:04:34]Yeah, unknowns are are never good. And so we've gone from AI assistants that really don't quite work, but we we try to use them to AI agents that are actually taking action on our behalf that are really compelling. I have four different agents Sure. that are working for me now as we speak from Claude Co-work to Manas and Open Claude. And I'm a little bit of an early adopter to say the least, but they're doing real work and um I'm a little concerned uh personally, but now compound that into an enterprise of thousands, how does agentic AI really completely change the security equation?

[00:05:13]Yeah, so as I kind of mentioned, one of the biggest issues that we have right now in the security equation is visibility. So a lot of times, you know, the one of the biggest things I hear is that you know, employees or users inside a company's systems, they're going and they're trying to keep up with the mandate that they've been given to implement and use AI. And so, you know, everybody wants to get ahead. Everybody wants to be the first. Everybody wants to be innovative. And they're going finding these cool new tools out there that they can put to use in the in their daily job. But what happens a lot of times is they go and they introduce this tool and they essentially are letting it impersonate them on the company system.

[00:05:51]So, you know, we're all probably very familiar with that consent box that comes up that says, you know, you've logged in with this, do you want it to be able to allow it to access your email, your whatever else, things like that. So, now you have these non-human identities, these agentic AI, you know, um users, quote unquote, actually coming in and doing work on behalf of the employee or the user of that organization, and there's not anything that's necessarily directly, you know, differentiating it from what the IT and security team sees from their end. So, they don't know if those actions are being taken by a real user that's been trained, knows to follow policy, all those sort of things, or something that's, you know, non-human.

[00:06:31]Yeah, and do you think the concern is is mostly about, you know, apps usage, or is it access to data?

[00:06:39]Is it API usage, you know, systems?

[00:06:42]Where where are the where are the concerns in the the holes, the gaps today?

[00:06:47]Yes.

[00:06:48]Okay, so that was easy. Oh, no, no. So, so I data is one of the biggest concerns. Um so, what, you know, when we're talking about that consent flow that I just mentioned, you know, when a user's granting access to their data as part of this, you know, allowing an agent to do act on their behalf, a lot of times they don't realize the extent of what data they're providing access to. So, I always joke around and use my fictitious AI agent supercoolcalendarcompany.com, whatever. Mhm. You know, something that's like, oh, yeah, we organize your calendar. We'll we'll help you, you know, make your meetings more efficient or things along those lines.

[00:07:23]You know, user gets it, it's great. They authorize it, and they say, yeah, I gave it access to my calendar. Well, maybe you didn't just give it access to your calendar. You might have given it access to your calendar, your email, your file store, other company records that the user's not even aware of. So, you know, it depends on that scope, and a lot of times, you know, folks who may not be as technical or may just be looking to, you know, just accept whatever comes across.

[00:07:45]I mean, we all know the issue with, you know, those license agreements that everybody just clicks accept to. Similar type of issue, you know, it's like, "Oh, this is the access it needs to work?"

[00:07:53]Sure, go ahead.

[00:07:55]And then at that point, that agent can then, you know, you mentioned application. It can start acting on behalf of that user or maybe other applications. So, let's say they experience a breach or get hacked and they're looking, you know, the people who hacked it are looking at, well, what is it I have access to? Now, they can tell this agent, "Well, go try to forward email from here, pull files from here." And all it's really supposed to be doing is touching your calendar. So, it's a big mix of all of those things combined right now.

[00:08:21]Yeah, and I thought I think most companies, to say the least, don't have identity uh human identity really figured out.

[00:08:29]And yet, we're talking about a world where agents, you know, supposedly might outnumber humans, you know, 50 to 1 or something. Uh and that's where a lot of the upside opportunity for AI exists.

[00:08:44]What does it take to get their infrastructure, systems, processes ready for that kind of world?

[00:08:51]Yeah, so from from our perspective at Okta, you know, we look at, you know, we're a big identity company, so identity's at the core of a lot of everything we do.

[00:08:59]And so, we look at it very much in the in the scope of how can we govern these identities? How can we detect them, know where they are, make sure they're in your directory, make sure they're assigned a manager, you know, treat it essentially as a first-class identity.

[00:09:13]So, do we know if this is an AI identity or not? How do we get control over it, you know, where we putting it through access reviews? Do we have somebody who's responsible for it? Can we identify it to begin with? Um and there's all sorts of things that we're working on, tooling, uh detection mechanisms, things along those lines that help, you know, people do that easier.

[00:09:32]So, you know, just as an example, you know, a human user, you know, they log in, they do an authorization flow.

[00:09:38]That's totally normal. A human user does not go do a client secret flow. Like that's totally abnormal.

[00:09:44]Same thing with like refresh tokens. You know, a human user might want one every 1 hour. An agent might request one 500 times a minute. You know, like what are these anomalous behaviors that, you know, you can utilize to detect something's wrong. This is probably an AI agent, a non-human identity impersonating a human. And how do we now bring that in house and govern that identity?

[00:10:06]Interesting.

[00:10:07]And you know, what are some of the biggest mistakes you see companies doing right now with this whole identity management challenge or AI security in general?

[00:10:19]What what what are they doing wrong?

[00:10:20]What are the missteps and how do how are you helping them there?

[00:10:23]Yeah, so one of the biggest missteps I I I see is companies who are really trying to actually do the right thing. So, they're going out and they're telling employees like, "Hey, we're not fully up to date or ready yet for all this AI, so we just don't want you to use it yet.

[00:10:36]We're blocking these tools or doing something to prevent you from using them."

[00:10:40]And all that does is spur employees to then try to get around those safeguards or do things even in more of a shadowy way where they're accessing things that you've explicitly said don't do. So, a lot of times what I tell customers or or just folks that I speak to about this subject is, you know, you have to provide a path for it to be used legitimately and not try to just, you know, straight up run in fear and block it all because you people are going to find a way. So, if you're you know, if you're saying like, "Okay, fine. Maybe we don't want you to use platform X, but we want you to use platform Y." Fine. Tell employees, "Use platform Y. We have a license agreement with platform Y. We know our data's protected." So, at least then the majority are going to be going and using the tool that you want them to use and have a little more oversight over. So, you know, trying to just kind of deny the reality of what's happening in this field is one of the biggest mistakes I see happening right now.

[00:11:35]Interesting. And what about internally um at Okta? I mean, how are you guys looking at agents? Are you you started on this whole agentic workflow yet? And AI in security in terms of drinking your own champagne, how have you adopted some of these practices? I like that you said drinking your own champagne. I used to say eat our own dog food and then I got >> That's disgusting. I've always I've always [laughter] wondered about that.

[00:11:58]>> Oh, so we don't eat our own dog food. We drink our own champagne. Thank you.

[00:12:03]Regardless, um no, so we have tooling in place like I mentioned about being I would identify these identities and things like that, but a big part of the what we're doing right now is working in the standards world around these agents and and AI.

[00:12:16]So, for instance, cross-app access is a really good example of that. So, that's an extension that was added on to the OAuth standard that Okta played a big part in um in developing. And what that does is it's something that can be adopted by these independent software vendors who produce these AI agents, and then that allows your identity platform like Okta for instance to more easily regulate these identities and identify them. It kind of takes that control that I was talking about with the users and employees out of their hands where they're no longer the one saying I consent to this or I'm going to allow this agent in. With cross-app access, the IT and security team has that ability. So, they're able to say, "Okay, maybe I'm cool with supercoolcalendarorganizer.com."

[00:13:00]My fictitious example Maybe maybe maybe it's great. Maybe we approve of it, but we want to make sure that these specific users can use it.

[00:13:08]It's only locked down to the calendar.

[00:13:10]It can only perform these type of API calls. We have a tight rein around it, and we have a manager assigned to it and somebody who's responsible for it. So, that's the way we approach it is how can we make sure that we're governing these identities as I mentioned, you know, the what we like to say is we like to them first class identities now and making sure they follow the same processes that a human user would and that we're making sure that the IT and security team have full visibility over it.

[00:13:36]Fantastic. So, if we were to fast forward a couple of years, what would you know, your agent look like? How would it behave and act as a you know, co-worker or colleague of yours?

[00:13:48]You know, chief security officer light or agent Matt, what would you hope that agent to be doing and helping you with on a day-to-day basis?

[00:13:58]You know, it's really hard to speculate in the in the future of what they'll be capable of. I I get asked a lot, are we going to get to a point where agents are approving other agents to do things?

[00:14:07]>> [laughter] >> I I do hope that there's always some sort of element of human in the loop for these AI agents so that it's not going completely autonomous everywhere.

[00:14:18]You know, and also that we have ways that we ensure that should there ever be a failure in the AI agent land that we have a way to counteract that. You know, for instance, if there's one human managing 20 AI identities and all of a sudden the AI goes down, can we still do the job without it? You know, so making sure that they're tailored fit for the job you need them to do, but also having those contingencies in place to ensure that, you know, you don't ever hit a really hard place if there something goes wrong. But I'm hoping that they don't get to the point where they're approving themselves and creating themselves.

[00:14:49]>> [laughter] >> I mean, they already are to a certain extent, but to a to a place where we're actually okay with that.

[00:14:55]Yeah, interesting times. Well, maybe in a couple of years I'll be on the beach and my agent will be doing these interviews and just interviewing your agent. So, brave new world. Thanks so much for opening, you know, this window into machine identity and all the opportunities and challenges. Really great to catch up with a leader in this space. Yeah, absolutely. Happy to be here. Thanks, Matt. And thanks everyone for listening, watching. Check out our TV You techimpact.tv on Bloomberg and Fox Business. Thanks everyone. Thanks Matt. Bye.

[00:15:28]>> [music]