Ping Identity has made significant strides in the realm of AI with the general availability of its "Identity for AI" platform.
This new model is designed to manage the unique challenges posed by autonomous AI agents operating across enterprises.
As organizations begin utilizing these AI agents, the focus shifts from merely managing identities to actively controlling their behaviors at runtime.
Traditional systems of record are proving inadequate, necessitating a robust system to make decisions and enforce them in real time.
Core Components of Identity for AI
The Identity for AI solution encompasses three primary components: Agent IAM Core, Agent Gateway, and Agent Detection. These elements work in harmony to establish agent identity, delegate authority, and detect agent activity while enforcing actions during runtime.
Traditional identity systems focused on authentication and access. In contrast, AI agents require a more comprehensive approach that involves monitoring and authorizing activities in real time. This shift demands strict delegation of authority, distinct from impersonation, to ensure clear accountability for both on-behalf-of-user and autonomous actions.
Adapting to AI Agents
Organizations must control AI agents’ actions through continuous, contextual authorizationOrganizations must define and control what actions AI agents can autonomously take through continuous, contextual authorization. Andre Durand, CEO and Founder of Ping Identity, highlights the importance of identity management by stating, “AI agents are not features. They are actors in the enterprise that require identity, authority, and accountability.”
Effective identity solutions provide ongoing verification and enforcement, aligning with the company's broader mission of fostering digital trust in an agentic era.
Aligning with Ecosystem Leaders
Ping Identity's strategy has gained endorsements from global leaders in its partner ecosystem. Chad Veldhuizen from Deloitte emphasizes the necessity of treating AI agents as integral digital identities with rigorous authentication and authorization processes, while Kyle Krum from Cloudflare alerts to the increased risks AI agents present and the need for strong control mechanisms to safeguard sensitive data.
Functionality and Security Enhancements
Identity for AI extends its capabilities beyond mere access control, offering continuous and contextual authorization at the moment of action. This allows enterprises to:
- Treat AI agents as distinct identities with assigned ownership, credentials, and policies
- Utilize delegated tokens for scope-specific access rather than relying on human credentials
- Enforce least-privilege access policies by evaluating agent requests in real time
- Secure integrations via Agent Gateway without the necessity of altering existing services
- Identify and authenticate external AI agents using behavioral analysis and bot protocols
Implementing Agent IAM Core, Gateway, and Detection
Agent IAM Core manages AI agents in real time using delegated access policiesThe Agent IAM Core enables real-time management of AI agents, employing delegated entitlements and policies to map accesses. Agent Gateway offers a standardized interface for agents interacting with services, applying fine-grained authorization, and consolidating monitoring and audit functions.
Agent Detection, available through PingOne Protect, enhances security by assessing AI-induced risks and integrating these assessments into authorization pathways.
Safe AI Innovation and Future Developments
Integrating identity into runtime settings ensures enterprises maintain extensive control over AI agents, permitting deployment while safeguarding operational boundaries. By enforcing least-privilege principles for non-human identities, organizations can ensure compliance through centralized policy enforcement and audit capabilities. The Identity for AI framework forms a cornerstone of Ping's trust architecture, supporting both human and non-human identity governance.
Future updates to the platform promise expanded capabilities for authorization and governance, further aiding enterprise management of AI systems and lifecycle controls. The global rollout of Identity for AI is expected by March 31, 2026, marking a significant step forward in unified identity control.
Ping Identity, a pioneer in securing digital identities for the world’s largest enterprises, announced the General Availability of Identity for AI, introducing a model designed for the realities of AI agents operating across the enterprise.
As autonomous agents move into production, the challenge is no longer just managing identity. It is controlling what those identities do as they operate at runtime. In an agentic enterprise, the system of record is not sufficient. The system that enforces decisions at runtime becomes the system of control.
Components
Identity for AI is now generally available with three core components: Agent IAM Core, Agent Gateway, and Agent Detection. Together, they establish agent identity, enforce delegated authority at runtime, and detect agentic activity.
Traditional identity was built for authentication and access. Autonomous agents change that model. Every action carries enterprise impact. Managing identities still matters, but it is no longer sufficient. The bigger challenge is execution. Organizations must detect when agents are active and enforce what they are allowed to do in real time.
AI agents
That shift demands explicit delegation, not impersonation. Humans remain accountable, with approval where appropriate. This applies across on-behalf-of-user and autonomous flows.
Instead of extending human credentials to AI systems, organizations define and enforce what an agent is allowed to do through continuous, contextual authorization.
“AI agents are not features. They are actors in the enterprise that require identity, authority, and accountability,” said Andre Durand, CEO and Founder of Ping Identity. “Identity is foundational. Agents acting autonomously at agentic scale and speed against systems of record will require continuous verification and enforcement at every decision.”
This milestone extends Ping’s Digital Trust mission into the agentic era, ensuring human and non-human identities are governed under a unified identity framework.
Ecosystem alignment
Several global leaders from Ping's preferred partner ecosystem recognize identity as foundational to trusted AI adoption.
“Agent autonomy is only as safe as the identity and access controls behind it. AI agents should be treated like first-class digital identities: authenticate them, authorize what they can do, and audit what they touch to close governance gaps across the identity lifecycle,” said Chad Veldhuizen, alliance leader for Ping Identity and managing director, Deloitte & Touche LLP.
“AI agents introduce a new class of risk. It’s not just about access, it’s about having the security controls and oversight in place to understand what those agents do once they’re deployed. A holistic view of agent activity and strong guardrails to enforce least privilege and protect sensitive data, is critical in the AI era,” said Kyle Krum, Senior Director of Product Management, Cloudflare.
What identity for AI delivers today
Identity for AI extends beyond access at login by establishing control at the moment of action through continuous, contextual authorization at runtime, operating at enterprise scale. Enterprises define delegated authority so agents act with the right permissions, at the right time, in the right context, with clear accountability to the users they represent.
With Identity for AI, enterprises can:
- Treat AI agents as first-class identities with defined ownership, credentials, and policy
- Use delegated, scoped tokens instead of human impersonation or shared credentials
- Enforce least privilege at the moment of action, evaluating each agent request in real time
- Secure MCP-based integrations through Agent Gateway without rewriting existing services
- Detect and identify external AI agents using behavioral signals and bot authentication protocols
Agent IAM Core
Agent IAM Core enables enterprises to onboard, manage, authenticate, and authorize AI agents in real time as a new identity type, mapping agent access based on delegated entitlements and policy.
Agent Gateway
Agent Gateway provides a runtime enforcement layer that standardizes how agents interact with services, invokes fine-grained authorization, and centralizes monitoring and audit of agent activity.
Agent Detection
Agent Detection, available via PingOne Protect, provides runtime agent detection and risk assessment for AI agents. It identifies personal and external AI agents through bot authentication protocols and behavioral signals, and feeds those signals into authorization decisions, routing them into appropriate authentication and authorization pathways.
Identity for AI also standardizes enforcement across emerging AI integration frameworks, including the Model Context Protocol (MCP), enabling secure agent-to-system interactions at scale. Together, these capabilities establish a runtime enforcement layer that governs AI behavior across systems, beyond just identity lifecycle and access control.
Enabling safe AI innovation
By moving identity into runtime, enterprises gain continuous control over AI-driven actions. This allows organizations to deploy AI agents in production while maintaining clear boundaries around what those agents are allowed to do.
Least-privilege access can be enforced for non-human identities, with centralized policy enforcement and support for autonomous workflows backed by auditability and accountability. Identity for AI extends Ping’s enterprise trust architecture into the agentic era, unifying access and governance across human and non-human identities under a single architectural model.
Future enhancements will expand authorization and governance capabilities, helping enterprises manage agent and MCP access at scale while deepening agent visibility and lifecycle controls.
Availability
Identity for AI will be generally available globally by March 31, 2026.
