在CUBE对Okta Oktane事件的报道中

在CUBE对Okta Oktane事件的报道中

AI agent治理将身份安全转移到工作流中。 由于agents调用工具，授权任务，并跨应用程序行事，企业需要控制，在初始登录后跟踪这些操作。 面临的挑战是，在保持业务流程agents支持的同时，使这些控制在系统之间发挥作用。

在Okta公司Oktane活动期间，个别安全平台的局限性一再引起关注。 由于agents在互联系统之间运行，企业面临的问题超出了允许或取消访问的范围，据CUBE研究的主要分析师Krista Case称。

她的称表示：「我有兴趣看到，“例如，谁会在一天结束时拥有权威，而该权威将生活在这个技术堆中？”

Case和共同主播Rebecca Knight在CUBE报道Okta的Oktane事件时，与Okta的主管，合伙人和客户交谈，作为独家在CUBE,SiliconANGLE Media的直播流播室播出的一部分。 讨论审查了企业如何将AI agents投入工作，同时保持对其准入和行动的控制。 (* 下文披露。 )

以下是Krista Case和Rebecca Knight的完整视频主旨分析：

以下是CUBE对Okta Oktane事件的报道中你可能错过的三个见解：

Insight #1:AI agent治理需要共享架构和运行时间控制。

agent的工作可以跨越应用和安全平台，使持续保护取决于这些系统如何连接。 蓝图联盟带来供应商围绕一个参考架构，旨在帮助客户确保这一环境的安全，据Okta高级副总裁和副首席安全官夏洛特·威利(英语：Charlotte Wylie (pictured))称。

称女士指出，“我们不是试图单独解决这个问题，而是必须作为一个产业来激励我们以他们正在追赶的速度解决这个问题。” “我们希望确保我们提供一个架构，一个可参考的位置[ 如何使用我们大家提供的技术，以保障整个代理堆。

共享架构还需要一个控制可以支配未遂行动的点。 兹Q 根据Okta产品与技术总裁Ric Smith的说法，1Z通过Agent Gateway 扩展进入运行时间路径

他对CUBE说，“Okta是一个截然不同的过渡”。 “我们没有直言不讳，因此，随着我们朝着这个方向前进，这意味着我们可以就我们授权的事项作出更多的决策。”

在Okta内部，这种建筑挑战采取了实用的形式。 根据Okta技术，数据和情报高级副总裁Jenna Cline的说法，Dex在不增加他们必须导航的接口的情况下让员工能够访问专门的agents.

“Dex可以调用正确的子agent。 agent只是在某些事物上工作，因此它非常安全，并且非常高效，“但Dex可以为其他agents做到这一点；它可以为支出小组这样做，[ 它可以为我们信息技术服务台这样做。”

以下是CUBE对Jenna Cline的完整视频采访：

Insight #2：确保AI agents需要超越任何单一供应商的合作。

AI agent的治理取决于跨系统的准入决定。 Okta和AgileBits Inc.作为1Password开展业务，使用共享身份标准来保存agent经核实的身份和授权背景。 1Password的Crediential Broker提供秘密而未将其暴露于agent或基础模型，据1Password首席技术官Nancy Wang称。

“就如同您在允许实习生进入下一个项目之前，“你只是想让agent证明它以正确的权限水平完成了最后的任务

当agent的行为需要干预时，这种合作也很重要。 ServiceNow Inc.将agents映射到他们支持的业务流程，并与Okta合作制作agent身份和会话代号。 根据ServiceNow的AI平台安全产品副总裁Bhakti Pitre的说法，这些连接为何时以及如何控制agent的决定提供了信息。

“这个行业的每个人都需要走到一起来，成为彼此的朋友或朋友，” “如果人工智能需要达到每个人使用人工智能的民主化程度，那么，每个销售商就需要联合起来发挥其作用。”

以下是CUBE对王南希的完整视频采访：

Insight #3：更简单的基础设施和既定治理为AI agents提供了基础。

美国专业高尔夫协会依赖Okta和Auth0作为消除传统基础设施层，包括数据中心和企业网络的架构的一部分。 根据美国PGA首席技术官Kevin Scott的说法，这些选择有助于将资源用于为成员和客户服务的技术。

他告诉CUBE, “我们没有多少团队，“我并不想有所退缩，但如果我们要把技术预算的一半花在管理系统上，那么我们的客户就永远不会出现这样的说法。 ”

在范德比尔特大学，重点是将既定治理适用于AI agent身份。 根据范德比尔特首席信息官Shane Callahan的说法，该大学使用由Okta提供动力的OneVU作为单人签名，并正在权衡机构监督应如何容纳另一种身份。

我们把AI当成全新的东西。 但事实上，你仍在谈论另一个技术工具的身份数据，“你不必重新创造一切。 如果你有治理程序和技术吸收程序，就这样做，使用它。”

以下是CUBE对凯文·斯科特的完整视频采访：

为了更多观看CUBE对Okta Oktane事件的报道

(* 披露：CUBE是Okta Oktane事件的付费媒体合作伙伴。 CUBE活动报道的主办方对CUBE或SiliconANGLE上的内容没有编辑控制。 ).

照片：SiliconANGLE

SiliconANGLE联合创始人John Furrier的留言：

支持我们的使命，通过与CUBE社区接触，保持内容的开放和自由。 加入CUBE的校友信托网络，其中技术领导者相互连接，分享情报，创造机会。

- 15M+观看CUBE视频，为AI、云层、网络安全等各种对话提供动力

- 11.4k+CUBE校友——通过独特的信任网络与11400多名技术和企业领袖建立联系，塑造未来

你是AWS客户吗？在财务上支持SiliconANGLE，从我们的市场门户页面和链接购买您的AWS服务：https://siliconangle.com/aws-marketplace/.

关于 SiliconANGLE 媒体

SiliconANGLE Media由技术视觉家约翰·弗瑞尔(John Furrier)和戴夫·韦兰特(Dave Vellante)创立，构建了产业领先数字媒体品牌的动态生态系统，达到1500+百万精英技术专业人士。 利用CUBEAi.com神经网络，帮助科技公司以数据为导向做出决策

本文由 AI图鉴自动抓取并翻译，版权归原作者所有；如需查看原文请点下方链接。

Three insights you may have missed from theCUBE’s coverage of Okta’s Oktane event

AI agent governance is moving identity security into the flow of work. As agents call tools, delegate tasks and act across applications, enterprises need controls that follow those actions beyond an initial login. The challenge is making those controls work across systems while preserving the business processes agents support.

The limits of individual security platforms emerged as a recurring concern during Okta Inc.’s Oktane event. As agents operate across connected systems, enterprises face questions that extend beyond granting or revoking access, according to Krista Case, principal analyst at theCUBE Research.

“What I am interested to see as it gets rolled out and as we start to talk with customers about it is if there are conflicting insights across these platforms about an action that needs to be taken,” she said. “For example, who is going to have the authority at the end of the day, and where is that authority going to live in this tech stack?”

Case and co-host Rebecca Knight spoke with Okta executives, partners and customers during theCUBE’s coverage of Okta’s Oktane event, as part of an exclusive broadcast on theCUBE, SiliconANGLE Media’s livestreaming studio. The discussions examined how enterprises are putting AI agents to work while maintaining control over their access and actions. (* Disclosure below.)

Here’s the complete video keynote analysis with Krista Case and Rebecca Knight:

Here are three insights you may have missed from theCUBE’s coverage of Okta’s Oktane event:

Insight #1: AI agent governance requires shared architecture and runtime controls.

An agent’s work can span applications and security platforms, making consistent protection dependent on how those systems connect. The Blueprint Alliance brings vendors together around a reference architecture intended to help customers secure that environment, according to Charlotte Wylie (pictured), senior vice president and deputy chief security officer of Okta.

“Rather than trying to solve that problem alone, there is a recognition that we have to galvanize as an industry to solve this problem for our customers at a speed that they are scrambling to run after,” she said. “We want to make sure that we provide an architecture, a referenceable position [for] how to use the technology that we all offer in a way that we can secure the entire agentic stack.”

Shared architecture also needs a point where controls can govern attempted actions. Okta’s move into the runtime path through its Agent Gateway expands the identity provider’s role from granting access to evaluating what agents seek to do, according to Ric Smith, president of products and technology at Okta.

“That is a very different transition for Okta,” he told theCUBE. “We had not been inline, so with us moving in that direction, it means that we can do a lot more decision-making in terms of what we authorize.”

Inside Okta, that architectural challenge takes a practical form. Dex gives employees access to specialized agents without multiplying the interfaces they must navigate, according to Jenna Cline, senior vice president of technology, data and intelligence at Okta.

“Dex can call upon the right sub-agent. That agent is scoped to only work on certain things, so it’s very secure, and it’s very efficient because it does one thing really well,” she said. “But Dex can do that for other agents; it can do that for the expense team [and] it can do that for our IT help desk.”

Here’s theCUBE’s complete video interview with Jenna Cline:

Insight #2: Securing AI agents requires cooperation beyond any single vendor.

AI agent governance depends on access decisions carrying across systems. Okta and AgileBits Inc., doing business as 1Password, use shared identity standards to preserve an agent’s verified identity and authorization context. 1Password’s Credential Broker supplies secrets without exposing them to the agent or the underlying model, according to Nancy Wang, chief technology officer of 1Password.

“Just like you would verify whatever an intern does before you allow them to move on to the next project, [it’s the] same thing with agents,” Wang told theCUBE. “You just want that agent to prove that it actually finished its last task with the right level of permissions, doing the right thing before you allow it to move on to the next task.”

That cooperation also matters when an agent’s behavior requires intervention. ServiceNow Inc. maps agents to the business processes they support and is working with Okta on agent identities and session tokens. Those connections inform decisions about when and how to contain an agent, according to Bhakti Pitre, vice president of AI platform security product at ServiceNow.

“Everybody in the industry needs to come together and be each other’s friends or frenemies,” she said. “If the AI needs to be at the scale where it is democratized for every person to use it, then every vendor needs to come together and play their part.”

Here’s theCUBE’s complete video interview with Nancy Wang:

Insight #3: Simpler infrastructure and established governance provide a foundation for AI agents.

The Professional Golfers’ Association of America relies on Okta and Auth0 as part of an architecture that has eliminated traditional infrastructure layers, including data centers and a corporate network. Those choices help direct resources toward technology that serves members and customers, according to Kevin Scott, chief technology officer of the PGA of America.

“We don’t have much of a team — it’s small, it is lean,” he told theCUBE. “I don’t mean to be reductive, but if we were to spend half of the technology budget on administering systems, none of our customers are ever going to come along and say, ‘Thank you for that.’”

At Vanderbilt University, the emphasis is on applying established governance to AI agent identities. The university uses OneVU, powered by Okta, for single sign-on and is weighing how institutional oversight should accommodate another kind of identity, according to Shane Callahan, chief information officer of Vanderbilt.

“We’re treating AI like it’s a brand-new thing. But really, you’re still talking about identity data in another technology tool,” he said. “You don’t have to recreate everything. If you have a governance process and a technology intake program, do that, use that.”

Here’s theCUBE’s complete video interview with Kevin Scott:

To watch more of theCUBE’s coverage of Okta’s Oktane event, here’s our complete video playlist:

(* Disclosure: TheCUBE is a paid media partner for Okta’s Oktane event. Sponsors of theCUBE’s event coverage do not have editorial control over content on theCUBE or SiliconANGLE.)

Photo: SiliconANGLE

A message from John Furrier, co-founder of SiliconANGLE:

Support our mission to keep content open and free by engaging with theCUBE community. Join theCUBE’s Alumni Trust Network, where technology leaders connect, share intelligence and create opportunities.

- 15M+ viewers of theCUBE videos, powering conversations across AI, cloud, cybersecurity and more

- 11.4k+ theCUBE alumni — Connect with more than 11,400 tech and business leaders shaping the future through a unique trusted-based network

Are you an AWS customer? Support SiliconANGLE financially by buying your AWS services from our Marketplace portal page and links: https://siliconangle.com/aws-marketplace/

About SiliconANGLE Media

Founded by tech visionaries John Furrier and Dave Vellante, SiliconANGLE Media has built a dynamic ecosystem of industry-leading digital media brands that reach 15+ million elite tech professionals. Our new proprietary theCUBE AI Video Cloud is breaking ground in audience interaction, leveraging theCUBEai.com neural network to help technology companies make data-driven decisions and stay at the forefront of industry conversations.

Auto-fetched and translated by AI Atlas. All rights belong to the original author.