Flaws & Advisories
Okta expands identity services into runtime enforcement for AI agents
The identity provider is moving into the runtime path with an Agent Gateway to prevent AI agents from taking unintended actions in enterprise systems.
Machine identities
Machine identities are non-human entities, including service accounts, API keys, and secrets, used by software, bots, and devices to authenticate and access network resources.
Understand the story
Follow this story through dated reporting and the underlying records. Evidence labels distinguish documented findings, attributed reporting, disputed accounts and claims that remain unverified. Start with the background reports below, then read the latest developments.
Latest reporting
More on Machine identities
Authentication & MFA
Security professionals rely on passwords despite passkey knowledge
A joint study by Okta and Yubico finds 43% of security experts use passwords for work due to structural friction and legacy onboarding.
Authentication & MFA
Six vendors ship agent identity tools ahead of IETF draft expiration in November
Okta, ServiceNow, and four other vendors have released agent identity tools while the IETF's primary token-exchange draft is set to expire in November.