What Okta for AI Agents already covers
In short:Okta for AI Agents brings agents into Universal Directory with owners, short-lived tokens and access reviews. Agent SSO, built on Cross App Access, is included in core Okta SSO. Gateway and human-in-the-loop controls were listed as coming after general availability.
An agent identity layer runs alongside your identity provider, never instead of it. This page is unscored. It records what Okta for AI Agents covers so you can decide what, if anything, to add.
What does Okta for AI Agents already cover for agents?
- Okta for AI Agents became generally available on 29 April 2026. ok-ga
- It registers homegrown agents in Universal Directory and imports agents from Salesforce Agentforce, Amazon Bedrock AgentCore and ServiceNow. ok-ga
- Short-lived tokens replace hardcoded credentials. ok-ga
- Admins can assign human owners and run access requests and certifications. ok-ga
- Agent SSO, based on Cross App Access, became generally available on 24 August 2026 and is included in core Okta SSO at no extra cost. ok-agentsso
- Cross App Access became the MCP Enterprise-Managed Authorization extension, adopted by Anthropic, Microsoft and Okta. mcp-ema
- Auth0 for AI Agents offers asynchronous authorization through CIBA and became generally available on 19 November 2025. a0-ga
What is not covered yet?
- Agent Gateway and human-in-the-loop controls were listed as coming after general availability. ok-ga
- Discovery of agents nobody registered is not described beyond imports from named platforms. ok-ga
What does it cost?
Agent SSO is included in core Okta SSO at no extra cost. A price for Okta for AI Agents was not found in the sources read. ok-agentsso
Which scored platforms run alongside it?
These platforms state in public material that they work with an existing identity provider. The figures are their overall totals.
| Pos | Platform | Total | Own | Cred | Deleg | Run | Disc | Std | Buy | Form |
|---|---|---|---|---|---|---|---|---|---|---|
| 1 | NewCore | 8.70 | 10 | 9 | 9 | 10 | 8 | 5 | 5 | |
| 2 | Aembit | 7.80 | 6 | 10 | 9 | 7 | 4 | 10 | 9 | |
| 3= | Silverfort | 7.55 | 9 | 6 | 7 | 9 | 9 | 5 | 6 |
Key: Own = Agent identity and ownership (20)Cred = Credential model (20)Deleg = Delegation and on-behalf-of (15)Run = Runtime authorization and human approval (20)Disc = Discovery of unregistered agents (10)Std = Standards (10)Buy = Buying clarity (5)Scores 0 to 10. Total = weighted sum / 100. Totals within 0.10 share a rank (shown as =).
Related
Sources
- [ok-ga] Okta for AI Agents generally available. https://www.okta.com/blog/ai/okta-for-ai-agents-general-availability/. Read .
- [ok-agentsso] Okta Agent SSO. https://www.okta.com/newsroom/press-releases/okta-brings-first-class-identity-to-ai-agents-with-agent-sso/. Read .
- [mcp-ema] MCP Enterprise-Managed Authorization. https://blog.modelcontextprotocol.io/posts/enterprise-managed-auth/. Read .
- [a0-ga] Auth0 for AI Agents generally available. https://auth0.com/blog/auth0-for-ai-agents-generally-available/. Read .