Okta's Ambitious Strategy for AI Identity Management Amid Rising Security Concerns

Amid increasing concerns over the security risks posed by AI agents, Okta, a prominent identity and access management (IAM) provider, is positioning itself as a leader in this expanding market. CEO Todd McKinnon highlighted in an earnings call that, "Identity is the primary control plane for securing AI," suggesting that Okta's offerings could be critical for managing future agentic risks.

The centerpiece of Okta's strategy is its new platform, Okta for AI Agents, which aims to manage and secure the activities of AI entities within organizations. The platform promises to serve as a foundation for securing what McKinnon believes could become one of the most significant categories in cybersecurity—agent identity management.

At the annual Oktane conference, Okta showcased enhancements that include its Agent Single Sign-On (SSO) identity model, rules for agent interactions, and improved policy enforcement for real-time actions. However, experts warn that even well-authenticated AI agents can behave unpredictably, and identity management alone may not adequately address the broader challenges of agentic security.

Aisling Dawson, an analyst at ABI Research, asserts, "Identity in itself is not the largest problem in the agentic world. Authentication is only the first stage." The leap from human to AI identities introduces complexities, as agents operate on a vastly different scale than their human counterparts. Existing vendors in the non-human identity space may hold a competitive edge, particularly as they navigate unique challenges such as multi-hop delegation.

The recent breach of Hugging Face underlines the necessity for comprehensive security measures, including governance and behavioral monitoring. According to Ric Smith, Okta's president of products and technology, the incident could have been mitigated with better security practices, especially regarding the elimination of persistent credentials.

The Agentic Security Space is a Free-for-All

As Gartner predicts, by 2028, the average Fortune 500 company will employ over 150,000 AI agents, a significant increase from less than 15 in 2025. Press coverage has increasingly focused on incidents involving AI agents going rogue, emphasizing the need for proactive security solutions.

Gartner also anticipates the market for securing AI to surge to $2.8 billion this year, reflecting an 83% increase since 2025. This growth trajectory is expected to reach nearly $5 billion in 2027 and $7.7 billion by 2028. With the identity security market much larger and projected to expand from $29 billion in 2025 to $56 billion by 2029, the intersection of identity management and AI security is poised for intense competition.

Major players in this space are not just limited to IAM vendors but include hyperscalers and third-party AI development platforms that incorporate agentic security features. Companies like Palo Alto Networks, CrowdStrike, and Zscaler have made significant acquisitions, underscoring the urgency to establish market-leading positions as AI adoption accelerates.

Emanuel Figueroa, an IDC analyst, noted, "Everyone wants to own the traffic system of the agent economy." With various stakeholders—including identity vendors, cloud providers, and AI platforms—competing for a foothold in the agentic security arena, the challenge lies in establishing which entity enterprises will trust to oversee their agent operations.

Okta has potential advantages over Microsoft due to its agnostic identity platform, which may appeal to enterprises seeking to avoid vendor lock-in. This demand is influenced by factors such as sovereignty requirements, setting Okta up well against larger cloud providers.

As more organizations seek to streamline operations, Figueroa points out, "Most enterprises are not looking for another dashboard; they’re looking for fewer of them." This presents a unique opportunity for Okta, capitalizing on its IAM focus and platform independence, even as competition continues to heat up.

The rapidly evolving realm of AI identity management presents both challenges and opportunities. Okta's commitment to enhancing identity management for AI agents may place it at the forefront, but it must remain vigilant against new risks and increasing competitive pressures.