Core highlights from Oktane 2026 breakout sessions
Govern AI agents as first-class identities: Centralized discovery, lifecycle management, and real-time compliance are essential for managing shadow AI as enterprises embed AI into workflows. Okta for AI Agents enables organizations such as HubSpot to securely connect agents to apps via Cross App Access, establish robust agent inventories, and enforce least-privilege access.
Defend proactively with identity-first security: Stay ahead of advanced cyber threats by combining continuous posture monitoring, phishing-resistant authentication, such as Okta FastPass, and fine-grained authorization. Through the Okta Platform, organizations such as Vanderbilt University build highly secure, frictionless digital experiences that protect tens of billions of logins against sophisticated attacks.
Turn customer identity into a growth engine: Customer authentication can be transformed from a standard sign-in process into a revenue-driving growth multiplier by streamlining and securing digital experiences across channels. Platforms like Auth0 help companies such as Hitachi Vantara unify customer identity and access management (CIAM) globally, enabling organizations to eliminate fragmentation, scale seamlessly, and optimize user journeys at every digital touchpoint.
At Oktane 2026, more than 3,200 leaders from across the globe converged to connect, collaborate, and share new ways to secure their workforce, customers, and their growing fleet of AI agents.
After kick-starting each day with inspiration from world-class athletes and a visionary keynote from Okta CEO and Co-Founder Todd McKinnon, attendees packed breakout sessions to discover what 2027 holds for identity security and access management.
Whether you were in the room, streamed online, or are just catching up, here’s a snapshot of what we covered in our breakout sessions at Oktane this year.
The next evolution of securing enterprise AI agents with Okta for AI Agents
Major enterprise organizations are embedding AI agents across their businesses. As these organizations grant access to APIs, SaaS applications, and multiple cloud environments, teams are just as quickly uncovering unmanaged shadow AI and over-privileged agents. We’re working with our customers to deliver new ways to secure human, non-human, and AI agent identities before, during, and after authentication.
To truly treat AI agents as first-class identities, companies need a centralized solution that includes shadow AI discovery, end-to-end lifecycle management, runtime enforcement, and a kill switch.
Enterprise architectures in action
Teams like HubSpot are embracing the Cross App Access protocol to establish agent inventories, enforce least-privilege access, and generate real-time compliance audit trails. In “Unblocking the agentic enterprise: How Cross App Access secures AI connections,” HubSpot shared how it leverages Cross App Access (XAA) to route agent-to-app connections directly through their identity provider.
“Cross App Access helps us get new users started using AI tools on day one. They can go through one prompt box and gain access to all corporate knowledge to accelerate onboarding.”
— Andrew Meinert, Director of System Operations and AI, HubSpot
Catch up on more of our Okta for AI Agents breakout sessions:
- “One control plane, every agent: Governing AI agents at enterprise scale”: See how the PGA of America governs agent identity as a discipline from day one, not an afterthought bolted on later.
- “Governing AI agents with Okta: Securing MCP workflows and non-human identities at scale”: Learn how Snowflake extends Okta’s identity and governance capabilities to secure AI-driven workflows using Model Context Protocol (MCP) servers and Identity Threat Protection.
Unlock new AI revenue channels using Auth0
As highlighted in the Auth0 keynote, customer journeys and shopping experiences are shifting. For our customers to deliver on modern expectations, they must securely engage their own customers at every digital touchpoint, turning identity into a direct driver of top-line revenue and long-term brand value.
This is why Auth0 is built to help turn customer authentication and access from a simple sign-in into a growth multiplier, converting customer intent into revenue and loyalty and optimizing their journey at every touchpoint.
How modern CIAM is converting intent into measurable business velocity
Customers like Hitachi Vantara are already putting these principles into practice. In “From fragmentation to enterprise scale: Hitachi Vantara’s global CIAM transformation,” they shared the impact of unifying customer identity and access management (CIAM) across thousands of customers, partners, and other Hitachi Group companies.
“With CIAM unified in Auth0, we have identity lifecycle management, a trusted source for user data, customizable user journeys, and, most importantly, as a security company, we’re always in control of what’s happening with our identities at any time.”
— Elisabeth Bristol, Senior Director of Identity and Access Management, Hitachi Vantara
See these principles in action in more of our Auth0 breakout sessions:
- “Auth0@scale: How E.ON is scaling up hundreds of tenants including automated compliance enforcement”: Discover how energy giant E.ON manages nearly 200 Auth0 tenants and more than 8 million identities while continuously enforcing strict enterprise cybersecurity policies using a hyperscale CIAM solution with full multi-tenant and multi-domain support.
Improve visibility to take proactive steps toward identity protection with the Okta Platform
By combining continuous posture monitoring through Identity Security Posture Management, phishing-resistant authentication, and fine grained authorization, security operations teams can more proactively defend against cyberthreats. Today, teams are already protecting against a high volume of attacks and securing tens of billions of sign-ins.
How IT and security leaders are trying to eliminate modern phishing vectors
Customers like Vanderbilt University, which operates at the same scale as a Fortune 500 organization, shared how they’re “Running an open campus with enterprise-grade IT and cybersecurity” by deepening technology's role as a strategic partner and delivering a seamless digital experience.
“As security leaders, we can’t become the Abominable No-Man, so we have to use security tooling to figure out how to partner with other teams and get to the ‘yes’.”
— Shane Callahan, Chief Information Officer, Vanderbilt University
See how other Okta customers are using identity-first security and automated access controls to drive innovation and collaboration:
- “Going passwordless: How nonprofits beat phishing and won over users”: Hear directly from nonprofit technology leaders, including those from Achievement First, who successfully deployed Okta FastPass to reduce password-based phishing vulnerabilities in one of the most cyber-attacked sectors.
- “Flowcase: Your peers are solving identity challenges with Workflows and here’s how”: In this one-hour showcase, hear from Okta customers who are pushing the boundaries of what's possible with Okta Workflows and identity automation.
Catch up on Oktane 2026 on demand now
The insights shared at Oktane 2026 make one thing clear: Securing the modern enterprise requires a proactive, identity-first approach, whether you are protecting your workforce, scaling customer experiences, or securing AI agents.
Keep the Oktane momentum going: Explore the full catalog of on-demand keynotes, customer stories, breakout sessions, and more.
