Today, Okta announced an expanded multi-year Strategic Collaboration Agreement (SCA) with Amazon Web Services (AWS). Building on a collaboration that already protects thousands of enterprise customers with over 25 integrations, this new agreement will enable customers to secure agentic AI and accelerate cloud transformation through deepened product collaboration, commercial alignment, and go-to-market execution with Okta’s extended partner ecosystem.
This expanded collaboration coincides with Okta surpassing $2 billion in sales through AWS Marketplace – less than two years after surpassing $1 billion. As enterprises increasingly rely on the AWS Marketplace for identity and security procurement, Okta has emerged as one of the most widely adopted vendors in AWS Marketplace. By leveraging pre-committed cloud budgets, streamlined purchasing, and multi-product bundles, joint customers can reduce procurement friction and deliver faster time-to-value.
“When organizations and their employees start deploying AI agents, security shouldn’t be just tacked on at the end,” said Eric Kelleher, President & Chief Operating Officer, Okta. "Expanding our work with AWS puts control directly within the environments where our customers are building. Together, we are enabling enterprises to treat agents as first-class identities, with governance over what they can access and the ability to act quickly the moment risk is detected.”
"As more customers bring AI agents into production on AWS, they need identity controls that work from day one," said Chet Kapoor, VP, AWS. "Our expanded collaboration with Okta makes it easier for customers to govern agent access end to end across their enterprise applications with simplified procurement through AWS Marketplace.”
“As we build and deploy AI capabilities, securing the identities and infrastructure behind them is paramount,” said Arnab Bose, Chief Product Officer, Asana. “As an Okta customer, we rely on Okta, alongside AWS, to secure our identity and operations. Securing AI and agentic workflows with Okta, an AWS Partner, empowers enterprises with what they need to safely scale AI agents across the apps their teams use every day.”
Advancing agentic AI security and governance
Today, a new agent is deployed on Amazon Bedrock AgentCore nearly every 10 seconds. However, in the rush to push agents to production, access often bypasses the enterprise identity provider and secure channels. This leaves developers needing to bolt on security later and security teams challenged with maintaining consistent control across agents.
Through the expanded collaboration with AWS, Okta will help organizations further secure AI agents by exploring new potential use cases for joint customers:
Cross App Access: Building support for the open Cross App Access (XAA) protocol into Amazon Bedrock AgentCore, allowing agents to access SaaS applications on a user's behalf without repetitive consent prompts.
Human in the Loop: High-stakes operations, such as large financial transfers or critical database changes, can be paused by the runtime environment until an explicit, verified human approval is triggered through Auth0 for AI Agents.
Agent Invocation by Okta Verified Users: By integrating Okta Identity Management with Amazon Bedrock AgentCore, every user permitted to invoke an agent hosted on Bedrock AgentCore is authenticated with Okta-verified credentials.
Identity Policy Integration: Amazon Bedrock AgentCore Gateway will be able to use Okta as a Policy Decision Point (PDP). Alongside AWS's Cedar Policy Language, this allows customers to define relationship-based access controls (ReBAC) at a granular level, helping support secure and consistent access across humans and agents alike.
Identity Governance and Access Certification: By registering agents hosted on AgentCore Runtime into the Okta for AI Agents directory, organizations can leverage Okta Identity Governance to run automated access certification campaigns. It allows administrators to periodically review, recertify, or revoke an agent's access to non-AWS enterprise resources and SaaS applications, helping support continuous compliance and reduce over-provisioned permissions.
This builds on currently available integrations, which will continue to advance through this collaboration:
Okta for AI Agents for Amazon Bedrock AgentCore: Provides an identity layer to secure AI agents built on Amazon Bedrock AgentCore. It discovers shadow AI agents, registers agents as governed identities, assigns human owners, enforces least-privilege access, makes runtime authorization decisions, detects threats, and streamlines lifecycle management.
AI Identity for Commerce and AI Identity for B2B on Amazon Bedrock AgentCore: Gives developers building on Amazon Bedrock AgentCore out-of-the-box identity controls. Auth0 authenticates users before agents act on their behalf, securely manages credentials, enforces fine-grained authorization (FGA), and handles asynchronous step-up.
Deeper alignment to accelerate secure AI adoption
Okta is expanding its co-selling collaboration with AWS to fuel global expansion, further establishing AWS Marketplace as a primary channel for customers to easily acquire, deploy, and scale identity solutions across their AI and cloud workloads. This commercial alignment is designed to drive both customer acquisition and long-term retention by providing a seamless, end-to-end buying and deployment experience with deeper alignment with Okta’s extended partner ecosystem of Global System Integrators, System Integrators, Resellers, Service Providers, and Independent Software Vendors.
For more information, check out the Okta AWS Partner page here.
