AI agents are a powerful new identity type, and we are just beginning to unlock their potential, according to Okta CEO and Co-Founder Todd McKinnon. But with that potential comes a host of new security challenges that must be managed. This is where the identity security fabric comes in.
The underlying logic is simple: Identity technology must have comprehensive coverage and should not exist in silos. “The concept of an identity security fabric sets you up really well for this agentic age we’re in,” McKinnon said. He explained that with a fabric, “you have a comprehensive view of the data and the access points that these agents need.”
McKinnon stressed that an effective identity security fabric must secure “every identity type, from customers to employees to partners to AI agents to non-human identities,” across all resources — whether they are SaaS applications, databases, or on-premise systems.
He also emphasized the broad nature of the concept: “It’s a new category. It’s not a specific company. It’s not a specific product.”
Securing the AI agent
AI agents can use data and information to unlock new types of workflows and business value. But realizing that value requires giving agents access and putting guardrails in place. “When you put an agent in this construct of a fabric, you’re set up for success, because you can model the new identity type of an agent.”
This visibility is non-negotiable, according to McKinnon. “You have to know what the agent is doing ... so you can get the best of both worlds: innovation and security, and visibility and control.”
Less complexity, better outcomes
The concept of an identity security fabric is gaining traction in the industry. “It’s hard to argue with ... less complexity, less cost, [and] better outcomes,” McKinnon pointed out, noting that security and IT leaders “don’t want to have 50 different identity tools; they want one fabric.”
Looking ahead, McKinnon believes that investments in an identity security fabric will pay off. “The ultimate manifestation of this concept is that companies just pick the best technology to achieve their business objectives, and all of the friction in terms of authenticating and access and governance and privilege and the risk, it just is a solved problem,” he said.
