Okta for AI Agents
Vendor: Okta
In short: Okta for AI Agents became generally available on 29 April 2026. It registers agents in Universal Directory, imports them from Agentforce, Bedrock AgentCore and ServiceNow, assigns human owners and swaps hardcoded credentials for short-lived tokens. Agent Gateway and human-in-the-loop are listed as coming after GA.
When does Okta for AI Agents fit?
- Most of your people sign in through Okta.
- You want agents to reach SaaS apps as the user without stored tokens.
When is it less suited?
- You need per-action human approval today; Okta lists it as coming after GA.
Okta treats agents as first-class identities in the directory you already use for staff. Agent SSO, built on Cross App Access, is included in core Okta SSO.
What does Okta for AI Agents document?
- Generally available on 29 April 2026, with Universal Directory registration for agents. Okta for AI Agents general availability, read 2026-11-03
- Imports agents from Salesforce Agentforce, Amazon Bedrock AgentCore and ServiceNow. Okta for AI Agents general availability, read 2026-11-03
- Short-lived tokens replace hardcoded credentials, and human owners can be assigned. Okta for AI Agents general availability, read 2026-11-03
- Agent Gateway and human-in-the-loop controls are listed as coming after GA. Okta for AI Agents general availability, read 2026-11-03
- Agent SSO (Cross App Access) became GA on 24 August 2026, included in core Okta SSO. Okta Agent SSO press release, read 2026-11-03
- XAA became the MCP Enterprise-Managed Authorization extension, adopted by Anthropic, Microsoft and Okta. MCP Enterprise-Managed Authorization, read 2026-11-03
- Auth0 for AI Agents asynchronous authorization (CIBA) became GA on 19 November 2025. Auth0 for AI Agents generally available, read 2026-11-03
What does it cost?
Agent SSO is included in core Okta SSO. Other pricing was not found in the material reviewed. Okta Agent SSO press release, read 2026-11-03