Coding agents (Claude Code, Cursor, Codex)
In short: Claude Code documents OAuth sign-in and read-only starting permissions in Manual mode. Cursor documents SAML SSO and terminal execution controls. These are human authentication and execution controls, not proof of separate agent principals. Verify downstream tool access and permissions independently before attributing every action to the developer.
What does Coding agents (Claude Code, Cursor, Codex) already give you for agent identity?
- Claude Code supports Console OAuth sign-in without creating an API key and automatically refreshes its stored login profile. Anthropic: Claude Code identity and access, read 2026-11-03
- Claude Code Manual mode starts read-only and requests permission before edits, tests or commands. Anthropic: Claude Code security, read 2026-11-03
- Cursor supports SAML 2.0 SSO for team members on Teams and Enterprise. Cursor: Team SAML SSO, read 2026-11-03
- Cursor Run Mode controls command execution, permission prompts and sandbox use. Cursor: Agent terminal controls, read 2026-11-03
- Cursor documents a terminal sandbox restricting unauthorized file access and network activity. Cursor: Agent terminal controls, read 2026-11-03
Where is the gap?
These pages establish human sign-in and execution controls, not separately registered agent principals. Codex documentation could not be confirmed on the requested OpenAI domains.
Which key results usually apply?
- Per-action approval alongside Okta
- Per-action approval alongside Entra
- Gateway per call for MCP
- Discovery first
Which products fit?
| Product | Fits when |
|---|---|
| NewCore | You need a named person to approve risky agent actions before they run. |
| SailPoint Entro | You already use SailPoint for access reviews. |
| Astrix Security | You do not know how many agents exist or who owns them. |
| Silverfort | You run both Okta and Entra ID and want one view of agents across them. |
Questions buyers ask
Does Claude Code require an API key?
Claude Code documents Console OAuth sign-in without creating an API key.
Does Cursor SSO identify each agent action?
The opened page documents team-member authentication. It does not establish a separate identity for every agent action.
What was confirmed for Codex?
No Codex platform fact was confirmed on the requested OpenAI domains. The platform guide failed and the help article was inaccessible.