Resource Access Certifications for AI Agents: Reduce the Agent Attack Surface. Close the Audit Gap.
Okta, Wednesday, September 30th, 2026
Okta adds access certifications for AI agents, letting teams review and revoke what resources agents can reach and prove it to auditors.
Okta for AI Agents already governs who can access agents, and Resource Access Certifications now lets organizations certify what agents themselves can access.
Campaigns produce audit-ready reports showing who approved an agent's resource access, which scopes were approved and when access was last reviewed.
Teams can quickly revoke unnecessary connections across the agent catalog to shrink the attack surface, and certifications can also be triggered automatically in response to evolving threats.