How Can We Manage Identity Access for AI Agents?
Security Boulevard, Sunday, October 11th, 2026
Dan Lohrmann surveys approaches to agentic IAM, noting there's still no agreed way to manage nonhuman identities.
In his Lohrmann on Cybersecurity column, Dan Lohrmann notes that AI agents may soon outnumber humans in some roles, yet most IAM platforms weren't built to give software a verifiable identity, unleakable credentials and narrow permissions.
Cisco's Matt Caulfield points out that there is no agent equivalent of a human onboarding and background check, even though agents are 'hired' in minutes.
SailPoint stresses that the hardest part is organizational: establishing ownership, required permissions and expiry before agent populations grow too large.
Lohrmann recommends healthy paranoia, full discovery and identification of agents, and operating models that connect AI development, identity and security.