Who we protect
Govern people and machines without making them share an identity.
Explore this feature →AIdentity / Ask AIdentity
Ask AIdentity: manage identity in natural language
Ask AIdentity helps people explore identities, access and policy using natural language, within their own authority. It is working today and is continually refined.
What this means for your team
- Ask questions about identities, access and policy without learning every console page.
- Connect compatible assistants through the governed MCP interface.
- Keep authorization and approval outside the model’s reasoning. Sensitive changes follow the relevant governance path.
- Use analytics and specialist agents to surface evidence-backed recommendations, with human control over applicable changes.
A practical example
“Why does this person have access?” leads to an explanation; a request to change access is treated as a governed operation.
How it works
Select a step to read its explanation
- Express a question or intended change in natural language as the signed-in user.
- Resolve a supported operation within the caller’s available authority; a model suggestion does not establish permission.
- Retrieve the permitted identity and policy evidence needed to answer the question.
- Present an explanation or a reviewable change proposal, depending on the operation requested.
- Run applicable review, step-up and authorization checks before an approved change is applied.
1 / 5
This example illustrates the journey. Select any step to explore it at your own pace.
Explore more AIdentity features
Authentication & MFA
Set the proof each sign-in or sensitive action must provide.
Explore this feature →RBAC, ABAC & ReBAC
Decide access using roles, attributes and relationships together.
Explore this feature →Identity lifecycle
Keep access aligned with joining, changing teams and leaving.
Explore this feature →Federation & applications
Connect applications and identity providers to a governed sign-in experience.
Explore this feature →Identity Graph
Understand who can reach a resource and which relationships give them access.
Explore this feature →Privileged roles (PIM)
Activate powerful roles for a bounded task rather than leaving them always on.
Explore this feature →Privileged access (PAM)
Govern access to privileged targets and credentials.
Explore this feature →Governance & approvals
Put reviews and independent decisions around sensitive access changes.
Explore this feature →Built-in agents & automation
Turn continuous identity analysis into evidence-backed recommendations and approved actions.
Explore this feature →Agent & device identity
Give agents and devices their own credentials, ownership and revocation path.
Explore this feature →Audit & privacy
Trace identity decisions while controlling access to sensitive evidence.
Explore this feature →