Agents as a workforce
Connect agents to ownership, reviews and offboarding. Delegation records help teams follow authority across agents.
AIdentity / Agent & device identity
Govern software agents and physical devices
Non-human identities need ownership, credentials, operating context and lifecycle controls of their own.
Give non-human identities an accountable lifecycle
Device onboarding
Explore supported enrollment, device certificates and attestation journeys for connected machines.
Respond and revoke
Manage identities and fleets through supported suspension, decommissioning and revocation controls.
What this means for your team
- Manage Agent discovery, lifecycle, authentication profiles, key rotation and scoped delegation.
- Manage supported host/device enrollment, credential renewal, fleet grouping and revocation.
- Apply device operating-envelope and location policy capabilities where the device class and deployment support them.
- Preserve distinct human, network, device and workload concepts. AIdentity’s identity capabilities do not imply AIsense inference is already released on every device.
- Support agent identity documents and verifiable credentials for discovery and accountable trust.
A practical example
A drone has its own device identity and operating envelope; an AI agent acting for a person has a different credential and delegation journey.
How it works
Select a step to read its explanation
- Register the Agent, workload or physical device with an owner and an intended operational purpose.
- Require the identity-specific proof appropriate to that actor and deployment.
- Constrain permissions, delegation or operating context according to the supported class and configured policy.
- Maintain credential validity and inspect supported posture or lifecycle changes over time.
- Suspend, quarantine or revoke the relevant identity and authority through the available lifecycle controls.
1 / 5
This example illustrates the journey. Select any step to explore it at your own pace.
Explore more AIdentity features
Who we protect
Govern people and machines without making them share an identity.
Explore this feature →Authentication & MFA
Set the proof each sign-in or sensitive action must provide.
Explore this feature →RBAC, ABAC & ReBAC
Decide access using roles, attributes and relationships together.
Explore this feature →Identity lifecycle
Keep access aligned with joining, changing teams and leaving.
Explore this feature →Federation & applications
Connect applications and identity providers to a governed sign-in experience.
Explore this feature →Identity Graph
Understand who can reach a resource and which relationships give them access.
Explore this feature →Privileged roles (PIM)
Activate powerful roles for a bounded task rather than leaving them always on.
Explore this feature →Privileged access (PAM)
Govern access to privileged targets and credentials.
Explore this feature →Governance & approvals
Put reviews and independent decisions around sensitive access changes.
Explore this feature →Built-in agents & automation
Turn continuous identity analysis into evidence-backed recommendations and approved actions.
Explore this feature →Ask AIdentity
Ask questions about identity and access with authorization still enforced.
Explore this feature →Audit & privacy
Trace identity decisions while controlling access to sensitive evidence.
Explore this feature →