Aembit and Okta Extend Enterprise Identity Controls to AI Agents at Oktane 2026

Aembit launches support for Okta Cross App Access to govern AI agent access with existing enterprise identity, as Okta rolls out its broader 'Okta for AI Agents' platform that analysts say is only the first step in securing agentic AI.

On September 22, 2026, Aembit announced support for Okta Cross App Access (XAA), an open protocol that lets a user's existing enterprise identity authorize access to downstream applications without a separate consent step. The capability is offered through Aembit IAM for Agentic AI, with Aembit launching as an Okta partner at Oktane 2026 in Las Vegas. A new Enterprise-Managed Authorization credential provider implements the Model Context Protocol working group's extension and sits alongside Aembit's existing OAuth controls, which remain available where Cross App Access is unsupported. Aembit uses a blended identity approach linking the user, agent, and governing policy. The Cyber Security News and GBHackers reports carry identical press-release text with no discrepancies. A September 23 CSO Online report adds broader context: Okta itself launched an 'Okta for AI Agents' platform at Oktane, and its CEO stated that managing agent identity could become the biggest cybersecurity category. Analysts from ABI Research and Forrester caution that identity is only the first stage of agentic AI security, which will also require runtime governance, behavioral monitoring, and managing non-human identities at scale. Projections cited by CSO Online put the agentic security market at $2.8 billion in 2026, growing to $7.7 billion by 2028, with competition expected from hyperscalers, other IAM vendors, and recently acquired cybersecurity firms including Palo Alto, CrowdStrike, and Zscaler.

• Aembit announced support for Okta Cross App Access on September 22, 2026, through its IAM for Agentic AI product.
• Cross App Access lets a user's existing enterprise identity authorize downstream applications without a separate consent step.
• Aembit launched as an Okta partner at Oktane 2026 in Las Vegas.
• A new Enterprise-Managed Authorization credential provider implements the MCP working group's extension; OAuth remains available where Cross App Access is unsupported.
• Blended identity links the user, agent, and governing policy.
• Okta separately launched its 'Okta for AI Agents' platform at Oktane, according to CSO Online.
• Okta's CEO stated managing agent identity could become the biggest cybersecurity category.
• Analysts from ABI Research and Forrester say identity is only the first stage; runtime governance and behavioral monitoring for non-human identities are also critical.