Discover and assess AI agents
Agent discovery is the first stage of the AI agent lifecycle. Finding the AI agents operating across your environment helps you assess their ownership, permissions, and the resources they can affect. You can decide which agents to register, connect, and govern.
The discovery capabilities, the procedures, and the console pages are documented in the Okta Identity Security Posture Management (ISPM) AI Agents section. See AI agent discovery.
What discovery covers
ISPM discovers AI agents from several sources. Each source surfaces a different category of AI agent and is powered by an ISPM integration. The table below maps each category to the platforms that surface it and the guide for setting up that integration.
| Supported platform | Category | Integration guide |
|---|---|---|
| Secure Access Monitor (SAM) plugin | Shadow AI (Browser) | Shadow AI apps |
| CrowdStrike Falcon | Locally running agents and MCP servers | CrowdStrike Falcon |
| Salesforce Agentforce | Builder platforms | Salesforce |
| Microsoft Copilot Studio | Builder platforms | Microsoft Copilot Studio |
Continue the lifecycle
ISPM finds shadow AI agents, and lets you assess the risk each one poses. From there, you can register the AI agent, or import it into Okta Universal Directory (UD), to bring it under Okta's governance and start securing its access.
After you discover and assess an AI agent, continue through the rest of the Okta for AI Agents lifecycle:
Okta for AI Agents - Core excludes Okta Privileged Access, Identity Security Posture Management, and any features that have not yet received a FedRAMP Moderate, FedRAMP High, or U.S. Department of Defense Impact Level authorization. For a current list of excluded features, refer to the Okta US Public Sector Limitations or Exceptions documentation. The Okta for AI Agents - Core SKU is the version that's available to Okta for Government Moderate, Okta for Government High, and Okta for US Military customers.