Okta Identity Security Posture Management (ISPM) release announcements

ISPM customers now get visibility and risk assessment for AI agents alongside human and non-human identities. Previously, this capability was exclusive to Okta for AI Agents customers, and their access is unaffected: they get AI Agents discovery, and can also use Okta as their control plane for AI Agents (Agents Registry, Access Management, Secured Connections, MCP Gateway, Governance, A2A connections, Kill switch and more).

Discovery capability includes: SaaS Homegrown Agent Builders, Shadow AI apps and OAuth grants through the Okta Browser Plugin, Endpoint AI agents, and MCP servers. You can find these features under ISPM Inventory > AI Agents. See AI agent discovery.

ISPM discovers AI agents built in Microsoft Copilot Studio and displays them on the Discovered agents page. Use this inventory to review ownership, identify shadow agents, and understand the reach of AI agents across your managed apps. See Microsoft Entra ID integration.

This feature is now Generally Available to ISPM and Okta for AI Agents customers.

By integrating CrowdStrike Falcon EDR to ISPM, security admins can now detect which employee endpoints are running AI agents, which MCP servers each agent reaches, and which person each one belongs to. This closes critical security gaps without requiring new sensor deployments. New ISPM inventory pages are now available:

• Endpoint agents: every detected agent per device, along with the MCP servers and MCP activity tied to that agent
• MCP servers: every MCP server with endpoint activity, aggregated in one place across the whole org

See Connect CrowdStrike Falcon.

This feature is an Early Access release available to ISPM and Okta for AI Agents customers.