Don't solve for the agent, solve for the enterprise | SailPoint Navigate 2026

BLUF: As AI agents and non-human identities (NHIs) proliferate, identity leaders must evolve their programs from siloed governance to a unified, resilient ecosystem that manages the expanded blast radius and runtime behavior of these entities 2:01.

Key Takeaways:
• The threat landscape has accelerated, with attackers leveraging open-source tools to compromise accounts in under a minute, making traditional 12-24 month roadmaps obsolete 5:31.
• The definition of NHIs has expanded beyond service accounts to include workloads, APIs, and agents, requiring identity teams to track intent and actual usage, not just inventory 6:15.
• Effective security now requires shifting from passive certification to active runtime verification, ensuring agents adhere to least-privilege principles through just-in-time access and scoped permissions 14:35.
• Organizations must build a modular, open-standard identity ecosystem to scale pilots and manage ephemeral accounts in Kubernetes and cloud environments, rather than relying on siloed tools 8:33.
• Compliance and regulatory bodies are increasingly holding CISOs and CEOs accountable for agentic failures, necessitating a unified identity function that integrates with broader cyber defense teams 10:54.

Identity practitioners must abandon the notion that discovery alone is sufficient; instead, they must centralize registry data to capture agent intent and capabilities, enabling precise enforcement and authorization decisions across the enterprise 13:23. By treating the identity ecosystem as the core control plane, organizations can effectively manage the complexity and risk introduced by the rapid adoption of AI agents.

Sources:

• 0:50 Introduction to the rapid pace of AI innovation and the excitement of the current moment.
• 2:01 The core question for identity leaders: how AI changes the existing identity program and role evolution.
• 5:31 The reduction in time to compromise accounts and the need for faster reaction times.
• 6:15 The expanded definition of Non-Human Identities (NHIs) and the need to understand intended vs. actual use.
• 8:33 The necessity of building new capabilities for ephemeral accounts and Kubernetes clusters.
• 10:54 Regulatory accountability for agentic security failures falling on CISOs and CEOs.
• 13:23 The importance of centralizing agent registry data to capture intent and capabilities for enforcement.