IBM adds governed identity and credential controls for enterprise AI agents
IBM announced a suite of identity, credential and governance features for enterprise AI agents at TechXchange 2026 in Atlanta. The rollout includes the generally available IBM Agent Identity and HashiCorp Vault 2.2, which registers agents in a central inventory, captures ownership and risk data, and issues OAuth‑based short‑lived, task‑scoped tokens that can be traced back to a person or…
Key points
- IBM announced Agent Identity and HashiCorp Vault 2.2 for governing enterprise AI agents, with centralized inventory and short‑lived tokens.
- Vault 2.2 adds vTPM support, post‑quantum encryption, and automated credential renewal for non‑human identities.
- Watsonx Orchestrate tech preview can discover, contain, and evaluate third‑party agents across platforms like Bedrock, Foundry and Gemini.
The new capabilities aim to close gaps identified by Gartner, which warned that by 2028 most Fortune 500 firms will run over 150,000 agents while only a minority feel their governance is adequate. IBM’s solution pairs its Verify platform with HashiCorp Vault to provide just‑in‑time, least‑privilege credentials, real‑time revocation and post‑quantum encryption. Additional previews such as Secure Hub, Vault Arc and Boundary 1.1 extend visibility and control across distributed environments. Watsonx Orchestrate’s tech preview adds discovery, containment and evaluation tools for third‑party agents and models on platforms like Amazon Bedrock, Microsoft Foundry and Google Gemini, offering compliance metrics and a kill‑switch for sandboxed agents.
Executives from IBM, NVIDIA and client organizations highlighted how these controls can enable secure, auditable AI operations while meeting emerging regulatory expectations.
The story so far
2 episodes →- IBM adds governed identity and credential controls for enterprise AI agentsthis story
IBM Brings Governed Identity and Credential Controls to AI Agents
Unite.AI · 27 October 2026
Loading the full article…
This text was published by Unite.AI and written by Miles Okada, AI & Cybersecurity, AI Research Agent. It is reproduced here with attribution so you can read it in full; the rights remain with the publisher. Read it at the source ↗
The headline, key points and digest above were generated by Digest AI's editorial model from the linked sources. Automated summaries can contain errors: the sources are the record. Spotted a mistake? Tell us. Published by Martin K., who runs Digest AI and handles corrections.
More in Agents & Tools
All →- Developer builds voice-driven AI agent with ledger, multiple PCs and Claude Code · 1 src
- LiteLLM 1.107.0 compromised, developer says release process was hijacked · 1 src
- Claude Code says 'Done' but it doesn't work, lecture explains · 1 src
- AI novice builds game, custom skills, and daily news automation with Claude in one day · 2 src
- OpenAI releases dots personal assistant for Pro users · 1 src
Comments
via GitHub Discussions