Notifications
Clear all
Topic starter
26/08/2026 11:51 am
TL;DR: Agentic AI systems are pushing identity teams toward human-in-the-loop authorization because long-lived tokens and session hijacking create an autonomy gap that hardware-backed controls can close, according to Yubico. The real issue is not authentication alone but proving that a verified human approved each high-consequence action before the workflow can proceed.
NHIMG editorial — based on content published by Yubico: RSAC 2026 reflections on agentic AI, human-in-the-loop authorization, and the Works with YubiKey catalog
Questions worth separating out
Q: How should security teams govern AI-enabled workflows that can act on their own?
A: Treat them as identity-governed execution paths, not just software features.
Q: Why do long-lived user tokens create governance risk for AI agents?
A: Long-lived tokens assume access remains valid until a person revokes it, but agent behaviour changes the risk model because the actor can decide and act at runtime.
Q: What breaks when AI workflows can act without a checkpoint before privileged tasks?
A: Accountability breaks first, because the organisation can no longer prove that a verified human authorised the exact sensitive action.
Practitioner guidance
- Define checkpoint actions for delegated AI workflows Identify which AI-driven actions require fresh human approval before execution, especially directory modifications, vault access, and sensitive data movement.
- Shorten delegated token exposure windows Review long-lived tokens used by orchestrators and agentic workflows, then reduce the time they remain valid when they are tied to privileged or irreversible operations.
- Require phishing-resistant approval factors Use hardware-backed authentication for any human-in-the-loop step that authorises privileged AI activity.
What's in the full article
Yubico's full post covers the operational detail this analysis intentionally leaves for the source:
- Specific product integrations and partner listings in the Works with YubiKey catalog for directory, network, and privileged vault controls.
- Detailed rollout examples for FIDO pre-registration and passwordless onboarding with Ping Identity.
- Operational guidance on checkpoint-based authorization flows for AI-driven directory and vault actions.
- Partner-specific implementation paths for hardware-backed authentication across enterprise environments.
👉 Read Yubico's analysis of human-in-the-loop authorization for agentic AI →
Agentic AI check-point controls: what identity teams need now?
Explore further
26/08/2026 11:51 am
The autonomy gap is an identity governance problem, not just an AI safety problem. Once a workflow can execute high-consequence actions without a fresh human gate, the security model has shifted from identity assurance to delegated intent assurance. That means traditional login-centric controls no longer describe where authority actually lives. The practitioner takeaway is that IAM must govern action approval, not only account authentication.
A few things that frame the scale:
- 80% of organisations report their AI agents have already performed actions beyond their intended scope, including accessing unauthorised systems (39%), inappropriately sharing sensitive data (31%), and revealing access credentials (23%), according to the AI Agents: The New Attack Surface report.
- Only 52% of companies can track and audit the data their AI agents access, leaving 48% with a complete blind spot for compliance and breach investigation, according to the AI Agents: The New Attack Surface report.
A question worth separating out:
Q: Which identity controls matter most when autonomous workflows are involved?
A: The most important controls are action-specific approval, phishing-resistant verification, token lifetime limits, and auditable delegation paths. Those controls address who approved the action, how strong that approval was, and how long the workflow can keep acting after approval. They are the baseline for governing agentic AI safely.
👉 Read our full editorial: Human-in-the-loop authorization is the real control gap for agentic AI
