Notifications
Clear all
Topic starter
25/06/2026 5:23 pm
TL;DR: Identity platforms are increasingly being evaluated on whether they can govern human and non-human access across applications, data, and business processes together, with more than 100 million identities protected, according to Saviynt. The practical signal is that they are increasingly being judged on whether they can govern machine access, AI agents, and lifecycle controls together, not as separate programmes.
NHIMG editorial — based on content published by Saviynt: newsroom page on identity platform developments, NHI, and AI governance
By the numbers:
- Over 100 million identities protected, and counting!
- Only 44% of organisations have implemented any policies to manage their AI agents, despite 92% agreeing that governing AI agents is critical to enterprise security.
- 70% of organisations grant AI systems more access than they would give a human employee performing the exact same job.
Questions worth separating out
Q: How should teams govern human identities, NHIs, and AI agents in one programme?
A: Start by separating the control model by actor type, then connect the inventory and reporting layers.
Q: Why do machine identities create different governance problems from human users?
A: Machine identities do not behave like people.
Q: What breaks when AI agents are added to an existing IAM model?
A: The main break is the assumption that access can be reviewed after the fact.
Practitioner guidance
- Separate governance by identity type Define distinct control requirements for human identities, NHIs, and AI agents before mapping them into one platform.
- Test for machine identity visibility Inventory service accounts, API keys, certificates, and workload credentials, then verify the platform can show where each secret is used and who can revoke it.
- Require runtime controls for agentic access For AI agents, validate whether policy intent survives tool selection and execution at runtime.
What's in the full article
Saviynt's full newsroom page covers the platform and programme context this post intentionally leaves at the strategic level:
- Platform navigation across identity security posture management, just-in-time access, non-human identity, and privileged access management.
- The vendor's current solution framing for machine identities, AI agents, and application access governance across the product portfolio.
- Customer-facing context around the organisation's broader identity platform positioning and market narrative.
- The full newsroom listing and navigation structure for related announcements and resources.
👉 Read Saviynt’s newsroom context on identity platform, NHI, and AI governance →
Saviynt’s identity platform: what changes for NHI governance?
Explore further
View Full Forum → | NHI Foundation Course → | Our Services →
25/06/2026 6:02 pm
Identity security is becoming a control-plane problem, not a point-solution problem. Saviynt’s framing shows the market is moving toward platforms that claim coverage across human identity, non-human identity, and business process access. That shift matters because governance failures increasingly come from fragmentation between IAM, IGA, PAM, and machine identity controls. Practitioners should expect board-level questions about whether their identity stack can prove coverage across all three identity classes.
A few things that frame the scale:
- Only 44% of organisations have implemented any policies to manage their AI agents, despite 92% agreeing that governing AI agents is critical to enterprise security, according to The 2026 Infrastructure Identity Survey.
- 69% of security leaders agree identity management must fundamentally shift to address agentic AI systems, according to The 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: When should organisations treat identity platform consolidation as a risk?
A: Treat consolidation as a risk when the platform promise obscures different control needs for humans, NHIs, and AI agents. If the vendor cannot evidence secret visibility, entitlement scope, lifecycle enforcement, and runtime boundaries in the same environment, the organisation may gain reporting consistency while losing real control.
👉 Read our full editorial: Saviynt’s identity platform signals broader NHI and AI governance
