IBM AI Agent Identity Controls Land for Enterprise Agents

IBM has unveiled a new set of IBM AI agent identity capabilities for enterprise agents, positioning governed agent operations as the next phase of corporate AI adoption. According to IBM, the announcement was made on October 27, 2026, at TechXchange 2026 in Atlanta, and it includes the general availability of IBM Agent Identity and HashiCorp Vault 2.2.

The rollout is aimed at developers, IT teams and security teams that run agents across business systems. According to the company, the new IBM AI agent identity capabilities combine agent discovery, verified identities, access controls and performance evaluation, giving organizations a clearer picture of who owns each agent, what it can access and how its actions can be traced across existing applications and infrastructure.

The timing reflects a widening governance gap. According to Gartner, cited by IBM, the average Fortune 500 enterprise will have more than 150,000 agents in use by 2028, up from fewer than 15 in 2025, while only 13 percent of organizations believe they have the right AI agent governance in place. Persistent credentials, unclear ownership and disconnected controls are the obstacles IBM says the new capabilities are designed to address.

IBM AI agent identity puts ownership and access first

At the centre of the announcement is a simple idea: an agent that can act inside a business needs an identity in the same way an employee or a service account does. IBM Agent Identity gives each agent a verified identity, while HashiCorp Vault 2.2 extends established secrets management to agents, enforcing least-privilege access and enabling real-time revocation when an agent attempts an unauthorized action, as reported by Morningstar.

That matters because agents do not behave like conventional software. They interact with other agents, invoke tools, call APIs and act across teams, platforms and clouds. A credential that never expires, or an agent whose owner is unknown, becomes a blind spot. IBM says its approach lets organizations discover agents wherever they were built, secure them in one place and evaluate their performance, rather than managing each deployment in isolation.

IBM watsonx Orchestrate is designed to unify discovery, containment and evaluation across Amazon Bedrock, Microsoft Foundry and Google Gemini, according to the announcement. The cross-platform angle is significant: most large enterprises run agents from several vendors, and governance that only covers one stack leaves the rest unmanaged.

Senior vice president of IBM Software Dinesh Nirmal framed the shift in operational terms. According to IBM, Nirmal said the winners in enterprise AI are changing how their business runs, not simply adding more AI to it, and that agents taking on real work require an AI operating model that connects them to company data, applications and infrastructure with the same discipline as the most critical systems.

From experiments to an AI operating model

IBM describes the announcement as part of a broader AI operating model built on four systems working together: agents, data, automation and hybrid infrastructure. Trust and control come first in that model, the company says, with IBM AI agent identity at the foundation: verified identity, only the access an agent needs, and a single place to discover, secure and evaluate agents regardless of where they were built.

The move also fits a wider industry turn toward agent governance. Recent coverage of coordinated safety work among frontier labs shows the same concern from a different angle: as agents gain the ability to act, the question is no longer only what they can do, but who is accountable when they do it. Readers following that thread can see how safety coordination is evolving in recent reporting on cyber safety coordination among major AI labs.

For enterprises, the practical test will be whether IBM AI agent identity controls keep pace with deployment speed. Agent fleets are growing far faster than the teams assigned to govern them, and manual reviews cannot scale to tens of thousands of agents. Automated discovery, least-privilege credentials and revocable access are the mechanisms IBM is betting will close that gap.

The announcement also arrives alongside a wave of agent-related enterprise news, from funding for agent startups to new agent platforms for regulated industries. Earlier coverage of agent adoption in financial services, for example in reporting on AI agents cutting bank compliance review times, shows how quickly agents are moving from pilots into production workflows where audit trails matter.

What happens next will depend on adoption. If enterprises treat agent identity as infrastructure, on par with employee identity management, the governance gap Gartner describes could narrow quickly. If identity remains an afterthought, agent fleets will keep growing faster than the controls around them, and the next wave of incidents may be traced back to an agent nobody owned and a credential nobody revoked. IBM is wagering that the market is ready to fix that now, before scale makes it harder.

Sources: Unite.AI coverage of the IBM announcement and the IBM press release via Morningstar.