Workday C1.ai Acquisition Puts Identity at Heart of Agent Era

Workday has signed a definitive agreement to acquire C1.ai, an agentic identity platform built to manage security and permissions for both human employees and autonomous AI agents. The Workday C1.ai acquisition positions identity governance as the next enterprise software battleground, at a moment when agents are spreading across corporate systems faster than security teams can track them.

The Workday C1.ai acquisition was announced on October 13 at Workday Rising 2026 in Las Vegas, the company's annual conference, according to Workday's announcement. The agreement was signed October 12 and disclosed in a Form 8-K filing with the U.S. Securities and Exchange Commission. Financial terms were not released, and the transaction is expected to close in the fourth quarter of Workday's fiscal year 2027, which ends January 31, 2027, subject to customary closing conditions.

C1.ai, the company known commercially as ConductorOne, sells what it calls an agentic identity platform for people and AI agents. The platform connects to the systems a company already depends on - from email and CRM to code repositories, finance systems, and cloud infrastructure - and hands each person or agent the right access at the right time, then removes it the moment it is no longer needed.

Ninety-five percent deploy agents; few can govern them

The Workday C1.ai deal rests on a striking mismatch. C1.ai's research shows that 95% of large U.S. companies already run autonomous AI agents, yet only 21% report having a mature way to govern them, according to Deloitte's State of AI research cited in the announcement. Organizations need to know who and what has access, why they have it, and when to take it away. Without those controls, the company warns, AI agents can become lawless - a security and compliance risk running quietly across the business.

Most organizations still manage that work through manual service tickets, spreadsheets, and periodic reviews as workers join, move, and leave. Every new hire, job change, and exit is a Workday event, the company notes, and every joiner-mover-leaver event recorded in Workday will now be able to trigger the right access changes automatically rather than waiting on IT tickets.

HR becomes the control point for enterprise access

The Workday C1.ai acquisition spotlights a major shift in enterprise software: treating HR as the central source of security and access control across the organization. Speaking at the conference, Workday CEO Aneel Bhusri told attendees that HR has become a natural source of identity with what C1.ai's co-founders are building, because identities can be managed across many access points from that core.

Gerrit Kazmaier, Workday's president of product and technology, said the combined company would manage and enforce exactly who - and what - has access to connected apps and systems, giving each person and agent the right access at the right moment to make work easier, safer, and more compliant.

Under the Workday C1.ai acquisition, Workday plans to integrate C1.ai into its Agent System of Record to provide organizations with centralized control over system access and data privileges, Techstrong reported from the event. With the deal, Workday aims to become the identity governance layer for people, money, and agents - covering every employee and agent using Workday from the day they join to the day they leave, and every move in between.

Part of a broader agentic push at Workday Rising

The Workday C1.ai acquisition was one of several agent-themed announcements at the conference, which runs October 12-15 and draws tens of thousands of in-person and digital attendees. Workday also unveiled Autopilot, a series of background AI agents that continuously manage hiring, payroll, and accounting processes; Decision Intelligence, an analytical tool for weighing workforce-versus-finance trade-offs; and a Trusted Agent Platform, a headless architecture built to anchor and manage AI agents from both Workday and third-party vendors.

The company separately announced a partnership with Anthropic to integrate Claude's reasoning into corporate software for automated financial closes and HR tasks, according to coverage of the event. Together, the moves signal the strategy behind the Workday C1.ai acquisition: move beyond chatbots toward autonomous agents that execute complex payroll and accounting tasks while preserving enterprise security rules - the same enterprise agent momentum examined in this look at Meta's Muse Wonder launch for AI agents.

BofA Securities served as financial advisor to Workday, with Orrick as legal advisor; Qatalyst advised C1.ai, with Ashurst Perkins Coie as its legal advisor, according to Unite.AI.

The Workday C1.ai acquisition underscores a critical shift in the industry, from simple generative AI chatbots to autonomous agents capable of real enterprise work. The open question is whether identity governance becomes a standalone category - as Workday is betting - or eventually folds into the major cybersecurity suites. Either way, the company acquiring the identity layer now owns the keys to the agent era.

Sources: Workday newsroom announcement; Unite.AI; Techstrong.ai.