P0 Security extends its authorization control plane to workloads and AI agents
General availability for non-human identity lifecycle management plus runtime authorization for agents, with one enforcement model that combines the invoking user, the agent, the tool, and the target resource.
P0 Security has made its non-human identity lifecycle management and authorization control plane for agents generally available, extending the platform from human users to service accounts, workloads, and first-party AI agents. The agent control plane evaluates access when the agent acts, combining four inputs into one decision: the invoking identity, the agent identity, the tool authorisation, and the resource entitlements. Standing permissions are replaced with ephemeral least-privileged grants enforced at runtime. Each identity type gets its own workflow: humans request temporary privileged access through approvals, workloads request programmatically through platform integrations, and agents are authorised during tool execution. Integrations span AWS Bedrock, Google Vertex AI, and Microsoft's agent platform.
Why it matters
The four-input model is the useful detail. Most agent authorisation collapses to one question, what the agent is allowed to do, and that is wrong. An agent invoked by a support engineer and the same agent invoked by a finance analyst should not resolve to the same permissions, and an agent acting on a schedule with no human behind it is a third case again.
Carrying the invoking identity through to the resource decision is least privilege applied honestly to delegation, and it is what separates real authorization from a token with a broad scope.
The scoping word is first-party. This governs agents you build and deploy, not vendor-hosted assistants acting on your data, which remain a contractual problem rather than a technical one. Compare approaches in our authorization tools ranking.
Source: Business Wire
Related on Start with Identity
- BlogC1 ships enterprise-managed authorization, putting SSO in front of MCP agents
The identity platform formerly called ConductorOne now issues short-lived scoped tokens for MCP servers under the open enterprise-managed authorization extensio
- BlogAkeyless ships Runtime Authority, authorising AI agents per action instead of per session
Agents hold no secrets and get no standing privilege. Every action is authorised at the moment it happens, and the audit trail links the originating prompt to t
- BlogRSA brings passwordless authentication to Linux servers, closing its last password-only gap
RSA ID Plus now covers Linux servers, developer workstations, and critical infrastructure with FIDO-based passwordless sign-in, closing the gap where organizati
- CVEKeycloak authorization bypass
Keycloak failed an authorization check, so a caller could reach a resource their role should have blocked. Part of the April 2024 RHSA-2024:1868 set with CVE-20
- CVESailPoint IdentityIQ role-editing authorization flaw
IdentityIQ failed to authorize role edits on all versions at disclosure (April 2026). Anyone who could reach the role-editing surface could change roles they sh
- CVEKeycloak UMA policy privilege escalation
Keycloak's UMA policy engine checked only the first resource in a request (CWE-266). Additional resources skipped the check. A privilege escalation in user-mana