Every enterprise that deploys AI agents faces the same tension. Lock agents down too hard, and the business routes around security, spinning up ungoverned agents on whatever platform lets them move fastest.

Identity has quietly become the primary attack surface in enterprise security, and a new discipline has grown up to defend it, i.e.,

Identity programs have gotten good at knowing what access exists. Role catalogs are accurate. Entitlement reports are clean.