Okta expands Google Cloud partnership to secure AI agents and the browser
Summary
Okta Inc. has expanded its partnership with Google Cloud, introducing integrations to enhance identity governance for artificial intelligence agents and strengthen Chrome browser security. This collaboration pairs Okta's identity layer with Google Cloud's Gemini Enterprise Agent Platform and Chrome Enterprise. An integration, available now, connects Auth0 for AI Agents to the Gemini Enterprise Agent Platform Runtime, enabling developers to embed authentication and access controls into agent workflows, featuring Token Vault and human-in-the-loop approvals. A forthcoming integration will link Okta for AI Agents to the Gemini Enterprise Agent Platform for centralized visibility and policy control. For browser security, Okta and Chrome Enterprise are adding real-time threat response, including Universal Enrollment for pushing enterprise policies to managed Chrome profiles and integrating Device Assurance signals to block logins on non-compliant devices. Okta also collaborated on Device Bound Session Credentials, an open standard to prevent session hijacking. This addresses the statistic that 92% of executives report AI agent use, yet only 34% apply consistent security controls, and identity-based attacks rose 127% year-over-year.
Key takeaway
For AI Security Engineers deploying agents, you must extend identity governance to these entities as rigorously as to human users. Okta's new integrations with Google Cloud's Gemini Enterprise Agent Platform allow you to embed authentication, enforce fine-grained authorization, and centralize agent visibility. Additionally, for IT Professionals managing Chrome environments, utilize the new Device Assurance signals and Device Bound Session Credentials to significantly reduce browser-based identity attack vectors like session hijacking, ensuring robust endpoint security.
Key insights
Okta and Google Cloud extend identity governance to AI agents and enhance browser security to counter rising identity-based attacks.
Principles
- AI agents require human-level identity security controls.
- Browser sessions need cryptographic device binding for security.
- Centralized identity management is crucial for AI agent governance.
In practice
- Embed authentication into AI agent workflows.
- Block logins on non-compliant Chrome devices.
- Prevent session hijacking with device-bound credentials.
Topics
- Okta
- Google Cloud
- AI Agent Security
- Identity Governance
- Chrome Enterprise Security
- Session Hijacking
Best for: CTO, VP of Engineering/Data, Director of AI/ML, AI Security Engineer, MLOps Engineer, IT Professional
Related on AIssential
Editorial summary, takeaway, and curation by AIssential. Original article published by AI – SiliconANGLE.