Why it matters
As Large Language Models (LLMs) become increasingly prevalent, with more affordable and accessible models emerging, AI agents will become ubiquitous at an unprecedented pace. This is in addition to LLMs making it possible for anyone to program in natural language, further accelerating their adoption. Despite AI agents’ ability to tap into multiple layers of data, security is often an afterthought. Developers are focused on functionality, often implementing insecure solutions or postponing or cancelling AI agent projects due to security concerns.
Authorization: the overlooked security aspect
Agents are connecting to APIs with integrations that aren’t optimized for AI-driven access, and email or push notifications triggered to approve sensitive actions are being implemented with minimal security controls. This oversight leaves AI agents vulnerable to unauthorized access, data exposure, and other LLM-related risks.
Auth for GenAI: Securing Identity in AI-Powered Applications
Okta has announced the availability of Auth for GenAI in Developer Preview, a part of the Auth0 Platform, which enables developers to integrate secure identity into GenAI applications, ensuring AI agents have built-in authentication, fine-grained authorization, and secure API access. With Auth for GenAI, developers can:
* Authenticate users securely, just like any other application
* Interact with applications on behalf of users through APIs, using OAuth 2.0 for token management and automatic token refreshes and exchanges
* Trigger human-in-the-loop approval for sensitive actions, allowing humans to supervise and approve or reject AI-driven tasks when away from the chatbot
* Implement fine-grained authorization for retrieval augmented generation (RAG) agents, ensuring only authorized users can access specific data
Enterprise-Ready Applications
Auth for GenAI also enables developers to build enterprise-ready apps that meet critical identity requirements, such as:
* Supporting the latest security protocols and identity standards
* Automating user provisioning and de-provisioning
* Enabling delegated administration
Auth0 Platform: Enhancing Secure Experiences
The Auth0 Platform offers several new capabilities, including:
* Tenant access control – control who can access an app and how
* Advanced customization for universal login – tailor every detail to match the brand and user experience goals
* FAPI 2 Certification expected Q2 2025 – advanced API security to protect customer privacy and secure transactions
* CIBA now in GA – client systems like call centers, kiosks, or AI agents can start the login process for customers – securely and seamlessly
* Native to Web SSO – create a smoother customer journey by enabling users to move from mobile apps to web apps without logging in again
Why Businesses Need Auth for GenAI
Businesses need to ensure their B2B SaaS applications meet the needs of enterprise buyers while delivering seamless and contextualized experiences for end-users. Auth for GenAI helps achieve this by providing a purpose-built security approach, ensuring AI agents are built with secure authentication and authorization from inception, and granting access only to what’s necessary and preventing misuse.
Quote from Shiven Ramji, President of Auth0 at Okta
“This explosion of AI-powered assistants that can answer complex questions, automate workflows, and take actions on behalf of users is undoubtedly exciting. However, it can be challenging to add security effectively once deployed. With Auth for GenAI, developers can help ensure that AI agents are built with secure authentication and authorization from their inception, granting access only to what’s necessary and preventing misuse.”
About Okta
Okta is ‘The World’s Identity Company’. It secures identity, so everyone is free to safely use any technology. Okta’s customer and workforce solutions empower businesses and developers to use the power of identity to drive security, efficiencies, and success – all while protecting their users, employees, and partners.
Media Contact
Kyrk Storer
Disclaimer
Any products, features, functionalities, certifications, authorisations or attestations referenced in this material that are not currently generally available or have not yet been obtained or are not currently maintained may not be delivered or obtained on time or at all. Product roadmaps do not represent a commitment, obligation or promise to deliver any product, feature, functionality, certification or attestation and you should not rely on them to make your purchase decisions. About Okta
Okta is ‘The World’s Identity Company’. It secures identity, so everyone is free to safely use any technology. Okta’s customer and workforce solutions empower businesses and developers to use the power of identity to drive security, efficiencies, and success – all while protecting their users, employees, and partners. Learn why the world’s leading brands trust Okta for authentication, authorisation and more at okta.com.
