1Password is implementing a new approach to identity management by treating AI agents as hybrid entities that require task-based, just-in-time access. According to CTO Nancy Wang, this strategy addresses the challenge of attributing actions performed by agents that act on behalf of human users.
The company has introduced a privileged access product that limits permissions to a single task. This system requires agents to verify the completion of previous assignments before gaining authorization for subsequent actions, mirroring the oversight process used for human employees.
1Password is collaborating with Okta to support shared identity standards, ensuring that authorization context remains consistent across systems. The company's Credential Broker facilitates this by releasing secrets only when necessary, preventing them from being exposed to the AI model itself.
Nancy Wang emphasized that secure access must be managed in the cloud, predicting that future applications will function as thin clients with code executed in remote sandboxes. These developments were discussed during the Oktane event.
