Okta for AI Agents Updates & Release Notes

Agent Gateway

Agent Gateway is an identity-native proxy that sits between AI agents and the enterprise tools that they call. It aggregates tools from multiple remote MCP servers behind a single Okta-secured endpoint, enforces identity and policy on every tool call, and produces a unified audit trail. (GA soon)

Certify AI agent resource connections

AI agent resource connections can now be reviewed and certified using identity campaigns (formerly user campaigns). This helps maintain visibility and control as AI agents' access changes over time. (GA)

Add MCP servers from an Okta Integration Network Catalog Entry

MCP servers can now be added directly from an Okta Integration Network catalog entry, bypassing manual connection entry.

See Add an MCP server from the OIN catalog.

This feature is following a slow rollout with preview deployment throughout mid-September, followed by production. (GA)

AI Agent Import Integrations from Workday, Microsoft Office 365, Glean, DataRobot, Gemini, LangSmith. (GA)

Shadow AI Agent Discovery for Endpoints

Okta for AI Agents delivers endpoint visibility, mapping agent identities directly to human owners, and establishing central lifecycle governance. (EA)

DCR for MCP Servers

Admins can now select Dynamic Client Registration (DCR) when manually registering an MCP server. When selecting this option, Okta automatically registers a client with the provider and populates the credentials. See Manually add MCP servers. This feature is following a slow rollout with preview deployment throughout mid-September, followed by production. (GA)

AI Agent Registration with CIMD

AI agents can now be registered with a CIMD to identify themselves using a URL instead of a static client ID. See About Client ID Metadata Documents (CIMD). (GA)

UI updates for AI agent client registration

On the AI agent > Client registration tab, the authentication methods are now displayed vertically and provide a Configure button.

Clicking Configure directs users to the configuration page for the authentication method. (GA)

Import Integrations for DataRobot, Claude, Google Workspace, Workday, Glean and more.

(EA) - At the center of this is Agent-to-Agent Connections, a new capability of Okta for AI Agents that enables administrators to define:

• Per-agent connection policies.
• Which upstream services and agents can invoke an agent.
• Agent scope (what it can access).
• Session duration (how long that access lasts).

(GA) Administrators can now use enhanced filtering, search, and configuration capabilities on the AI agents, AI agent providers, and Import Monitoring > AI agent import pages.

Administrators can now import and manage AI agents built in the DataRobot Agent Workforce Platform directly through DataRobot and/or Anthropic Claude Platform.

See AI agent imports.

Administrators can now configure Workflows to trigger automatically from agent lifecycle events, so registrations are logged, owners are assigned, and removals are acted on the moment they happen.

The AI agent APIs are now event hook-eligible, enabling Workflows to be triggered based on events. See Event hooks.

Authorization server APIs now support SCIM filtering - the same standard developers already know.