One Identity

One Identity A trusted leader in identity security

Turn security from the practice of denial and restriction to the utopia of enablement and transformation with the One Identity family of IAM solutions for access management, identity governance, and privileged account management on prem and in the cloud.

An Active Directory flaw, CVE-2026-25177 (CVSS 8.8), disclosed earlier this year, lets a standard authenticated domain u...
10/16/2026

An Active Directory flaw, CVE-2026-25177 (CVSS 8.8), disclosed earlier this year, lets a standard authenticated domain user escalate privileges over the network, with no user interaction required.

Patching your domain controllers should be priority one, but it doesn’t fix the deeper issue: years of excessive native permissions, ungoverned service accounts and inconsistent policies across domains and tenants. Moving AD administration to a least-privilege governance layer removes much of the exploitable surface that vulnerabilities like this depend on. Pair that with monitoring for unusual SPN changes, disabling NTLM where possible and regular permission audits to build real resilience.

Get a full breakdown in this blog. ➡️ https://www.oneidentity.com/community/blogs/b/active-directory-management-and-security/posts/why-active-directory-vulnerabilities-demand-more-than-patching

An airline’s AI agent handed out free tickets because a customer wrongly said they qualified for a promotion. When the a...
10/15/2026

An airline’s AI agent handed out free tickets because a customer wrongly said they qualified for a promotion. When the airline tried to take them back, the customer said, "Not my problem."

And legally, they had a point. You can't take an AI agent to court, so the airline absorbed the cost of a decision no human ever made.

That story is a small version of what is happening inside most enterprises right now. For years, PAM and identity governance ran on the assumption that there was a person behind every action. But autonomous AI breaks that assumption. It plans, acts, reads the result, and moves at machine speed, and every stage of that loop is an exposure. Meanwhile, investment in agents and NHIs has moved faster than the security programs meant to govern them.

That is the NHI liability gap, and it doesn't close with a single tool. So, where do you start? Govern every agent identity, enforce least privilege for machines, and add a circuit breaker. Check out this 30-minute session for a more in-depth guide. ➡️ https://www.oneidentity.com/video/the-pam-blind-spot-when-your-ai-agents-get-breached/

Fragmented identity security has a cost. It shows up in manual admin work, overhead, and compliance exposure.Our new rep...
10/14/2026

Fragmented identity security has a cost. It shows up in manual admin work, overhead, and compliance exposure.

Our new report breaks down the ROI and TCO of One Identity solutions, with customers seeing up to a 150% three-year ROI. It covers how unifying identity management, automating lifecycles, and extending governance to non-human and AI-driven identities can lower operational costs and reduce risk as you scale.

Read the report ➡️ https://www.oneidentity.com/analyst-report/economic-benefits-analysis-of-identity-management-solutions-by-one-identity/

10/13/2026

The firewall used to be the castle wall. Security teams focused on insider threats because everything else was kept outside. Then cloud and SaaS showed up, and the wall vanished.

Now identity is the perimeter, and AI agents are about to outnumber the humans they work alongside.

On this episode of Shift AI with Boaz Ashkenazy, One Identity CEO Praerit Garg dives into exactly how we got to where we are, and where we go from here. PG helped build Active Directory at Microsoft and later ran identity at AWS. His biggest worry today is a familiar threat picking up speed faster than guardrails can keep up.

Watch the full conversation ➡️ https://www.youtube.com/watch?v=2_YLECXsetE

A service account does the same thing every time. An autonomous AI agent doesn’t, and that changes how we must govern it...
10/09/2026

A service account does the same thing every time. An autonomous AI agent doesn’t, and that changes how we must govern it.

Organizations have long granted traditional NHIs privileged access so they can perform administrative operations, but autonomous agents shouldn’t get that same shortcut. Privileged Access Management (PAM) should govern their privileged access the way it does for humans: with temporary elevation, session management, and continuous auditing.

An agent triggered by a person should act under that person’s identity, while each autonomous agent gets its own long-lived identity with limited privileges and a human owner who regularly reviews and approves its access. That way, every action can be traced to an identity, and no agent is left over-privileged or orphaned.

One Identity CEO Praerit Garg shares how to apply PAM to agentic identities in his latest piece for Enterprise Times ➡️ https://www.enterprisetimes.co.uk/2026/10/08/rethinking-privileged-access-management-for-agentic-identities-2/

Next week, One Identity is heading to Monaco for Les Assises. Catch our session, "Ready for the Agentic Era? Turning Pri...
10/01/2026

Next week, One Identity is heading to Monaco for Les Assises.

Catch our session, "Ready for the Agentic Era? Turning Privileged Access into Bold Business Advantage" for a break down of why identity remains the top path to breach, and why PAM tools that stop at vaulting and sessions aren't enough anymore.

If you're tackling NIS2, DORA or CRA compliance - this one's for you. ➡️ https://lesassisesdelacybersecurite.myplatform-online.com/PublicWidget/GetWidgetWsContent.aspx?f_lang=en&f_uid_workshop=C4AC3D2E43454FFC863F4DB2CE20E94B

If you're running SAP Identity Management, mark your calendar: mainstream support ends December 31, 2027, and SAP isn't ...
09/30/2026

If you're running SAP Identity Management, mark your calendar: mainstream support ends December 31, 2027, and SAP isn't building a replacement.

As an added curveball: That's probably right around when you're also deep in a RISE with SAP migration, which changes who owns things like access requests and emergency access approvals. We've seen teams try to just "lift and shift" their old IDM setup into something new, and it usually doesn't end well (locked-out users, entitlements nobody remembers granting).

It's better to catch this in planning than in an audit. This blog with Infosecurity Magazine breaks down what we'd suggest. ➡️ https://www.infosecurity-magazine.com/blogs/rise-with-sap-idm-sunset-identity/

One Identity has been on the Road in Germany, France, Belgium and the Netherlands!Across each stop, we challenged assump...
09/29/2026

One Identity has been on the Road in Germany, France, Belgium and the Netherlands!

Across each stop, we challenged assumptions and shared strategies on non-human identity risks, AI-driven attack surfaces, and what it really takes to build a risk-driven IAM strategy.

We got to hear from our own experts plus partners and customers who live in this reality every day, and dug into breakouts on passwordless authentication, quantum-ready identity, and securing AI at the core.

Thank you to our sponsors for making these events such a success!

Is your identity strategy ready for AI agents, quantum computing, and decentralized identity - all at once?The "future o...
09/28/2026

Is your identity strategy ready for AI agents, quantum computing, and decentralized identity - all at once?

The "future of IAM" isn't really the future anymore. AI and non-human identities are reshaping how we think about workforce identity, privilege, and governance, and quantum computing is putting pressure on the cryptography we've relied on for years.

Join experts on Thursday, October 15 to dig into what's actually changing and what security teams should be doing about it. We'll cover AI agents in the workplace, where blockchain-based identity fits into enterprise IAM, and how real the quantum threat is right now. ➡️ https://www.brighttalk.com/webcast/20357/675254?utm_source=OneIdentityUnifyVerifyandAdapt&utm_medium=brighttalk&utm_campaign=675254

Address

4 Polaris Way
Aliso Viejo, CA
92656

Alerts

Be the first to know and let us send you an email when One Identity posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to One Identity:

Shortcuts

Share