Identity Governance & Administration (IGA)

Aembit announced support for Okta's Cross App Access protocol to manage enterprise AI agent access, and revealed that Helen Riley, an executive at Alphabet's X, is joining its board of directors. The XAA integration is intended to streamline authorization and oversight for automated agent workflows used by corporate customers. The XAA integration and Helen Riley's board role are only part of the broader story around Okta's identity platform, and Simply Wall St flagged one warning sign for Okta. Okta positions itself as an identity partner for enterprises that want a single control point governing how humans and software agents reach critical systems, so moves around Cross App Access plug directly into how the firm aims to sit between corporate users, AI tools, and cloud infrastructure. The article points toward a $122 fair value for Okta.

Telos reported on Monday a $13.7M contract award from the U.S. Department of Health and Human Services to modernize cyber governance, risk, and compliance and Authority to Operate processes across the HHS enterprise. Under the 18-month task order, Telos will deploy its FedRAMP Class D (High)-authorized Xacta suite, including Xacta 360, Xacta.io, and Xacta.ai, for the HHS Office of the Chief Information Officer and Office of Information Security. The award also covers cybersecurity, enterprise integration, training, and data migration services to support implementation.

Okta emerged from its Oktane 2026 conference with a stronger AI narrative and a wave of analyst price-target increases, though the debate now centers on how quickly that opportunity can become material enough to justify the stock's valuation. BMO Capital said the event reinforced its view that identity's total addressable market can expand, Roth Capital highlighted that early Okta for AI Agents deals are generating a 50%-60% uplift in deal values, and RBC Capital said the product is driving broader platform pipeline. On the Q2 earnings call, management said AI-agent products were already generating dozens of deals, including several million-dollar-plus contracts, but CFO Brett Tighe emphasized the contribution remains very small relative to Okta's roughly $3 billion revenue base. Q2 revenue increased 11%, subscription revenue rose 12%, and cRPO accelerated 200 basis points to 14% growth, driven primarily by large enterprises, an expanding product portfolio, and stronger execution rather than AI revenue, with new products representing about 30% of bookings and Okta Identity Governance the largest contributor. Stephens raised its target to $240, Jefferies expects a more pronounced AI monetization cycle in 2027, and DA Davidson cited positive customer and channel conversations, while BofA said Oktane did not alter its core investment thesis because the opportunity remains early; management said AI should remain immaterial to FY2027, with meaningful contribution potentially emerging in FY2028 and beyond. The stock traded at roughly 54.4 times forward earnings as of September 24, while 58 hedge funds held bullish positions in Q2, up from 49, and short interest rose to 8.21 million shares as of September 15, or 5.49% of the float, versus 6.45 million shares the prior month.

ServiceNow introduced new AI governance and workflow security tools called AI Control Tower, Context Engine, and Shift Zero. The products are aimed at helping enterprises manage AI agents with integrated identity, context, and cybersecurity controls. ServiceNow is targeting secure automation, access management, and compliance needs as companies expand AI-driven workflows across their operations. ServiceNow runs cloud software that helps large organizations manage digital workflows across departments, and these new AI governance tools plug directly into systems that already handle IT tickets, HR requests, and operational approvals for customers across North America and other global regions.

The Ministry of Finance has joined hands with the Ministry of Digital Economy and Society to prepare four national central systems to link data on suspicious transactions between agencies, so that all sectors see the same set of risk data, and to speed up the tracing and freezing of money trails before funds are withdrawn, converted into digital assets or gold, or transferred out of the country. Dr. Ekniti Nitithanprapas, Deputy Prime Minister and Minister of Finance, in his capacity as chairman of the subcommittee on linking financial data to enhance the monitoring and investigation of suspicious financial transactions, disclosed together with Mr. Chaichanok Chidchob, Minister of Digital Economy and Society, that the subcommittee approved guidelines to upgrade the prevention and suppression of suspicious transactions in two areas: raising KYC, CDD and EDD standards to be on par with the world's leading financial centres, and drawing up a National Anti-Fraud Master Plan, whose core structure comprises four national central systems. These are the Data Sharing with Consent system, which exchanges risk data under consent; the Anonymous Financial Data Bureau, a centre for anonymous financial transaction data; the Case Management system, a national incident-reporting management system based on the principle of report once, one route; and the Financial Investigation and Account Action system for linking data and freezing money trails. The subcommittee has assigned the Permanent Secretary of the Ministry of Finance, together with relevant agencies, to design the details of the data structure, operating systems, connection guidelines, responsible parties, as well as the rules and data standards for all four systems, to be completed within 30 days before being submitted to the subcommittee for further consideration.

Salesforce announced its Trusted Enterprise AI Harness on September 10, 2026, formalizing the agent governance stack into a single platform. The Harness comprises six core capabilities: Trusted Context, Trusted Agency, Trusted Action, Trusted Governance, Trusted Security, and Trusted Models, anchored by a new AI Control Plane that lets organizations discover and register agents, establish identity and policy, manage lifecycles, evaluate performance, and control costs. The control plane is designed to manage both Salesforce and third-party AI agents, following the recent Claudeforce initiative that made Anthropic's Claude the default reasoning engine across the platform. Rohan Kumar, Salesforce's President and Chief Platform and Engineering Officer, said the Agentic Enterprise won't be defined by which model a company chooses but by the trusted, proprietary context it brings to that intelligence. The Harness is not scheduled for general availability until early fiscal year 2028, which begins in February 2027, and pricing details have not been disclosed.

The Bank of Thailand, together with financial business operators under its supervision and 11 associations, announced a declaration of intent and a proactive cooperation framework to prevent illicit transactions in the financial sector, known as the Framework for Safeguarding the Financial Sector from Illicit Activities, at a press conference titled "One Intent, United Strength, Protecting Thailand's Financial Sector" on September 10, 2026. Mr. Vitai Ratanakorn, Governor of the Bank of Thailand, said the signing was not merely an MOU or a symbolic gesture, but an agreement with a clear commitment that all parties must genuinely act to raise supervisory standards. The 11 bodies that jointly drafted the cooperation framework are the Thai Bankers' Association, the Association of International Banks, the Government Financial Institutions Association, the Thai E-Payment Association, the Thai Foreign Exchange and Financial Services Association, as well as six associations and clubs of non-bank lenders. They will jointly raise the level of KYC, CDD and EDD, scrutinize high-risk cash transactions, deploy advanced technology to proactively detect abnormal transactions, develop a database of high-risk individuals and connect it to the Central Fraud Registry, produce industry AML/CFT manuals, and use community networks to build financial immunity for vulnerable groups. Mr. Vitai also disclosed that past measures have begun to show concrete results. Requiring that cash withdrawals exceeding 5 million baht undergo screening and verification reduced cash withdrawals in the portion above 5 million baht from about 100 billion baht a month to about 4 billion baht. Meanwhile, supervision of withdrawals and online gold trading above 50 million baht, or gold bars above 2 kilograms, cut such gold withdrawals by about 70 percent. He expects that in October 2026, a measure will take effect requiring those depositing 5 million baht or more in cash to explain the source of funds and provide evidence. At the same time, the Securities and Exchange Commission is in the process of holding a public hearing on regulatory criteria for USDT, with an announcement expected in the next few months. For the next phase, the Bank of Thailand is preparing to upgrade cooperation among five key agencies, namely the Bank of Thailand, the Securities and Exchange Commission, the Anti-Money Laundering Office, the National Anti-Corruption Commission, and the Royal Thai Police, in order to exchange information systematically and across the whole country.

The Bank of Thailand and 11 supervised business associations are jointly driving a cooperative framework to prevent illicit transactions in the financial sector, known as the Framework for Safeguarding the Financial Sector from Illicit Activities, aimed at proactively preventing the financial sector from becoming a channel that supports illegal activity. Mr. Vitai Ratanakorn, Governor of the Bank of Thailand, said the key principle is for all agencies to set direction, policy, and corporate governance to prevent misuse of the financial system, with minimum standards appropriate to each business and continuous improvement of measures as circumstances change. Participating agencies will bring their expertise in data, technology, and capabilities to monitor, detect, and respond to risks, and will exchange information, knowledge, patterns of wrongdoing, warning signals, and best practices among themselves. The businesses that have established this cooperative framework comprise 11 bodies: the Thai Bankers' Association, the Association of International Banks, the Government Financial Institutions Association, the Thai E-Payment Association, the Thai Foreign Exchange and Financial Services Association, as well as six associations and clubs of non-commercial bank business groups. Together they will raise the standard of KYC, CDD, and EDD; scrutinise high-risk cash transactions; deploy advanced technology to proactively detect abnormal transactions; develop a database of high-risk individuals; connect with the Central Fraud Registry; produce industry AML/CFT manuals; and use community networks to build financial immunity for vulnerable groups.

SailPoint reported fiscal Q2 2027 ARR of $1.231 billion, up 25% year-over-year, and raised its full-year ARR guidance to $1.38 billion while reiterating long-term targets of at least $2.1 billion ARR and at least $800 million in AI-driven ARR by fiscal 2029. The company's AI-driven ARR has already crossed $70 million, and SaaS ARR grew 36% to $847 million, representing 97% of net new ARR. Management highlighted the launch of SailPoint Identity Security with generally available Agentic Fabric, the acquisition of Entro Security, and new connectors for Snowflake, Databricks, and Cursor. CFO Brian Carolan guided Q3 ARR to $1.29 billion, revenue to $328 million, and adjusted EPS of $0.07 to $0.08, while noting that a higher SaaS mix creates a temporary revenue timing headwind of approximately $5 million.

Enterprise software and cybersecurity stocks rallied sharply on Thursday, driven by strong earnings and a shift in the AI narrative. The iShares Expanded Tech-Software Sector ETF (IGV) surged over 6%, on track for its largest single-day gain since April 9, 2025, when it jumped 11.7%. The rally began after Salesforce and CrowdStrike reported better-than-expected second-quarter results, with Salesforce CEO Marc Benioff declaring, "This nonsense of this SaaSpocalypse, I think it's time for it to stop." ServiceNow surged 9%, Workday rose nearly 4%, and Adobe and Autodesk each climbed 6%. Cybersecurity names led the gains, with CrowdStrike up 18%, Okta rocketing over 25%, and SailPoint surging nearly 14%. Palantir increased 4% as its Maven Smart System is on track to generate at least $1 billion in annual recurring revenue, while UiPath climbed nearly 9% ahead of its earnings report.

SailPoint has completed its acquisition of Entro Security, a firm specializing in non-human identity and credential security. The deal, announced on June 29, integrates Entro's technology with SailPoint's platform to create a unified control plane for managing the lifecycles and security of all identities, including human, machine, and autonomous AI agents. Entro's capabilities provide granular visibility into developer environments by automatically discovering secrets, tokens, and certificates buried in codebases, CI/CD pipelines, and container registries. The combined solution bridges high-level governance workflows with proactive runtime defense, enabling security teams to monitor token behavior, detect anomalies, and intercept malicious AI activity in real time. The integration is available immediately.

Telos has received a contract award to support the U.S. Air Force Distributed Common Ground System, the Air Force’s primary intelligence, surveillance, and reconnaissance planning, collection, processing, exploitation, analysis, and dissemination system. Under the contract, Telos will provide perpetual licenses for Xacta.ai, along with support services and maintenance for its Xacta platform, including Xacta 360 and Xacta.io. The award further expands the Air Force's use of Telos' cyber governance, risk, and compliance solutions.