Agent Identity Security is an add-on module for Prisma AIRS AI Gateway that gives every
enterprise AI agent a unique, verifiable identity with OAuth 2.1 client credentials,
fine-grained access policies over Model Context Protocol (MCP) server tools, and full
dual-attribution audit logging — integrated with your existing identity provider through Cloud
Identity Engine. Connect your enterprise identity provider to the AI Gateway through Cloud
Identity Engine (CIE) so the system can resolve user identities from agent access tokens when
evaluating access policies.
| Where Can I Use This? | What Do I Need? |
|---|
- Prisma AIRS — Agent Identity Security (US East region)
|
- Agent Identity Security module licensed and activated via Strata Cloud
Manager
- AI Gateway activated with at least one data plane instance running
- Enterprise IdP (Okta or Microsoft Entra ID) federated with CyberArk Idira
- User directory synced to AI Gateway via Cloud Identity Engine (CIE)
|
To associate users and user groups from your enterprise directory with agents and policies,
you must link an Identity Provider in AIRS AI Gateway.
