🔍 Intelligence Synthesis JP/EN
Ethics · Regulation · Technology — Pharma Practice Notes

AI Tech Flash ── 2026-10-28

IBM adds identity and access control for AI agents

IBM announces verified identity and limited access for AI agents

What changes

According to IBM, enterprises can now give each AI agent an identity that records its owner and the authority it has been granted. HashiCorp Vault issues each agent short-lived credentials. Credentials are the access rights an agent uses to reach databases, applications and cloud services.

IBM says access can be denied and the session revoked in real time if an agent tries an unauthorized action. IBM watsonx Orchestrate is designed to discover, contain and evaluate agents from one place, including agents built on other vendors' platforms.

Why it matters

IBM cites Gartner as saying the average Fortune 500 enterprise will use over 150,000 AI agents by 2028. Only 13% of organizations believe they have the right AI agent governance in place, according to the same citation.

IBM says an agent with a long-lived, overprivileged credential can put systems and data at risk if it is compromised. IBM's position is that enterprises therefore need to verify each agent and limit what it can access.

What it is

The announcement covers several capabilities. The core is the extension of HashiCorp Vault to AI agents, together with Agent Identity. Vault is a product that manages the secrets and credentials applications and services use to access business systems.

Agent Identity keeps an authoritative record of each agent: its owner, its lifecycle status and its granted authority. The other main piece is watsonx Orchestrate, which connects to platforms such as Amazon Bedrock, Microsoft Foundry and Google Gemini to find agents built there.

Who and where

IBM made the announcement, which includes HashiCorp products. It came at TechXchange 2026, IBM's annual conference for developers and technology practitioners.

IBM says HashiCorp Vault 2.2, Agent Identity, the watsonx Orchestrate evaluate capabilities, IBM Concert and Terraform policy are generally available. Secure Hub and others are in public preview. The Orchestrate discover and contain capabilities are in tech preview.

Why it was built

IBM says enterprises are deploying agents faster than they can verify them. It says persistent credentials, unclear ownership and disconnected controls make agents harder to govern.

Agents interact with other agents, invoke tools and act across teams, platforms and clouds. In that setting, IBM says organizations need to know who owns each agent and what it can access.

How it works

According to IBM, Agent Identity shares identity and authorization context with Vault's credential controls. Vault then issues each agent short-lived credentials and limits it to the access it needs.

If an agent tries to retrieve information or act outside its approved permissions, access can be denied and the session revoked in real time. Orchestrate runs agents in isolated sandboxes and gives teams a kill switch to shut down any agent.

Key points

  1. In IBM's announcement, Vault issues each agent short-lived credentials limited to what it needs.
  2. Orchestrate discovers agents on other platforms, isolates them in sandboxes, and evaluates quality and cost.
  3. Vault 2.2 and Agent Identity are generally available, while Orchestrate's discover and contain features are in tech preview.

Conclusion

IBM announced tools that give AI agents verified identities, least-privilege access and centralized management. These claims come from IBM's own announcement, and their effect remains to be shown in use.

Quotes and sources

“Enterprises are deploying agents faster than they can verify them.”
── Investing News Network, 2026-10-27
“HashiCorp will now extend those capabilities to AI agents, issuing secured, short-lived credentials that limit each agent to what it needs.”
── Investing News Network, 2026-10-27
“Orchestrate now runs agents in isolated sandboxes so a rogue agent can't interfere with others. Teams also now have access to a kill switch to shut down any agent.”
── Investing News Network, 2026-10-27
“HashiCorp Vault 2.2, Agent Identity, watsonx Orchestrate evaluate capabilities, IBM Concert, and HashiCorp Terraform policy are generally available.”
── Investing News Network, 2026-10-27

Source articles

Written by AI (Claude) from the cited articles, then checked by Jev (TypeSafe's judgement model), a Gemini fact-check and a verbatim check of every quote.