Identity Provider (IdP)
An identity provider (IdP) is a system that manages user authentication and identity data. It verifies who a user is (authentication) and, in conjunction with authorization systems, determines what they can access. Common IdPs include Okta, Microsoft Entra ID (Azure AD), and Google Workspace.
Why It Matters
The IdP is the source of truth for organizational identity. It stores user accounts, group memberships, role assignments, and authentication credentials. When a user logs into any connected application, the IdP handles the authentication and issues a token.
For AI agent governance, the IdP provides the human identity context that constrains agent permissions. An agent acts on behalf of a specific user, and the user's identity attributes (role, department, clearance level, group memberships) inform the policies that govern the agent's actions.
The IdP also plays a role in agent discovery. When an IdP's audit logs show OAuth token grants to unknown agent platforms, that is a signal of shadow AI: agents connecting to company systems without IT awareness.