Okta Adds to Customer Identity Cloud

Okta has added to its Customer Identity Cloud product to help secure identity in generative artificial intelligence applications.

The upcoming Auth for GenAI product empowers app builders to use genAI in their apps. Capabilities include the following:

• User authentication within popular genAI frameworks and libraries, like Langchain and Vercel.
• Calling APIs on the user's behalf to allow agents to call APIs of services like Google Calendar, Github, Box, and more on the user's behalf. It uses secure standard protocols to verify that the API credentials are specific to a single user's account and verify that the user consented to specific permissions granted to the genAI app.
• Async Authentication, with agents running in the background and humans acting as supervisors, approving or rejecting actions when away from a chatbot. Based on secure identity standards, Async Authentication allows builders to implement on-demand authentication in their apps, with users getting a push notification in their mobile app to authenticate or not with one tap.
• Fine-grained authorization for retrieval augmented generation (RAG), enabling retrieved content to be filtered at very granular levels (e.g. documents, studies, pages, etc.) so large language models are fed only content to which each user has permission.

"With the limitless possibilities of genAI, it's critical to instill trust among consumers and businesses by protecting sensitive data, user credentials, and securing integrations across user applications," said Shiven Ramji, president of Customer Identity Cloud at Okta, in a statement. "Our new product, Auth for GenAI, enables application builders to enjoy securing their genAI apps, with the developer and user experience Auth0 is known for."

Other new products from Okta include the following:

• Developer Portal, which will help make APIs AI-ready.
• Universal Logout, which allows security teams to detect risk changes and automatically terminate all user sessions across applications and devices. When a logout or de-provisioning event occurs in Okta Workforce Identity Cloud, employee identities are automatically signed out of apps managed by Okta Customer Identity Cloud.
• Self-service single sign-on (SSO) and system for cross-domain identity management (SCIM), which will allow teams to programmatically send their customers' IT administrators a link to a setup wizard, enabling them to configure SSO and SCIM themselves.
• Advanced customization for universal login, which will help organizations customize the sign-up and sign-in experience across every app, device, and digital journey.