AI Governance and Access Management: Ping Identity’s September Updates

The rise of autonomous models leads to the emergence of uncontrolled AI in the corporate environment. Employees and developers independently connect personal AI assistants to daily work processes, creating serious blind spots for IT security departments. At the same time, organizations in logistics, retail, and manufacturing face another operational issue — slow access provisioning for frontline workers. Using shared devices during shift changes often results in downtimes and the loss of a clear audit trail, complicating incident monitoring.

The response to these infrastructure challenges is a new set of updates that transforms credential management from a basic authorization tool into a dynamic control system. The platform integrates PingOne Privilege, PingOne Protect and DaVinci orchestration tools into a single ecosystem. This enables security architects to establish strict policies regarding machine activity and connect verification modules without writing complex logic. Ping Identity offers a ready-made set of connectors, significantly reducing manual work for IT departments.

New features focus on ensuring security while using artificial intelligence. The PingOne Privilege Enterprise Personal Agent Access solution allows for the detection of supported AI agents, reliably linking each session to a specific user and device. In real-time, the system can block, allow, log, or require confirmation for any action attempted by the agent.

Simultaneously, PingOne Protect introduces managed authentication for AI, recognizing specific requests and applying the appropriate level of protection to them. Additionally, the AI-First Headless Identity direction received support for remote and marketplace MCP protocols, as well as React Native for DaVinci.

The updates significantly simplify the work of developers with new connectors for PingOne DaVinci. The Identity Verification Use Case module allows adding government document verification and facial recognition without building custom logic. Also, in the early access mode, the PingOne Recognize connector appeared, which ensures biometric verification with confidentiality using headless SDK. For administrators, new cross-system synchronization tools have been added: extended capabilities for Microsoft Entra ID and Snowflake automate user, group, and role management, maintaining access rights’ relevance during personnel changes.

The value of the new features is best revealed in real business scenarios. For example, in a large logistics company, hundreds of warehouse workers use shared tablets. The new ‘Verified Trust for Frontline Workers’ process set allows for instant creation of a verified account and access via biometrics. An employee undergoes quick facial recognition, and the system logs their actions. Another example is a developer integrating a personal AI assistant for working with corporate databases. Thanks to PingOne Privilege, the security team sees not an anonymous request, but a clear chain of ’employee — device — agent’, allowing them to instantly block unauthorized data downloads.

Summarizing the September updates, several key aspects stand out:

• IAM management now covers not only people but also autonomous AI systems, ensuring visibility of every action on the network.
• Ready-made DaVinci connectors and headless architecture reduce deployment time from several months to a few days.
• Specialized processes for frontline staff minimize downtime and increase accountability on shared devices.

The company iiTD is a Value Added Distributor of Ping Identity solutions and a reliable expert partner in the field of Identity Security. Our team provides comprehensive project support — from infrastructure audits and optimal architecture selection to implementation and extended support. Engaging qualified engineers allows for the integration of modern orchestration tools into existing IT systems quickly, seamlessly, and with maximum economic benefit for the business.