Agent identity & access
Oasis places an access layer between AI agents and SaaS, cloud, on-prem and data systems: it converts each agent request into a structured intent, evaluates it against policy with optional human escalation, and provisions ephemeral least-privilege session identities with prompt-level audit trails. Enforcement depends on agents routing through Oasis.
commercial · generally available · Research snapshot 2026-09-06
Visit the official product source ↗Agent identity & access · Runtime authorization & controls · Observability & traceability
Useful conversation with: CISO, IAM manager, Security architect.
Demonstrate an agent request converted into structured intent, denied by policy, then approved with human-in-the-loop and executed under a just-in-time session identity.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Vendor claim
Oasis AAM provisions ephemeral, least-privilege session identities scoped to a single action, eliminating standing secrets, with audit trails covering person, prompt, policy, actions and teardown.
Limit: Neither source is reference documentation; supported target systems for provisioning are not enumerated.
Vendor claim
The product infers agent intent from prompts, tool calls and action plans and evaluates it deterministically against enterprise policy, escalating to a human when privilege boundaries are crossed.
Limit: Accuracy of LLM-driven intent inference is not independently validated.
Vendor claim
AAM extends Oasis's existing non-human identity management platform, which covers NHIs across IaaS, SaaS, PaaS and on-prem environments.
Limit: Home page does not document audit or credential issuance specifics.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction