Ping Identity - Experts & Thought Leaders

Ping Identity, a pioneer in securing digital identities for the world’s largest enterprises, announced that its patient identity verification and fraud protection capabilities for MyChart are listed in Epic Toolbox. Modernising patient access Healthcare organisations are continuing to modernise patient access experiences while balancing security, privacy, and operational efficiency. Account creation and recovery in MyChart environments require organisations to support seamless patient experiences while incorporating identity verification, fraud detection, and adaptive risk response into digital workflows. MyChart details Ping Identity provides patient identity verification combined with real-time fraud and risk detection as a packaged solution for healthcare organisations using MyChart. Powered by dynamic orchestration, these capabilities bring identity verification, fraud and risk detection into MyChart-connected workflows, allowing organisations to automate and secure patient onboarding and account recovery while reducing friction for legitimate users. The solution includes three core capabilities for MyChart environments that help organisations address these needs: Identity Verification: Verify patients during account creation and recovery using government-issued ID, biometric matching, and liveness checks Threat and Risk Detection: Detect synthetic identities, account takeover attempts, and suspicious activity using real-time behavioural and environmental signals No-Code Orchestration and Dynamic Response: Guide patients through the appropriate account creation or recovery flow in real time, with the ability to allow, challenge, step up, or block interactions based on risk By enabling healthcare organisations to move beyond static authentication toward continuous, verified trust across patient interactions, the solution helps reduce fraud during account creation and recovery while improving patient access experiences and operational efficiency. The solution works with existing MyChart-connected healthcare systems, helping organisations strengthen security without replacing current infrastructure. Supporting privacy-preserving standards Ping Identity’s identity verification approach is designed to support privacy-preserving standards. It uses minimal data collection and policies that support rapid deletion of Personally Identifiable Information (PII) following identity verification. This supports healthcare organisations’ privacy and compliance objectives, including HIPAA-related requirements. “Healthcare organisations are being asked to do more with less while protecting increasingly sensitive data,” said Steve Gwizdala, VP Healthcare at Ping Identity. “Ping Identity helps secure patient account creation and recovery connected to MyChart, reducing risk and operational burden without adding friction for patients.”

Ping Identity, a pioneer in securing digital identities for the world's largest enterprises, announces new capabilities that extend the Ping Identity Platform for the agentic enterprise, where AI agents, builders, and automation increasingly participate in how access is configured, governed, and used across organisations. AI agents are changing both sides of the identity equation. They are new actors that need to be discovered, governed, and managed across their lifecycle, and they are also new operators that can help builders administer and secure identity environments through machine-native interfaces. At the same time, desktop agents and AI assistants are beginning to interact with enterprise applications and resources on behalf of users, creating a new access challenge: agents need trusted access to do useful work, but should not be given direct exposure to the secrets that make that access possible. Reducing standing privilege Ping is addressing these shifts with a unified set of capabilities across the Ping Identity Platform: Programmable identity: AI-first, headless interfaces and skills that make enterprise identity programmable through MCP, CLI, APIs, and agent-ready workflows Agent Discovery and Governance: discovery, lifecycle governance, auditability, and human accountability for AI agents Privileged Access for Desktop Agents: just-in-time access to enterprise resources for coding agents, AI assistants, and other desktop agents, designed to prevent secrets from being exposed to agents, reduce standing privilege, and attribute code commits to agents Operational governance infrastructure Together, these capabilities help enterprises support AI-driven operations without creating a parallel identity stack, preserving governance and control across human, non-human, and AI-agent access. "AI agents are fundamentally changing how enterprise systems operate," said Andre Durand, CEO and Founder, Ping Identity. "As enterprises make applications consumable by AI agents, Ping is making identity programmable, agents visible and governable, and resource access trustworthy. Identity is evolving from authentication infrastructure into operational governance infrastructure for the agentic enterprise." Machine-friendly interfaces Enterprise identity is moving beyond human-only administration through graphical consoles. As teams adopt AI agents, code assistants, and machine-driven workflows, identity needs to become easier to configure, automate, and govern through machine-friendly interfaces. The Ping Identity Platform extends enterprise identity through AI-first headless interfaces that allow builders and agents to work with identity programmatically, including through CLI and MCP. Ping is also introducing agent-ready skills that help AI agents understand and perform common identity tasks, including configuring access, troubleshooting flows, and applying governance controls within approved policies and guardrails. Machine-driven workflows Together, these interfaces and skills help teams configure, secure, and govern access more efficiently while continuing to apply centralised policies, approvals, and controls across the identity environment. As enterprises deploy AI agents across environments, they need visibility into which agents exist, what they can access, how they operate, and who is accountable for their actions. Ping's new discovery and governance capabilities help organisations manage agents across their full lifecycle from discovery and ownership assignment to access review, policy enforcement, auditability, and decommissioning. Each agent can be treated as a first-class identity, tied to a human owner, governed by policy, and auditable across development and runtime environments. Deploying AI agents Coding agents, AI assistants, and other desktop agents need access to enterprise applications, systems, repositories, and tools to complete work on behalf of users. But giving agents direct access to credentials or long-lived secrets creates unnecessary risk and weakens enterprise control. Ping enables trusted access for desktop agents by brokering access to enterprise resources without exposing secrets to the agents themselves. This is further enhanced for coding agents, where code commits are attributed to the agents to allow finer policy and control. Agents get the access they need to complete work, not the secrets behind that access, while enterprises retain control over how access is granted, governed, attributed, and audited. Centralised identity governance "AI agents are changing both how work gets done and how identity must operate," said Peter Barker, Chief Product Officer, Ping Identity. "Enterprises need AI agents to operate across systems and resources without creating new trust gaps. Ping helps organisations adopt AI faster while preserving governance, accountability, and control." Together, these capabilities extend the Ping Identity Platform for the realities of the agentic enterprise: identity must be programmable, AI agents must be governed across their lifecycle, and agent access must be trusted without exposing secrets. With these additions, Ping helps organisations adopt AI agents more safely and efficiently while maintaining centralised identity governance, accountability, and control.

Ping Identity, a pioneer in securing digital identities for the world’s largest enterprises, announced the General Availability of Identity for AI, introducing a model designed for the realities of AI agents operating across the enterprise. As autonomous agents move into production, the challenge is no longer just managing identity. It is controlling what those identities do as they operate at runtime. In an agentic enterprise, the system of record is not sufficient. The system that enforces decisions at runtime becomes the system of control. Components Identity for AI is now generally available with three core components: Agent IAM Core, Agent Gateway, and Agent Detection. Together, they establish agent identity, enforce delegated authority at runtime, and detect agentic activity. Traditional identity was built for authentication and access. Autonomous agents change that model. Every action carries enterprise impact. Managing identities still matters, but it is no longer sufficient. The bigger challenge is execution. Organisations must detect when agents are active and enforce what they are allowed to do in real time.  AI agents That shift demands explicit delegation, not impersonation. Humans remain accountable, with approval where appropriate. This applies across on-behalf-of-user and autonomous flows. Instead of extending human credentials to AI systems, organisations define and enforce what an agent is allowed to do through continuous, contextual authorisation.  “AI agents are not features. They are actors in the enterprise that require identity, authority, and accountability,” said Andre Durand, CEO and Founder of Ping Identity. “Identity is foundational. Agents acting autonomously at agentic scale and speed against systems of record will require continuous verification and enforcement at every decision.”  This milestone extends Ping’s Digital Trust mission into the agentic era, ensuring human and non-human identities are governed under a unified identity framework. Ecosystem alignment Several global leaders from Ping's preferred partner ecosystem recognise identity as foundational to trusted AI adoption. “Agent autonomy is only as safe as the identity and access controls behind it. AI agents should be treated like first-class digital identities: authenticate them, authorise what they can do, and audit what they touch to close governance gaps across the identity lifecycle,” said Chad Veldhuizen, alliance leader for Ping Identity and managing director, Deloitte & Touche LLP. “AI agents introduce a new class of risk. It’s not just about access, it’s about having the security controls and oversight in place to understand what those agents do once they’re deployed. A holistic view of agent activity and strong guardrails to enforce least privilege and protect sensitive data, is critical in the AI era,” said Kyle Krum, Senior Director of Product Management, Cloudflare. What identity for AI delivers today Identity for AI extends beyond access at login by establishing control at the moment of action through continuous, contextual authorisation at runtime, operating at enterprise scale. Enterprises define delegated authority so agents act with the right permissions, at the right time, in the right context, with clear accountability to the users they represent. With Identity for AI, enterprises can: Treat AI agents as first-class identities with defined ownership, credentials, and policy Use delegated, scoped tokens instead of human impersonation or shared credentials Enforce least privilege at the moment of action, evaluating each agent request in real time Secure MCP-based integrations through Agent Gateway without rewriting existing services Detect and identify external AI agents using behavioral signals and bot authentication protocols Agent IAM Core Agent IAM Core enables enterprises to onboard, manage, authenticate, and authorise AI agents in real time as a new identity type, mapping agent access based on delegated entitlements and policy. Agent Gateway Agent Gateway provides a runtime enforcement layer that standardises how agents interact with services, invokes fine-grained authorisation, and centralises monitoring and audit of agent activity. Agent Detection Agent Detection, available via PingOne Protect, provides runtime agent detection and risk assessment for AI agents. It identifies personal and external AI agents through bot authentication protocols and behavioral signals, and feeds those signals into authorisation decisions, routing them into appropriate authentication and authorisation pathways. Identity for AI also standardises enforcement across emerging AI integration frameworks, including the Model Context Protocol (MCP), enabling secure agent-to-system interactions at scale. Together, these capabilities establish a runtime enforcement layer that governs AI behavior across systems, beyond just identity lifecycle and access control.  Enabling safe AI innovation By moving identity into runtime, enterprises gain continuous control over AI-driven actions. This allows organisations to deploy AI agents in production while maintaining clear boundaries around what those agents are allowed to do.  Least-privilege access can be enforced for non-human identities, with centralised policy enforcement and support for autonomous workflows backed by auditability and accountability. Identity for AI extends Ping’s enterprise trust architecture into the agentic era, unifying access and governance across human and non-human identities under a single architectural model. Future enhancements will expand authorisation and governance capabilities, helping enterprises manage agent and MCP access at scale while deepening agent visibility and lifecycle controls. Availability Identity for AI will be generally available globally by March 31, 2026.