At Identiverse 2026 in Las Vegas, CrowdStrike introduced ‘Continuous Identity for AI Agents,’ a capability integrated into the Falcon Next-Gen Identity Security platform. The announcement marks a shift in how enterprise AI agents authenticate, moving away from static API keys toward cryptographically verifiable identities based on the SPIFFE standard.
This product development relies on the infrastructure acquired through the $740 million purchase of SGNL, announced in January 2026. The acquisition provided the underlying technology to dynamically grant, deny, and revoke access based on real-time risk.
The technical necessity stems from a structural limitation in current authorization protocols. Standard OAuth access tokens lack the fields required to represent agent instance identity, user identity, and the specific relationship between them. This gap creates the ‘confused deputy problem,’ where downstream systems inadvertently grant excessive access because they cannot distinguish between the agent’s authority and the user’s original intent.
During the Internet Identity Workshop in April 2026, industry participants reached a consensus that current OAuth/JWT implementations are insufficient for AI use cases. Without new standardization, the ecosystem risks a proliferation of divergent, incompatible implementations.