New integration delivers a single control plane for non-human identities and AI agents, combining Oasis’ identity governance with inline enforcement across Zscaler’s Zero Trust Exchange
Oasis Security, the enterprise platform for Non-Human Identity Management (NHIM) and Agentic Access Management (AAM), announced an integration with Zscaler, Inc., the cybersecurity platform for the AI era. The integration extends the Zscaler Zero Trust Exchange™ platform with Oasis’ lifecycle governance for non-human identities and AI agents, from discovery to decommissioning, delivering stronger and unified identity security for joint customers.
A New Identity Problem at Enterprise Scale
Most enterprise traffic is now machine-to-machine. Until now, zero trust principles assumed an authenticated identity behind every connection. That assumption holds for human users but falls apart as non-human identities (NHIs) like service accounts, API keys, OAuth tokens, IAM roles, and secrets proliferate across the enterprise.
NHIs already represent the vast majority of identities in most organizations, yet most operate without ownership, lifecycle management, or audit oversight. Compounding the challenge, AI agents and MCP servers are appearing on managed endpoints with hardcoded secrets and broad standing access, often without security teams’ knowledge.
Also Read: CIO Influence Interview with Hugo Dozois-Caouette, CTO and Co-founder at MaintainX
One Control Plane for Every Identity
The Oasis integration with Zscaler gives joint customers a single control plane for every identity that touches the enterprise, from Active Directory to AI agents.
- Zscaler inspects, brokers, and enforces zero trust connections across every user, device, workload, and application.
- Oasis adds the identity context that has historically been missing for machine and agentic traffic: who created it, what it can access, whether it’s still owned, and how it should be rotated or revoked.
With the integration, joint customers can:
- Discover NHIs across cloud, SaaS, and on-premises systems, plus AI agents and MCP servers identified by Zscaler
- Attribute every identity to an owner and score its risk
- Govern the full lifecycle by rotating secrets, scoping access, or decommissioning identities
- Enforce zero trust policy inline across every connection
The result: no more reconciling stale credentials and orphaned accounts across a fragmented toolset.
Catch more CIO Insights: What Does “Job-Ready” Really Mean in IT and Cybersecurity?
[To share your insights with us, please write to psen@itechseries.com ]
