Skip to main content

Ping Identity and KuppingerCole Analysts Examine Runtime Authorization Gaps

Source Decision Insights Record Published April 28, 2026 Companies 2
Human View Machine View

2 companies named across 2 categories, one of 3 articles referencing Ping Identity. Previous coverage: NVIDIA Broadcom Aviz Flexera and others report product, partnership and infrastructure updates - Week of January 12, 2026 (Jan 2026).

Companies mentioned

Best suited for

Seniority
EVP / SVP / VP / AVP
Job function
Chief Information Security Officer
Persona
Security Architect
Buyer role
Decision Maker / Budget Holder
Decision stage
Which to buy
Adoption curve
Early Adopters
Technology maturity
Market Correction
Industry
Information Technology / Software & Services / IT Services / Cloud Services

Our classification, not the publisher's statement. Best suited for, not only for.

Ping Identity commissioned new research from KuppingerCole Analysts on how enterprises govern AI agents at runtime as these systems move into production. The work focuses on emerging authorization gaps that can appear when agents act beyond controls built for human users.

The report describes a shift from managing identities to controlling how identities act across systems, data, and workflows. It also outlines a failure mode where an AI agent combines individually legitimate permissions in unintended ways, producing actions that established controls cannot fully trace or govern.

KuppingerCole Analysts said access grants permission but does not enforce control, and they described several risk areas for agent operations. These include delegation opacity and sub-agent spawning that break auditability, implicit human assumptions in IAM where OAuth and OIDC models depend on human decision-makers that agents bypass, context leakage across systems without continuous re-evaluation of authorization, and questions around permission inheritance, liability, and enforcement in agent-to-agent interactions.

The researchers laid out an independent blueprint for controlling autonomous AI grounded in identity, policy-based authorization, governance and oversight, and accountability, extending identity and zero trust principles toward continuous runtime authorization and governance. “Enterprises are deploying autonomous AI faster than they can govern it,” said Andre Durand, CEO & Founder, Ping Identity. The report also cited findings from IBM’s 2025 Cost of a Data Breach report and included a statement from Martin Kuppinger on extending identity and authorization models for autonomous agents operating in dynamic environments.

Press release, provided by Cision on behalf of Ping Identity. Read the original.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/ping-identity-and-kuppingercole-analysts-examine-runtime-authorization-gaps/",
        "name": "Ping Identity and KuppingerCole Analysts Examine Runtime Authorization Gaps",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/ping-identity-and-kuppingercole-analysts-examine-runtime-authorization-gaps/#blogposting",
    "@type": "NewsArticle",
    "about": {
      "@id": "https://decisioninsights.ai/registry/ping-identity/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/ping-identity/",
      "name": "Ping Identity"
    },
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Seniority",
        "audienceType": "EVP / SVP / VP / AVP"
      },
      {
        "@type": "Audience",
        "additionalType": "Job function",
        "audienceType": "Chief Information Security Officer"
      },
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Architect"
      },
      {
        "@type": "Audience",
        "additionalType": "Buyer role",
        "audienceType": "Decision Maker / Budget Holder"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Adopters"
      },
      {
        "@type": "Audience",
        "additionalType": "Technology maturity",
        "audienceType": "Market Correction"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Software & Services / IT Services / Cloud Services"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
      "@type": "Person",
      "name": "Decision Insights Record",
      "url": "https://decisioninsights.ai/author/decision-insights-signals/"
    },
    "dateModified": "2026-08-23T14:35:24-06:00",
    "datePublished": "2026-04-28T08:34:35-06:00",
    "description": "Ping Identity commissioned KuppingerCole Analysts research on runtime authorization gaps for AI agents, citing delegation opacity and auditability issues.",
    "headline": "Ping Identity and KuppingerCole Analysts Examine Runtime Authorization Gaps",
    "isBasedOn": {
      "@type": "CreativeWork",
      "sourceOrganization": {
        "@type": "Organization",
        "name": "Cision"
      },
      "url": "https://www.prnewswire.com/news-releases/ping-identity-warns-of-emerging-authorization-risks-as-ai-agents-scale-across-enterprises-302755633.html"
    },
    "keywords": [
      "Authorization",
      "IT Governance"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/ping-identity-and-kuppingercole-analysts-examine-runtime-authorization-gaps/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/ibm/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/ibm/",
        "name": "IBM"
      },
      {
        "@id": "https://decisioninsights.ai/registry/ping-identity/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/ping-identity/",
        "name": "Ping Identity"
      },
      {
        "@id": "https://decisioninsights.ai/projects/oauth/#project",
        "@type": "SoftwareSourceCode",
        "mainEntityOfPage": "https://decisioninsights.ai/projects/oauth/",
        "name": "OAuth"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-signals/#person",
    "@type": "Person",
    "description": "Press releases and independent analyst research, structured into concise summaries for research and monitoring. Produced under our Standards & Methodology.",
    "name": "Decision Insights Record",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-signals/"
  }
]

Is this your company? Get structured data for your own pages