Importance of Identity Security in the Age of AI
The relevance of identity security escalates as artificial intelligence (AI) agents increasingly operate across enterprise systems. For smaller technology teams that cannot allocate significant resources towards infrastructure, security, and identity management, this challenge becomes particularly pronounced. The Professional Golfers’ Association of America (PGA) has strategically minimized complexity and relies heavily on solutions from Okta and Auth0. This focus allows their developers to channel resources toward technologies that provide direct benefits to their members and customers, as highlighted by Kevin Scott, Chief Technology Officer of the PGA of America.
Simplifying Identity Security through Infrastructure Reduction
The PGA of America has adopted a streamlined approach by eliminating various layers of infrastructure rather than managing them. The organization no longer operates its own data centers, virtual private networks (VPNs), or even traditional corporate networks, which minimizes the systems where identity controls can become disjointed. This simplification, Scott points out, also curtails potential vulnerabilities among diverse user groups.
Scott explained, “The way that we’ve tried to get through it is to simplify things as much as we possibly can. If you need to handle the same type of use case or persona management across multiple systems, that’s where you can get into trouble. We try to streamline things as much as we can.”
As AI agents can access enterprise tools and data on behalf of employees, the PGA is centralizing this environment. By directing employees towards a common AI platform and implementing identity controls with technologies such as the Member Cloud Portal (MCP) and agent gateways, they aim to avoid the proliferation of independent agents throughout the organization. “We try to make ours the best option,” Scott stated, emphasizing the importance of creating defaults that guide employee behavior, facilitating a centralized management system.
Changes in Decision-Making Surrounding AI Technology
The integration of AI into workflows also transforms the dynamics of technology decision-making. As AI implementations start influencing governance and business processes, the PGA of America is fostering closer collaboration among finance, human resources, legal, and technology teams. Scott noted that decisions previously primarily handled by IT now require input from multiple perspectives before any software can progress to production.
“I think it’s put greater importance on creating a shared understanding between finance and HR and legal as well as technology,” he explained. “It used to be easier to make a standalone technology decision; now it’s more obvious that there are things that really deserve the attention of these multiple perspectives.”
The PGA of America is matching this expanded oversight with a measured approach to AI deployment. All new tools and use cases undergo scrutiny from an internal council, ensuring that human review remains pivotal. While organizations still have the ability to move swiftly, familiarity with the technology is critical, as teams need firsthand knowledge to assess vendors and determine what should be developed internally. “You build that up by experience,” Scott noted. “Turns out a lot of the stuff is actually easier than you might think.”
For further insights, the complete video interview, part of SiliconANGLE’s and theCUBE’s coverage of Okta’s Oktane event, is available for viewing.