Descope announced Agentic Identity Hub 3.0, adding agent governance, runtime enforcement across Policy Enforcement Points, and expanded client authentication methods.
Introducing Descope Agentic Identity Hub 3.0: Governance and Control for AI Agents ↗
What happened
- The Agent Governance Suite is available only for the Enterprise tier; other capabilities are available to any developer, including Free Forever tier users.
- Agent SSO (Cross-App Access) issuance and validation of ID-JAGs is described as supported by Descope.
- Client authentication options now include SPIFFE workload identities, private_key_jwt, and mutual TLS with certificate-bound tokens.
Why it matters to Signicat
- Descope is extending agent identity into governance and runtime policy, an adjacent area to Signicat's authentication and trust orchestration offerings; Signicat's agentic AI posture is not supplied here.
Evidence from the source (4 quotes)
- “The Agent Governance Suite (highlighted later on in this blog) is only available for the Enterprise tier.” source ↗
- “Descope can both issue and validate ID-JAGs.” source ↗
- “Authenticate agents using SPIFFE workload identities (SVIDs), binding an agent identity to the workload it actually runs on.” source ↗
- “Descope continues to act as a dedicated identity provider for AI agents” source ↗
Agentic AI identityAuthentication passwordlessOrchestration platformProduct launchFeature updateGlobal
4 of 4 facts verified against the source · confidence high · claude-haiku-5-5