What happened
On Oct 20 Saviynt introduced Zuma for Apps, a new solution on its Enterprise AI Identity Security Platform that governs AI agents and non-human identities inside SAP, Salesforce, Oracle, ServiceNow and other business-critical apps. It maps the full action chain (invoker human, orchestrator, sub-agents, delegated authority, fine-grained entitlements), evolves SoD/certification/provenance for agentic workflows, and quantifies realized vs potential business exposure in financial terms.
Why it matters
It targets the application-layer blind spot where native agents (SAP Joule, Agentforce, Copilot) execute transactions outside CASB/NHI/IAM reach, and reframes governance from 'what an identity can access' to 'whether this agent action should have happened' — with SoD and exposure expressed in dollars.
Applicability
Enterprises running agents in production ERP/CRM/SaaS with SoD concerns should evaluate Zuma for Apps; IAM/GRC teams to pilot in 2026-2027.