What happened
On Oct 22, Okta announced new Okta for AI Agents capabilities: AI Agent Import integrations now bring agents from Cursor, Snowflake, Databricks, Workato and Tines into a centralized registry; Client ID Metadata Document (CIMD) registration is generally available (publish-a-URL, pull-on-demand client identity with admin allowlist, DPoP/mTLS proof-of-possession); Multi-Source Agent Schema is GA; and MCP governance adds the Okta Integration Network MCP Server Catalog plus MCP Server Registration via Dynamic Client Registration and Multi-MCP Custom Auth Servers.
Why it matters
It addresses the 'where are my agents and what can they do' gap at the identity layer, moving agent and MCP-server onboarding from per-server manual OAuth projects to CIMD/DCR-driven, policy-scoped registration — the fastest-growing attack/governance surface for non-human identities.
Applicability
IAM and security teams standardizing agent/MCP identity should evaluate CIMD registration and the MCP catalog for policy-enforced, credential-least-privilege agent onboarding.