TLDR: WSO2 has released new versions of its Identity Server and Asgardeo IDaaS, introducing agent identity management and Model Context Protocol (MCP) authorization to secure AI agents by treating them as first-class identities. The updates also include AI-driven automation for developers, expanded B2B CIAM support, and enhanced security features, aiming to simplify the deployment of secure AI-powered applications.
WSO2, a leading provider of open-source API management, integration, and identity and access management (IAM) solutions, has announced significant updates to its WSO2 Identity Server and Asgardeo identity-as-a-service (IDaaS) products. These latest releases are designed to address the growing need for robust security in the era of artificial intelligence (AI) agents and to enhance developer productivity.
A core focus of the new versions is the introduction of ‘agentic IAM capabilities,’ which enable organizations to secure AI agents by treating them as first-class identities. As AI agents increasingly take on tasks traditionally handled by humans, they require stringent access security and oversight. WSO2 is among the first vendors to tackle this challenge, allowing for the registration and management of AI agents as distinct entities. This includes assigning roles and access levels, issuing agent-friendly credentials and authentication, managing tokens for secure communication, and enabling independent auditing of agent activity.
Furthermore, the updates include Model Context Protocol (MCP) authorization functionality, which is crucial for securing MCP servers – the key protocol for AI agents accessing corporate resources. This feature allows for registering MCP servers to define precise access controls, maintaining consistent authorization rules, and setting up MCP clients with specific scopes to ensure secure operations.
Geethika Cooray, vice president and general manager of identity and access management at WSO2, emphasized the importance of these advancements, stating, “Developers are being tasked to deliver an expanding range of secure, intelligent digital experiences across multiple consumer and business scenarios. With our latest WSO2 Identity Server and Asgardeo releases, we’re simplifying developers’ experience while empowering them to deliver secure AI-driven applications and agents that serve today’s advanced B2B and consumer demands.”
Beyond securing AI agents, WSO2 has also expanded its AI-driven automation features to boost developer productivity. Building on previous AI-assisted branding and user login creation, the new versions add AI-assisted self-registration flow generation and MCP server authorization. Developers can now choose between natural language and no-code drag-and-drop options to configure security access, simplifying the implementation of complex features like multi-factor authentication (MFA) and user provisioning.
The releases also extend WSO2’s leadership in comprehensive business-to-business (B2B) customer IAM (CIAM) support. New capabilities include streamlined login and security for sub-organizations, allowing consistent settings to be applied across hierarchies while offering customization options. Additionally, selective role sharing for B2B applications provides granular control over which roles are shared when an application is made available to different organizations.
Other significant security enhancements in the new WSO2 IAM products include real-time event publishing for an identity-first security approach, advanced account linking based on any chosen user attribute, a revamped workflow-based approval framework, support for European digital identity solutions (Signicat, FranceConnect, Swiss ID), and expanded post-quantum security to protect against future quantum-based attacks.
Also Read:
- Akeyless Introduces Advanced Security Platform for AI Agent Identities Amidst Rapid AI Adoption
- Incode and Prove Unveil Advanced Identity Layers to Secure Autonomous AI Agent Transactions
These new capabilities are generally available with WSO2 Identity Server 7.2 and the latest release of Asgardeo. WSO2, founded in 2005, manages over 1 billion identities worldwide and continues to focus on open-source, AI-driven, API-first approaches to empower enterprises in over 90 countries.
