Omada Acquires EmpowerID to Govern AI Agent Runtime Actions
Omada has acquired EmpowerID to integrate its runtime authorization technology into Omada's identity governance platform, aiming to provide granular control over AI agent operations.
Omada, a leader in identity governance and administration (IGA), has announced its acquisition of EmpowerID, a boutique vendor specializing in runtime authorization for AI agents. This strategic move aims to bolster Omada's existing IGA platform by incorporating EmpowerID's advanced capabilities, enabling enterprises to discover, govern, and authorize the actions of AI agents in real-time.
The integration is designed to address a critical gap in the market for securely deploying autonomous AI agents in production environments. Omada CEO Jakob Kraglund stated that EmpowerID's technology was crucial for accelerating their roadmap and strategy, particularly in providing the necessary runtime controls for AI agents. "We realized that EmpowerID had some very advanced technology and a lot of good experience in the field of runtime authorization, which we then realized could significantly help to accelerate our road map and the strategy that we have put together," Kraglund explained.
EmpowerID, founded in 2005 and based in Dublin, Ohio, brings a team of 41 employees and a proven technology stack focused on runtime authorization. Patrick Parker, EmpowerID's CEO, will join Omada as Chief Innovation Officer. Parker highlighted Omada's strong European market presence and robust IGA capabilities as key factors in the acquisition, while also noting the significant market opportunity that EmpowerID, as a smaller company, could not fully capitalize on alone.
The core of EmpowerID's offering lies in its ability to control AI agent execution, ensuring that agents perform only authorized actions and providing an auditable trail for compliance. This is particularly relevant for regulations like the EU AI Act. Unlike solutions that merely discover AI agents, EmpowerID's technology can actively govern them, allowing for modifications to their tools, prompts, and overall behavior to enforce security policies.
Parker emphasized the limitations of traditional administrative governance for AI agents, whose intent is often generated at the last second. "You go a step farther and you control the agent so it can literally only execute exactly what it was authorized to execute, and you have the proof for the auditors and the EU AI Act of exactly what was authorized, who delegated, what were the identities and then what was actually executed," he said.
EmpowerID's identity fabric can discover various identities and credentials, offering a no-code experience for creating new discovery connectors. This approach transforms static governance into active, runtime authorization, promoting the use of specialized, least-privileged agents to mitigate risks associated with over-permissioned AI. The platform allows for the identification, quarantine, and secure governance of agents, ensuring their tools and actions are validated and controlled.
The acquisition will see EmpowerID's agent identity fabric and runtime authorization framework integrated into Omada's existing IGA platform. Omada's focus on best practices and accelerators for rapid deployment was a significant draw for EmpowerID, with Kraglund suggesting that EmpowerID's AI technology could further enhance these project execution frameworks, enabling faster value delivery for clients.
Both companies primarily target large enterprises in Europe and North America. The integration is expected to provide organizations with a comprehensive solution for managing the growing complexity and risks associated with deploying AI agents, ensuring they operate securely and compliantly within enterprise environments.