PGA Picks Identity Over Agents. Smart. Unmanaged Autonomy Is Just Chaos.
The PGA of America is using Okta and Auth0 to centralize identity security around its AI strategy, steering employees toward a common AI platform rather than letting independent agents proliferate. According to Scott, the organization uses identity controls around technologies like MCP and agent gateways to manage access, deliberately reducing infrastructure complexity for its smaller technology team.
This demonstrates what I would call the identity perimeter principle. When AI agents act across enterprise systems, the question is not what they can do but who they are allowed to be. The PGA recognized that distributed autonomous agents without centralized identity management are not an architecture. They are a liability. The lesson for any organization: before you deploy agents, establish who controls their credentials and what boundaries those credentials enforce.
The PGA of America, working with Okta and Auth0, has built a centralized AI platform with identity controls around MCP and agent gateways, as explained by Scott at SiliconANGLE's Okta event.
- Sign up for a free Okta Developer account at developer.okta.com. Expected outcome: you have access to an identity management platform you can explore at no cost.
- Create one application in the Okta dashboard and assign it a single user with limited permissions. Expected outcome: you see how identity is centralized before access is granted, which is the core concept.
- Try to access the application without logging in as that user. Expected outcome: you are denied, demonstrating the principle that identity, not the application itself, controls access.