Orchestrate now carries a distinct agent identity

IBM said on November 3 that Agent Identity is generally available in watsonx Orchestrate. An administrator connects an Orchestrate tenant to IBM Verify or Microsoft Entra, then assigns identities to agents built in the platform or imported into its runtime. IBM lists LangGraph agents as one external example.

When a person runs an agent, IBM says an OAuth exchange can represent both the user and the agent instead of passing along one shared credential. The identity record also identifies an owner and the resources available to the agent. These are issuer-described controls; CGH has not tested their enforcement.

The general release adds records and a stopping control

The November release adds per-agent access logs that identify the connection, tool and user involved in an event. IBM also describes a kill switch that undeploys an agent and closes its active sessions. The interface is designed to show affected collaborator agents before the administrator confirms that action.

The stopping control does not establish that every connected service has revoked separate credentials or reversed work already completed. Operators still need to test downstream revocation, audit export and recovery behavior in their own environment.

Availability is broader, but the commercial limits are incomplete

IBM says Agent Identity is available in watsonx Orchestrate, but the reviewed update does not provide a complete regional table or identify feature eligibility for every subscription. IBM’s public pricing page lists Orchestrate Essentials from $530 per month, Standard from $6,360 per month and Premium by quote; it does not itemize Agent Identity as a separate charge.

The wider cross-platform agent discovery and containment functions covered in the October announcement remain a separate technology-preview track in the reviewed materials. Organizations should confirm their plan, identity-provider setup, deployment region and supported external-agent path before treating the new controls as ready for production use.