---
title: Getting started with Agent Privilege
description: Get started with Agent Privilege to secure personal AI agents, workload agents, and non-human identities accessing agentic apps.
component: privilege
page_id: privilege:agent-privilege:getting-started-agent-privilege
canonical_url: https://docs.pingidentity.com/privilege/agent-privilege/getting-started-agent-privilege.html
llms_txt: https://docs.pingidentity.com/privilege/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: September 10, 2026
page_aliases: ["agent-privilege:getting-started.adoc"]
section_ids:
  before-you-begin: Before you begin
  configure-agent-privilege: Configure Agent Privilege
---

# Getting started with Agent Privilege

Set up and use Agent Privilege to secure AI agent traffic in your organization.

## Before you begin

Ensure the following:

* You have a PingOne tenant with the Agent Privilege and PingOne SSO services added.

* Your PingOne environment is configured for user and group access to PingOne Privilege.

* You can [access the PingOne Privilege admin console as an administrator](../getting-started/accessing-admin-console.html).

* You have identified which agents your users are running (for example, Claude Code, Cursor, or OpenAI Codex) and which enterprise resources those agents need to access.

## Configure Agent Privilege

Configure Agent Privilege in the PingOne Privilege admin console in the following order:

1. [Configure Agent Privilege](index.html): Set up AI gateways for runtime protection on all agentic apps.

2. [Add agents in Agent Registry](configuration/agent-registry.html): Register the agents that will authenticate to PingOne Privilege and choose how they authenticate.

3. [Set up multi-factor authentication](configuration/pingid-mfa-app-connect.html): Require PingID MFA for app connections and step-up authentication for privileged commands.