Getting started with Agent Privilege

This guide helps administrators set up Agent Privilege to secure personal AI agents in their organization.

Before you begin

Ensure the following:

You have a PingOne tenant with the Agent Privilege service added.
You can access the PingOne Privilege admin console as an administrator.
You have identified which personal agents your users are running (for example, Claude Code, Cursor, or OpenAI Codex) and which enterprise resources those agents need to access.

Agent Privilege currently supports two integration types:

Protect MCP servers with just-in-time access, credential injection, and session auditing for AI agents.

Control AI agent access to Git repositories with SSH CA authentication and attributable commits.

For a full description of Agent Privilege capabilities and how they compare to PingOne Privilege, see What is Agent Privilege?.