PingOne Privilege

Configuring Agent Privilege

This section describes how to configure Agent Privilege in the PingOne Privilege admin console. Agent Privilege secures the interactions between AI agents and the enterprise services they reach, through just-in-time access controls, approval automation, and session auditing.

Configurations for agentic access

Complete these configurations in order to put Agent Privilege in the traffic path between AI agents and your enterprise resources:

  1. Deploy the AI Gateway: The AI Gateway is the gateway that fronts your agentic apps, LLM providers, and peer agents. The MCP Gateway and LLM Gateway functionality is delivered through it during agent registry.

  2. Configure agentic apps: Configure the applications your agents reach, such as MCP Server, MCP Aggregate, OpenAPI MCP, and Remote Agent, each associated with the AI Gateway through its Mesh Cluster. You can also register prebuilt integrations from the MCP Catalog.

  3. Register agents: Register each agent, select its access scopes, and configure its model, tool, and peer access. Enable AI Guard in the wizard’s runtime protection step.

configuration for MFA

For organizations already using PingID for MFA, you can require PingID MFA for PingOne Privilege app connections.