IBM Bets on Vault’s Installed Base to Secure AI Agent Identity

Analyst(s): Fernando Montenegro
Publication Date: October 28, 2026

IBM paired its new Agent Identity with HashiCorp Vault and watsonx Orchestrate at TechXchange 2026, giving AI agents owners, short-lived credentials, and cross-platform discovery. The credential layer is a practical strength, while runtime authorization remains the harder problem for the whole category.

What Is Covered in This Article:

• The News: IBM Agent Identity and Vault 2.2 are generally available, while watsonx Orchestrate’s Discover and Contain capabilities are in tech preview.
• Vault as the Starting Point: IBM is extending a secrets manager many enterprises already run, though its spending momentum sits more with platform teams than with security buyers.
• Credential Brokering: Vault bridges enterprise systems that cannot accept delegated tokens, as buyers piece together agent controls (29% cite just-in-time entitlements for agents among their top three).
• Authorization Remains Hard: Registration and…