The Ghost in the Machine: Descope and IDMWORKS Forge Alliance to Secure AI

LOS ALTOS, CA – September 15, 2026 – In the relentless push for corporate automation, a new class of employee is quietly entering the workforce. They are autonomous, tireless, and entirely digital. These AI agents, now being woven into the fabric of enterprise operations, present a governance challenge that makes traditional identity management look quaint. Answering this challenge is the core of a new strategic partnership announced today between identity platform Descope and consultancy giant IDMWORKS, an alliance aimed squarely at defining and securing the future of non-human identity.

The partnership combines Descope's innovative no/low-code identity platform, which has gained traction with over 1,000 organizations including GoFundMe and Databricks, with the formidable implementation power of IDMWORKS, a firm boasting over two decades of experience and more than 2,500 identity and access management (IAM) projects. Together, they intend to accelerate how enterprises manage and secure not just their customers, but the burgeoning population of AI agents acting on their behalf.

Decoding the New Identity Frontier

To grasp the significance of this alliance, one must first understand the terms defining this new battleground: 'agentic identity' and 'MCP servers'. For years, firms have managed machine identities for servers and applications, typically using static, long-lived API keys. This approach is dangerously inadequate for the dynamic, autonomous systems now coming online.

'Agentic identity' refers to the unique, governable identity assigned to an autonomous AI system. Think of it as a digital passport for a software bot that can make decisions, access data, and invoke tools without direct human oversight for every action. Unlike a simple API key, a true agentic identity is ephemeral, strictly scoped, and auditable. It answers the critical questions: Which agent performed this action? On whose authority? What data did it access? And can its privileges be revoked instantly?

This is where Descope has planted its flag, developing what it calls an 'Agentic Identity Hub' to treat these non-human actors as first-class citizens within a security framework. The goal is to move beyond shared, static credentials to a model of rigorous, traceable governance fit for an autonomous workforce.

Complementing this is the rise of Model Context Protocol (MCP) servers. Initially developed by Anthropic and now being adopted by major AI players, MCP provides a standardized way for AI models to connect with external tools and data. An MCP server acts as a secure gateway, defining which resources an AI agent can use. The partnership's focus here is critical; without robust identity controls, these gateways could become catastrophic points of failure. The Descope-IDMWORKS solution aims to ensure that every request to an MCP server is authenticated and authorized against a legitimate agentic identity.

A Symbiotic Alliance for Enterprise Scale

This partnership is a classic case of innovation meeting execution. Descope, recognized on CRN's 2025 Stellar Startups list, brings the agile technology. Its visual, no/low-code workflows promise to slash the time and complexity required to build sophisticated identity journeys. However, for large enterprises with sprawling legacy systems, even the most elegant platform requires deep integration expertise. This is where IDMWORKS enters the picture.

“The partnership with IDMWORKS marks an important step in Descope's mission to simplify and secure customer and agentic identity for enterprises,” said Rishi Bhargava, Co-Founder at Descope. He emphasized that IDMWORKS’ two decades of specialized IAM expertise is key to driving modernization for clients.

For IDMWORKS, the alliance is a forward-looking move to maintain its leadership position. By integrating Descope’s platform, the consultancy can offer clients a ready-made solution for one of their most pressing future challenges. “We’re committed to helping our clients deliver frictionless identity experiences and securely adopt technologies like agentic AI and MCP,” said Paul Bedi, CEO at IDMWORKS. “Descope’s platform provides the identity infrastructure to enhance our CIAM services and help drive our clients towards this reality.”

One industry analyst, speaking on condition of anonymity, described the move as a “win-win that pairs a speedboat with a supertanker's navigation chart.” The analyst noted, “Descope gets immediate access and credibility within the Fortune 500 ecosystem, a notoriously difficult market for startups to crack. IDMWORKS gets to service a high-growth, technically complex need with a best-in-class tool, keeping them relevant and indispensable to their clients.”

From No-Code Agility to Enterprise Reality

While the concept is compelling, the true test will be in execution. The IAM market is crowded, with titans like Okta and Microsoft also turning their attention to AI identity. Microsoft, for instance, is developing its own MCP Server for Enterprise to connect AI agents to its vast Entra ID ecosystem. The differentiation for the Descope-IDMWORKS partnership lies in its blend of dedicated focus and practical delivery.

Descope’s no/low-code platform is its primary weapon, enabling companies to design and adapt identity flows for customers, partners, and AI agents with unprecedented speed. This agility is crucial in the fast-evolving AI landscape. However, the platform's value is magnified by IDMWORKS' ability to translate that agility into a robust, secure, and compliant reality within complex corporate environments. Their teams will provide the end-to-end strategic guidance, implementation, and managed services needed to navigate the politics and pitfalls of enterprise IT projects.

This combination directly addresses a common failure point in digital transformation: the gap between a powerful new tool and the organization's ability to successfully deploy it at scale. By offering a unified front, the partners aim to provide CIOs and CISOs with a clear, de-risked path to modernizing their customer identity (CIAM) infrastructure while simultaneously future-proofing it for the agentic era.

The Bottom Line: De-Risking the AI Revolution

For boards and executive teams, the proliferation of AI is both a massive opportunity and a source of significant, poorly understood risk. Stories of data leakage and unauthorized actions by automated systems are becoming more common. The core value proposition of the Descope-IDMWORKS alliance is its promise to impose order on this chaos.

By establishing a formal framework for managing agentic identities, companies can move from a reactive security posture to a proactive governance model. Every action taken by an AI agent can be logged, audited, and tied back to a specific identity with specific, time-bound permissions. This level of control is not merely a technical requirement; it is a fundamental pillar of corporate governance in the 21st century.

The partnership is more than a simple reseller agreement; it is a strategic response to a market shift. It signals that the management of non-human identities is no longer a niche technical problem but a central business function, as critical to the firm's integrity as managing its human employees. As enterprises deploy thousands of AI agents to interact with customers and manipulate sensitive data, the ability to answer the question “Who—or what—is behind that action?” will be paramount. This alliance is a formidable bet on providing that answer.