On 13 October 2026, at Workday Rising in Las Vegas, Workday announced it had signed a definitive agreement to acquire C1.ai, a leading agentic identity platform. The deal is about one thing: giving every person and every AI agent the right access to enterprise systems, from the day they join to the day they leave.
If that sounds narrow, it is not. Identity governance is the layer that decides who and what can touch your data, systems and money. For the past thirty years, that layer has been designed for humans. C1.ai built it for a combined workforce of people and autonomous agents. Workday just bought the blueprint.
What C1.ai does
C1.ai connects to the systems a business already runs on, from email and CRM to code repositories, finance systems and cloud infrastructure. It then governs access for each person and agent in real time, granting permissions when needed and removing them the moment they are no longer justified.
The problem it solves is already acute. Most organisations manage employee access across hundreds of applications through manual service tickets, spreadsheets and periodic reviews. When a worker joins, moves role or leaves, that access is updated slowly, incompletely, or not at all. The arrival of AI agents has made that problem exponentially worse.
According to C1.ai's research, 95% of large U.S. companies already run autonomous agents. Deloitte's State of AI research shows only 21% of those companies report having mature governance for them. The gap is not a minor compliance gap. It is a structural hole in enterprise security.
Why Workday is the right buyer
Workday describes itself as "the trusted agentic platform for HR, finance and IT." It already governs people, money and, increasingly, agents at the heart of the enterprise. With C1.ai, it becomes the identity governance layer for all three.
Gerrit Kazmaier, president of product and technology at Workday, put it directly: "Today's companies run on a combined workforce of people and AI agents. With C1.ai, we'll help secure that workforce by managing and enforcing exactly who, and what, has access to connected apps and systems."
Alex Bovee, CEO and co-founder of C1.ai, was equally direct: "Enterprises can't secure the AI era using yesterday's IT tickets. Workday is the operational heart of the enterprise, and by bringing C1.ai's identity governance directly into that core, we'll be able to manage access for every human and agent in real time."
The agent identity problem most enterprises have not solved
Not all agents are the same. Some act on behalf of an employee and should only reach a subset of what that person can access. Others operate independently with broader permissions that need close oversight. An agent retired last quarter should not still hold active credentials. Most companies have no mechanism to distinguish between these cases, let alone enforce the distinction.
Workday already offers an Agent System of Record that gives companies one place to see and manage their agents. C1.ai extends that from visibility to control, governing what registered agents can access across Workday and other enterprise systems. An agent receives permissions when its work requires them, and loses them immediately when its role ends.
This sounds like a security feature. It is also a deployment accelerator. The single biggest obstacle to enterprise agent adoption, repeated across every major survey this year, is governance. Companies that cannot govern what their agents access cannot put them into production. By embedding identity governance into the platform that already runs the business, Workday removes that blocker.
What this means for enterprise buyers
For buyers evaluating agentic AI, the Workday-C1.ai deal points to three practical conclusions.
First, identity is now an agentic AI requirement, not a separate concern. If your agent platform does not include granular access control that mirrors your human identity policies, you are building on sand. The days of treating agent permissions as an afterthought are over.
Second, the platforms that win will be those that embed governance into the operational layer, not bolt it on top. Workday's move reflects a pattern repeated across the enterprise stack this year: governance is not a product category; it is a feature of every product category. Buyers should expect their existing enterprise vendors to offer agent identity controls natively, and should treat standalone governance tools as transitional, not permanent.
Third, HR and finance systems are becoming the control plane for agent deployment. Workday governs the events that matter most to access: hiring, role changes, promotions, departures. Those same events now apply to agents. Buyers who treat agent provisioning as an IT project will find themselves out of sync with the systems that actually define organisational structure.
What this means for suppliers
For companies building and selling agentic AI solutions, the acquisition sends two clear signals.
The first is that identity is a competitive moat. Agent platforms that cannot demonstrate granular, enterprise-grade access control will lose to those that can. Procurement teams are already asking for it. RFPs this quarter include identity governance as a scored requirement.
The second is that the major enterprise platforms are not waiting for the agent market to mature before defining the rules. Workday, Salesforce, Google Cloud, SAP and Microsoft are all building or buying identity layers for the agent era. Smaller vendors that lack integration depth with these platforms face a narrowing window.
There is, however, an opportunity for specialists. The mid-market, in particular, is underserved. Companies between two hundred and two thousand employees do not have Workday's scale or security teams. They need affordable, integrated agent identity governance that works with the tools they already use.
The broader context
The Workday-C1.ai announcement arrives in a week already crowded with enterprise agent news. Google launched Gemini 4 Argon for long-running agent tasks. Kyndryl and Toyota Finance announced production agentic AI in IT operations. Four IT monitoring vendors shipped governed agents in forty-eight hours. And Entrust warned that millions of AI agents will soon test the limits of enterprise controls.
The common thread across all of these stories is the same: the agentic AI conversation has moved from capability to control. Enterprises are no longer asking what agents can do. They are asking who gave them permission to do it, how to revoke that permission, and what evidence to collect when things go wrong.
The Agentic Expo angle
Agentic Expo, at Olympia London on 23 to 24 March 2027, is built around a single question: how do enterprises deploy AI agents safely, govern them properly, and measure their impact? The Workday-C1.ai deal confirms that identity governance is not a side conversation. It is the foundation on which every other agentic capability rests.
The buyers who will attend Agentic Expo are not looking for proof-of-concept demos. They are looking for vendors that have solved identity, integration and governance in production. The suppliers that can demonstrate those capabilities, with named customers and specific metrics, will find an audience ready to buy.