Daily CSR

Identity security provider Silverfort has announced a new integration that brings advanced identity protection capabilities to AI agents built within Microsoft Copilot Studio. The integration enables real-time identity security enforcement, allowing organizations to apply intelligent access controls exactly when an AI agent attempts to perform an action. Unauthorized requests can be blocked before execution, helping prevent security incidents before they occur.

AI agents developed through Copilot Studio are capable of authenticating users, accessing enterprise data, initiating workflows, and interacting with systems across both cloud and on-premises environments. Since these activities are linked to human users with varying permission levels as well as multiple machine identities, they create complex authentication and authorization chains that can introduce security risks, including privilege escalation.

According to Microsoft, more than 80% of Fortune 500 organizations are actively deploying AI agents created using low-code or no-code development platforms. Additionally, nearly 29% of employees are already utilizing unsanctioned AI agents in their daily work. While business teams increasingly adopt AI solutions through platforms such as Copilot Studio, responsibility for managing associated security risks remains with identity and security leaders.

Ron Rasin, Chief Strategy Officer at Silverfort, emphasized that identity lies at the heart of AI security. He noted that AI agents become more capable as their access to enterprise resources expands, but without comprehensive identity intelligence, organizations cannot accurately determine whether an agent’s actions are legitimate or excessive. He added that Silverfort’s integration with Microsoft Copilot Studio highlights the importance of runtime identity enforcement as a critical requirement for secure AI deployment.

Real-Time Access Control at Runtime
Silverfort integrates directly with the Copilot Studio environment to provide access decisions in real time. Whenever an AI agent requests permission to use a tool, application, or function, Silverfort evaluates the request and issues an authorization decision before the action is carried out. This proactive approach helps organizations prevent unauthorized access, privilege misuse, and unintended actions before they impact business operations.

Key capabilities of Silverfort’s runtime enforcement include:

Preventing AI agents from obtaining permissions beyond their authorized scope.
Blocking suspicious or abnormal access attempts before execution.
Adjusting access policies dynamically based on current risk levels and contextual information.
Maintaining comprehensive audit records that link all activities to enterprise identity governance systems and the human user behind the agent.

Ankur Arora, Principal Group Product Manager at Microsoft, stated that the integration extends security controls directly to the point of access. Rather than providing visibility after an action has occurred, the solution evaluates and governs every access request in real time before execution.

Unified Security Across Diverse AI Ecosystems
Most enterprises operate multiple AI platforms rather than relying on a single agent framework. As a result, organizations often manage AI agents built with Copilot Studio alongside internally developed and third-party solutions, creating fragmented security oversight.

Silverfort addresses this challenge by providing centralized visibility and identity-based controls across:

AI agents created in Microsoft Copilot Studio
Human user identities
Non-human identities, including service accounts and machine accounts
External and third-party AI agents operating beyond the Microsoft ecosystem

Advancing Enterprise AI Security
The Copilot Studio integration aligns with Silverfort’s broader vision of establishing identity as the primary security control layer for AI-driven enterprises. As a long-term Microsoft collaborator and former Microsoft Partner of the Year, the company continues to expand its capabilities for securing hybrid and cloud environments. Silverfort is also working closely with Microsoft on the development of additional AI-focused security innovations.

As organizations transition from AI experimentation to large-scale operational deployment, identity management is becoming the critical mechanism that governs what AI agents are permitted to do. Silverfort supports this shift by delivering identity-based enforcement at enterprise scale, processing more than 10 billion authentication events every day across over 1,000 organizations worldwide, including several Fortune 50 enterprises.

The company is also investing in AI security research, focusing on areas such as prompt injection detection and jailbreak prevention through recursive language modeling (RLM) and related technologies. By combining deep integration with Microsoft platforms, extensive identity telemetry, and ongoing AI security innovation, Silverfort aims to establish identity security as a cornerstone of the modern agentic enterprise.

Click here to know more.

Achieving Frontier-Level Performance Through Intelligent Orchestration

Introducing a New Control Layer for AI Applications

Availability

Media Contact