SailPoint Entro agent identity review
Correlating agent owners and finding exposed secrets
Agent discovery 8.5 / Per-action policy 4.0 / Agent credentials 5.0
General purpose score 4.88
Where it falls short
- Secret scanning is not delegated credential brokering.
- Claude Code blocking cannot be generalised to all agents or MCP deployments.
Documented strengths
- Agent and NHI records correlate owners with human identities in SailPoint.
- Entro integrations discover AI workflows and map credential use and ownership.
- Governance records and secret-exposure logs document ownership and activity.
Every score, with its reason
Agent identity and ownership 8.5
Agent and NHI records correlate owners with human identities in SailPoint.
Official source / Verified 2026-11-04
Agent discovery 8.5
Entro integrations discover AI workflows and map credential use and ownership.
Official source / Verified 2026-11-04
Per-action policy 4.0
The Claude Code Secret Scanner can block secret exposure. This is not a general runtime policy gateway.
Official source / Verified 2026-11-04
Agent credentials 5.0
Credential monitoring and exposed-secret detection are documented. Ephemeral agent issuance is not verified.
Official source / Verified 2026-11-04
Delegation and on-behalf-of access 2.0
Owner correlation does not establish a delegated access flow; limited contextual credit only.
Official source / Verified 2026-11-04
Audit and lifecycle 8.0
Governance records and secret-exposure logs document ownership and activity.
Official source / Verified 2026-11-04
Human approval 0.0
A pre-action human approval workflow was not verified; no credit awarded.
Official source / Verified 2026-11-04
MCP gateway and tool control 3.0
MCP call scanning is documented for Claude Code, not general MCP authorisation.
Official source / Verified 2026-11-04
Ownership and pricing
Entro acquired by SailPoint; acquisition completed / Ownership source
Quote only / Pricing source