Amazon Web Services, HID, JumpCloud and Okta

About HID

HID sells identity solutions that connect billions of people, places and things. HID offers access to physical spaces, networks and services using smart cards, mobile credentials or cloud-based solutions. HID provides biometric technologies to establish, verify and manage identity across diverse industries and applications. HID offers ID card printing through the cloud. HID offers solutions for the security of IT networks, systems and connected devices. HID offers cloud-based PKI for networks, IT systems and IoT devices.^[1][2]

HID Authentication Service is a cloud-based authentication platform designed for identity verification and access control in regulated industries such as healthcare, financial services, government and critical infrastructure. HID Authentication Service supports CIAM use cases through customer enrollment, multi-factor authentication and identity management on a cloud-based platform. HID Authentication Service is designed to integrate with enterprise identity infrastructures, including Microsoft Entra ID, to extend multi-factor authentication across applications and access scenarios. HID Authentication Service supports end-to-end authentication across customer journeys and secure workforce access using a single cloud platform. HID Authentication Service supports mobile-based authentication, passkeys and one-time passwords. Users can enroll in multi-factor authentication through a mobile-based application with HID Approve. HID Authentication Service is available through HID Authentication Sales Team and authorized partners.^[3]

HID Approve is a mobile authentication solution that enables push notification authentication, QR code authentication and one-time password (OTP) generation for consumer and workforce use cases. HID Approve supports push notification authentication with swipe-to-approve, QR code authentication for scan-to-approve workflows and OTP generation, including offline authentication scenarios. HID Approve enables mobile transaction signing by allowing users to approve high-risk actions and transactions on their mobile device. HID Approve can be deployed as a customizable mobile authentication application or integrated into existing applications using an authentication SDK. HID is extending the HID Approve SDK to support Apple Wallet Extension activation flows for banks and card issuers during Apple Pay provisioning. HID Approve is designed to support compliance with authentication regulations such as PSD2 and Open Banking for consumer use cases and EPCS requirements for workforce authentication.^[4]

HID Signo Reader 40 is a founding member of the Signo platform. HID Signo Reader 40 is for door applications requiring wall switch mounting and supports credential technologies in cards, fobs and mobile devices. HID Signo Reader 20 is for door applications requiring a narrow card reader and supports credential technologies in cards, fobs and mobile devices. HID Amico provides facial recognition technology. HID Amico is for mid-sized organizations seeking a contactless reader. HID Amico supports five authentication methods: face, credential (HF/LF), HID Mobile Access and Wallets, QR code and PIN. HID Amico offers an optional Template on Card for storing biometric data.^[1][5][6][7]

HID DigitalPersona 5300 is a FIPS 201/PIV and FBI Mobile ID FAP 30 fingerprint reader. HID DigitalPersona 5300 can be used with any standards-compatible fingerprint template extractor or matcher, including the DigitalPersona FingerJet Biometric Engine. EikonTouch TC510 is a USB capacitive silicon fingerprint reader for high traffic environments such as point-of-sale and multi-user applications. EikonTouch TC510 is designed for use with the DigitalPersona Software Developer Kit (SDK). HID VAL100 Onboard Validator combines barcode and NFC/RFID reading functionality to provide a single point of presentation for tickets and travel passes. HID designed the VAL100 bus ticket validator to integrate with Automatic Fare Collection (AFC) systems. VAL100 is for buses, trams and other public transit modes.^[8][9]

HID Global asset tracking solutions use RFID tags in low frequency, high frequency or UHF for inventory tracking and management. HID offers Bluetooth Low Energy-based Real-Time Location Systems (RTLS) for physical asset tracking. The zone-based approach from HID allows for knowing when a person or asset is in a specific area, with rules set by the customer. HID offers stock and custom RFID tags and readers. HID offers rugged RFID tags that withstand extreme temperatures, high-impact contact, natural elements and UV ray exposure.^[11]

HID offers integrated identity solutions for government agencies. HID offers physical and digital security that includes biometrics, multi-factor authentication and secure credentialing. HID technologies help medical facilities protect sensitive information, track assets and authenticate identities. HID provides secure campus access and digital authentication to K-12 schools and universities. HID provides digital onboarding and instant card issuance to banks and fintechs. HID offers hospitality solutions for hotels and resorts, covering mobile access, RFID tracking and integrated building systems. HID offers rugged solutions with secure access control, real-time personnel tracking and equipment monitoring for onshore and offshore facilities.^{[1][2][3][4][11]}

About JumpCloud

JumpCloud sells a cloud-based directory service that connects user identities to the systems, applications, and networks that need to be accessed.^[7]

JumpCloud says its platform unifies identity, device, and access management across every human, machine, and agent in an organization. JumpCloud says 250,000+ organizations choose JumpCloud as the unified identity platform built for every identity: human, machine, and agent. Pricing packages run from startup to enterprise, and a higher package adds Zero Trust, AI and SaaS management, and premium support.^[2][8][9]

JumpCloud Unified Endpoint Management manages macOS, Windows, Linux, iOS, iPadOS and Android devices. The service brings security, identity, authentication, and remote access and control into a single console. Admins can define and apply similar policies across different operating systems from a central location. Patching and version control use patch scheduling and automation for Windows, macOS, and Linux (Ubuntu), as well as Chrome browsers. MFA can be enforced on devices with push notifications, TOTP tokens, hardware authenticators, or biometrics. Reports can demonstrate compliance with common standards such as SOC 2, HIPAA, and NIST for all devices.^[8][10]

JumpCloud's Apple MDM ensures Apple devices and their users remain secure, with the right permissions and settings, no matter where they operate. Management is offered for company-owned Macs, and company-owned and BYOD iPhones and iPads. JumpCloud integrates directly with an Apple Business Manager or Apple School Manager account. Zero-Touch Enrollment automates onboarding processes like device configurations and automatic software installation. Policies can protect device data with FileVault encryption, protect USB storage, implement firewalls, and secure browsers. JumpCloud Go is a hardware-protected, phishing-resistant passwordless login method.

Windows devices can be enrolled with single-click automated enrollment workflows that save time and eliminate tedious manual processes. Windows device management covers securing, monitoring, and controlling a fleet of Windows devices throughout their entire lifecycle. Policies and configurations are applied and enforced based on the signed-in user's identity, not just the device itself.^[12]

JumpCloud's Cloud LDAP servers are self-supported and maintained. The offering is OpenLDAP RFC 2307-compliant and encrypted by LDAPS and Start TLS, and multi-factor authentication can be required upon entry to LDAP resources. Users connect to their on-premises resources from anywhere with no hardware requirements. Group-based access controls streamline LDAP management, whether from the JumpCloud Admin Portal, via the command line, or through RESTful APIs. JumpCloud provides authentication mechanisms, including MFA, for any application or service that can defer authentication via LDAP.^[13]

JumpCloud is open by design: SCIM, OIDC, SAML, and exportable policy-as-code are part of the platform. Customers running Google Workspace or Microsoft 365 can integrate what they have. Organizations can standardize for SOC 2, HIPAA, GDPR, and the upcoming EU AI Act with built-in controls and audit-ready reporting.^[8]

JumpCloud offers pricing for higher education, K-12 school systems and other educational institutions, special pricing for nonprofits, and exclusive pricing for MSPs and channel partners that join its partner program. JumpCloud also offers professional services to plan, implement, and maintain a JumpCloud instance. JumpCloud has built a global network of edge nodes that operate autonomously from its central infrastructure. If central infrastructure has an outage, customer systems can continue authenticating against these edge servers via LDAP.^{[1][7][9][13]}

About Okta

Okta sells a platform that secures identities, including the AI agents running across a business. Okta has over 20,000 enterprise customers.^[19]

Okta describes AI agents as a new kind of identity. Okta says AI adoption is outpacing controls. Okta names excessive agency, credential sprawl and lack of runtime visibility as the primary security risks of deploying autonomous AI agents, which can allow unmanaged agents to access sensitive enterprise data or execute unauthorized operations.^[19]

Okta describes the threat of autonomous agents granted overly broad permissions that let them read, write or execute destructive actions across enterprise tools beyond their intended operational scope. Okta describes malicious or malformed inputs that manipulate an agent into executing unauthorized API calls or exfiltrating data via third-party integrations. Okta describes the threat of compromising an agent's persistent memory or runtime context to alter its behavioral constraints and bypass safety guardrails. Okta describes enterprise teams spinning up unvetted agents with hardcoded, long-lived API keys. Okta says that without identity, most enterprises are left with gaps such as no inventory of which agents exist, who owns them or what they are authorized to do. Okta says that without identity, most enterprises have no record to produce when an auditor asks who authorized an action.^[19]

Okta says a named owner tied to a human gives accountability. Okta says permissions enforced at runtime give authorization. Okta says logged actions against a verified identity give an audit trail. Okta says runtime detection, access policies and a kill switch all depend on an identity foundation.^[1][19]

Okta for AI Agents extends discovery, lifecycle management and governance to every agent in the enterprise. Okta describes an offering that establishes secure permissions, verifies AI agent identity and audits automated actions. Okta describes tracking each agent, verifying ownership, governing access and shutting down rogue actions in real time. Okta describes verifying the agent, brokering credentials at runtime and logging each tool call without code changes to agents or tools. Okta describes tracing every action, delegating on a user's behalf, or running agents unsupervised, all under one auditable record. Okta describes tools for agentic commerce and for offering B2B agentic experiences at scale.^[19]

Okta's AI agent security stack is built around three capabilities across workforce and customer identity use cases. Okta makes the open Cross App Access standard part of core Okta SSO, giving every Okta customer an identity model for AI agents. Okta describes relationship-based access control (ReBAC) that evaluates and enforces permissions at the individual tool-call level in real time. Okta provides a control plane that spans multi-cloud environments, heterogeneous SaaS platforms and custom developer architectures.^[19]

Okta describes a single, secure ecosystem for an entire business that keeps employees, partners and AI agents connected. Okta describes an offering built for enterprise scale that centralizes business directories, streamlines access and is aimed at meeting global compliance standards. Okta describes authentication designed to protect user data. Okta has joined a cross-industry coalition to help organizations secure AI and govern the agentic stack. Okta has partnered with other organizations to co-author a blueprint that answers four questions about securing AI agents.^{[1][13][17][19]}