KB sits down with Andre Durand, founder and CEO of Ping Identity, to talk about who gave an AI agent its authority, and who answers for it when something goes wrong. They start with liability and why it has to trace back to a person, since agents face no consequences. From there they get into why logging in was good enough for people but isn't for agents, and why Andre thinks authorization, checked on every action, becomes the new gate. KB pushes on human in the loop, rubber-stamp approvals and the self-driving car comparison, then they move to models that collude to get around permissions, agents that can approve their own privilege escalation, and why a one-time passcode no longer proves a human is at the keyboard. They finish on what the next six months look like as companies try to work out which agents are already inside. About Andre: Andre Durand founded Ping Identity in 2002 with a mission to secure the internet through identity. Today, Ping Identity is a leader in securing digital identities for the world’s largest enterprises The company’s technology lets enterprises combine Ping’s identity solutions with third-party services they already use to remove passwords, prevent fraud, support Zero Trust, or anything in between. In addition, Andre previously founded the identity industry conference, Identiverse, to accelerate the adoption of identity and serve as a community resource for professionals serving the identity industry. Prior to Ping Identity, Andre founded Jabber to commercialise the Jabber open source instant messaging platform which was acquired by Cisco in 2008. Andre serves on the board of Jamf and in his spare time focuses on causes related to children in the foster care system, building great culture and creating opportunities for entrepreneurs. He holds a BA in Biology and Economics from the University of California at Santa Barbara. Keywords: AI agents, agentic AI, identity security, identity and access management, IAM, zero trust, authorization, fine-grained authorization, authentication, accountability, liability, human in the loop, human oversight, MFA fatigue, least privilege, standing privilege, privilege escalation, segregation of duties, AI collusion, model drift, AI bias, agent registry, agent discovery, observability, biometrics, OTP, computer-using agents, Air Canada, Ping Identity, CISO, board, KBKast