Banks and governments piloted reusable, wallet-based credentials to cut repeat KYC, aligned with eIDAS 2.0 and W3C standards.

Industry analysts continued to position identity as the primary security control plane, driving investment in ITDR, ISPM, and governance.

Developer identity vendors began shipping features to issue and verify identities for AI agents and bots, an early sign of agentic identity going mainstream.

Yubico grew its YubiEnterprise subscription for distributing hardware security keys, easing phishing-resistant rollouts at scale.

Okta detailed hardening and a secure-identity initiative following its 2023 support-system breach, including session and admin protections.

Developer-led authorization engines saw rising adoption as teams externalized access decisions from application code.

Okta introduced Identity Threat Protection, using shared signals to detect risk and revoke sessions in real time across the session lifecycle.

Following customer breaches, Snowflake began letting admins enforce MFA and moved toward mandatory multifactor authentication for accounts.

HashiCorp introduced Vault Radar to scan code and systems for unmanaged and leaked secrets, extending its secrets-management footprint.

Microsoft finished renaming Azure Active Directory to Microsoft Entra ID and expanded the Entra family with Internet Access and Private Access.