Zscaler urges scalable workload identity, mutual TLS at RSAC 2026

AI agent workloads are getting more complex, and securing their authentication across mixed environments is a growing priority for organisations. The article notes that many workloads operate with non-human identities and rely on static credentials or IP-based mapping, which Rosomakho calls a significant problem that can cause major damage if left unaddressed.

It highlights approaches such as mutual TLS, workload identity tokens, and remote attestation, and points to Kubernetes Service Accounts as a way to give workloads dynamic, short-term identities that can authenticate safely. The piece also mentions standards like Secure Production Identity Framework for Everyone (SPIFFE) and the Workload Identity in Multi-System Environments (WIMSE) group as avenues organisations might explore, alongside broader SAML options.

Researchers from Zscaler, including CISO Sam Curry and chief scientist Yaroslav Rosomakho, discuss how authentication methods must scale across modern environments and emphasise the need for a more advanced schema for authentication and authorization. The RSAC 2026 Conference session on authenticating workloads and the dates for RSAC 2026 (23–26 March 2026) are noted, underscoring the event’s focus on zero-trust and workload security.