Agenda

“I Did Not Authorise That”: Designing CIAM for Agentic Commerce

“I Did Not Authorise That”: Designing CIAM for Agentic Commerce

Keynote
Wednesday, November 18, 2026 17:10—17:30
Location: Globe I

Customer AI agents are starting to shop, book, and change accounts on behalf of real people. Some of those people will not understand what their agents did and will dispute it. Shopping agents must carry signed instructions and spending limits to merchants, while agents acting inside existing bank, airline, or telecom systems rely on that business’s customer identity and access management (CIAM) platform to approve, limit, and record the delegation. This session presents a taxonomy of agentic commerce disputes, the evidence that addresses each type of dispute, and who holds it. Drawing on KuppingerCole research into OAuth grant governance and AI agent observability, attendees will leave with CIAM design requirements for portable intent, account delegation consent, agent-bound records, tiered reversibility, and dispute handling.

Matthew Gardiner
Senior Analyst
KuppingerCole Analysts
Matthew is a Senior Analyst at KuppingerCole and is focused on cybersecurity and IAM. He has more than 20 years of experience as a product manager and security strategist covering IAM,...
Almost Ready for the CIAM Impact Day 2026?
Reach out to our team with any remaining questions

Research Assistant

Hi, I'm Kuppi, your AI-powered research assistant. Ask me about KuppingerCole Analysts' research, events, or analysts.
As an AI assistant, I can make mistakes. Please verify important information.