NHI
A term used in the IAM domain to denote all digital identities that do not correspond to real human users. NHIs include service accounts, API keys, OAuth clients, machine certificates, and similar entities. Governing NHIs has become a critical security challenge in the era of AI agents operating at scale.
Timeline (last 90 days)
Non-human identity (NHI) refers to identity entities such as service accounts, bots, API keys and workload identities that do not represent a specific natural person but access resources programmatically.
Non-Human Identities (NHI) encompass service accounts, API keys, OAuth clients, machine certificates, and other identity credentials that do not belong to real human users.
Lifecycle management processes designed for long-lived service accounts largely break down in agentic scenarios, because agents may exist for only minutes and dynamically combine multiple credentials.
All Facts (3)
Non-human identity (NHI) refers to identity entities such as service accounts, bots, API keys and workload identities that do not represent a specific natural person but access resources programmatically.
50%UnverifiedNon-Human Identities (NHI) encompass service accounts, API keys, OAuth clients, machine certificates, and other identity credentials that do not belong to real human users.
50%UnverifiedLifecycle management processes designed for long-lived service accounts largely break down in agentic scenarios, because agents may exist for only minutes and dynamically combine multiple credentials.
50%