Workday bets on agentic identity to govern AI workers and humans
Workday has moved decisively to plant itself at the centre of the emerging agentic enterprise, announcing at its annual Rising conference a definitive agreement to acquire C1.ai, an agentic identity management platform, alongside a raft of autonomous agent products and a partnership with Anthropic. The combined play signals that enterprise software's next battleground is not productivity dashboards but the governance infrastructure that decides what AI agents are permitted to do, on whose behalf, and with what audit trail.
The C1.ai acquisition is the strategic pivot point. Workday says the deal will make it the identity governance layer for people, money, and agents simultaneously, extending access controls from the moment an employee or agent is provisioned to the moment it is decommissioned. That framing is significant: it positions Workday not merely as an HR and finance platform but as a permission fabric stretched across the entire AI-augmented workforce. Terms were not disclosed.
Agentic architecture: from answer engine to action engine
The product announcements flesh out the architectural ambition. Sana, rebranded as the new Workday Home, acts as an orchestration layer: employees submit requests in natural language and Sana routes them to the appropriate autopilot agents operating across hiring, payroll, accounting, compliance, and IT. Separately, Workday has made its platform headless, meaning customers can build and deploy their own AI agents using any model or framework, so long as those agents operate within Workday's permissions, approvals, and audit trail. Agent-Ready Tools, Agent Harness, and a Developer Agent are all now generally available.
Two features are worth isolating for the macro-strategic reader. Workday Intelligence draws on a skills ontology of more than 75,000 terms, used by over 3,450 customers, to help leaders map which tasks AI should automate, which it should augment, and which require human discretion. Decision Intelligence, now available across the portfolio, connects live workforce and financial data to scenario modelling, allowing finance and HR leaders to stress-test trade-offs between headcount strategy and cost before routing conclusions through existing approval chains. Together, they represent an attempt to embed AI-assisted planning into the governed, auditable workflows that CFOs and CHROs actually require.
The governance layer as the new infrastructure play
The Anthropic partnership ties frontier reasoning directly to Workday's business-rules context. Claude's capabilities will surface either within Sana or natively inside the Claude interface, depending on the task, creating a bidirectional integration rather than a simple plug-in. Sana will also extend into Microsoft Copilot and Teams, Google Cloud's Gemini Enterprise, and Slack, meaning Workday's governance logic travels into the collaboration tools employees already use.
This is the convergence angle that matters beyond the HR software sector. The race to govern agentic workforces is attracting capital and strategic manoeuvring across enterprise software (ServiceNow, SAP, Salesforce), cybersecurity (where agent identity intersects with zero-trust architecture), and fintech infrastructure (where automated payroll and accounting agents must satisfy regulatory audit requirements). Workday is effectively arguing that the governance and identity layer is as foundational to the agentic enterprise as the model itself, a bet that mirrors how identity became the perimeter in cloud security over the last decade.
For the cross-sector investor, the read-across is clear. Whoever owns the permissions fabric for AI agents in large enterprises owns a toll position on every autonomous workflow those enterprises run. Whether Workday can defend that position against Microsoft, which already controls the identity layer for most enterprise tenants via Entra, is the critical strategic question the C1.ai acquisition does not yet answer.