Human onboarding and offboarding processes are well-established for managing employee access. However, AI agents now operate within these same systems, performing critical tasks without formal onboarding or accountability. JumpCloud research indicates that non-human identities increasingly outnumber human users, highlighting a significant governance gap. To address this, a four-stage framework for securing these identities is proposed.Stage one emphasizes discovering all agents operating within an organization's environment. This involves creating an ongoing inventory of agents across various platforms, detailing their access, workflows, and triggers. Stage two focuses on registering every agent as a formal identity with a named human owner. This allows for assigning entitlements, implementing conditional access, and conducting access reviews, effectively preventing "zombie agents."Stage three advocates for managing agent access based on the principle of least privilege and avoiding standing credentials. Access should be time-bound, revocable, and ideally just-in-time, with credential shielding for sensitive operations. The final stage, continuous governance, ensures that agent behavior is constantly monitored and aligned with authorized actions. This includes regular access reviews, anomaly detection, and maintaining audit trails for accountability.Underpinning these stages is the need for a unified IT environment. Fragmented systems hinder the consistent application of policies across humans, devices, and agents. JumpCloud's Agentic IAM approach posits that a single, coherent control layer is essential for scaling AI adoption safely. By governing all identities consistently, organizations can reduce risk and confidently expand AI into more workflows.