# SAML SSO, Multi-Workspace and Audit Logs: Running AI Agents in Regulated Teams > For most teams, the first question about an AI agent is whether it does the job well. **URL:** https://caywork.com/learn/blog/saml-sso-multi-workspace-and-audit-logs **Published:** 2026-10-14 ## Content For most teams, the first question about an AI agent is whether it does the job well. For regulated teams in healthcare, financial services, legal, and the public sector, that question comes second. Before an agent touches patient records, client portfolios, or case files, someone has to answer three harder questions: who is allowed to use it, which data it can see, and how you will prove what it did afterward. Those questions map to three platform controls, SAML single sign-on, multi-workspace separation, and audit logs. [Okta](https://www.okta.com/newsroom/articles/businesses-at-work-2026/) reports that 91% of organizations now use AI agents, yet only 10% have a well-developed strategy to manage them. This guide explains each control in plain terms, shows how they connect to common compliance frameworks, and ends with a buyer's checklist you can use with any AI agent platform. ## Why Regulated Teams Need More Than a Good AI Agent An agent that produces excellent output can still fail an audit. Regulated teams are judged not only on results but on whether they can show who had access, where data went, and what happened at each step. That is a platform question rather than an agent question, which is why the controls around the agent matter as much as the agent itself. | Control | What it answers | Where it matters most | |---------|-----------------|----------------------| | **SAML SSO** | Who is allowed to run and build agents? | Access control, offboarding, credential risk | | **Multi-workspace** | Which data and agents belong together? | Data separation, client and department boundaries | | **Audit logs** | What did each agent do, and when? | Investigations, audits, regulatory evidence | ### Agents Act With Real Access, So Identity Comes First Unlike a chatbot that only answers questions, an AI agent can read files, call tools, send messages, and update records. Every one of those actions happens under some identity, and if that identity is shared, unclear, or never revoked, accountability disappears. The [OWASP](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026) Top 10 for Agentic Applications for 2026 lists identity and privilege abuse among the most critical risks for agent systems. For regulated teams, getting identity right is the foundation for every other control. ### The Visibility Gap Between Human and Agent Activity Many organizations already struggle to tell what their agents are doing. A survey by the [Cloud Security Alliance](https://securityboulevard.com/2026/03/csa-and-aembit-survey-68-of-organizations-cant-distinguish-ai-agent-actions-from-human-activity/), commissioned by Aembit, found that 68% of organizations cannot clearly distinguish between human and AI agent activity. In a separate study, [C1](https://www.c1.ai/news/press-release/future-of-identity-security-2026) found that only 22% of organizations have full visibility into their non-human identities. When agent actions blend into human activity, investigations slow down and audit evidence becomes unreliable. ### What Regulators and Auditors Expect to See Auditors rarely ask whether an AI tool is clever. They ask for evidence: a list of who had access and when, proof that access was removed when people left, a record of what systems did with sensitive data, and a policy explaining how decisions were reviewed. [IBM](https://newsroom.ibm.com/2025-07-30-ibm-report-13-of-organizations-reported-breaches-of-ai-models-or-applications,-97-of-which-reported-lacking-proper-ai-access-controls) found that 97% of organizations that suffered an AI-related breach lacked proper AI access controls. SSO, workspace separation, and audit logs are the controls that turn those expectations into evidence you can actually produce. ## SAML SSO: Controlling Who Can Run and Build Agents Single sign-on lets people log in to an AI agent platform with the same corporate identity they use everywhere else. SAML, or Security Assertion Markup Language, is the most common enterprise standard for passing that identity between your identity provider and the platform. For regulated teams, SSO is usually the first control security reviewers check. ### How SAML SSO Works in an AI Agent Platform With SAML SSO, the platform does not store its own passwords for your staff. Instead, your identity provider confirms who the person is, applies your existing policies such as multi-factor authentication, and passes a signed assertion to the platform. Access to agents, workspaces, and settings then follows from that verified identity. The practical benefit is that one central system decides who gets in, rather than dozens of separate logins. ### Why Shared Logins and Shared Service Accounts Break Compliance Shared logins and shared service accounts are common shortcuts, and they quietly erase accountability. The [Cloud Security Alliance](https://securityboulevard.com/2026/03/csa-and-aembit-survey-68-of-organizations-cant-distinguish-ai-agent-actions-from-human-activity/) survey found that 43% of organizations rely on shared service accounts for AI agents, and 31% let agents operate under human user identities. Credentials are also a favorite target: [Verizon](https://www.verizon.com/business/resources/articles/credential-stuffing-attacks-2025-dbir-research/) reports that compromised credentials were an initial access vector in 22% of breaches in its 2025 Data Breach Investigations Report. Individual SSO identities make it possible to tie each action to a specific person and to cut off access cleanly. ### Offboarding: The Control Most Teams Forget The real test of SSO comes when someone leaves the organization or changes roles. With SSO in place, disabling the person in your identity provider removes their access to the agent platform at the same time as every other system. Without it, a former employee can keep a working login to a tool that still runs agents against business data. For regulated teams, timely offboarding is often an explicit audit item, not a nice-to-have. ## Multi-Workspace: Separating Teams, Clients, and Data SSO answers who can get in, but it does not decide what each person can see once they are inside. Workspaces add that second layer by grouping agents, chats, files, and settings into separate spaces. For regulated teams, workspace boundaries are how you keep one team's or one client's data away from another's. ### What Workspace Isolation Should Actually Separate A useful workspace separates more than a folder name. At a minimum, it should keep conversations, agents, uploaded files, knowledge sources, and settings apart, so that work in one space cannot accidentally draw on data from another. Ask vendors exactly which objects are workspace-scoped and which are shared across the account. The answer determines whether a workspace is a real boundary or just a label. ### Workspaces for Departments, Projects, and Client Work Common patterns include one workspace per department, such as finance, HR, and legal, or one workspace per client or matter for agencies and professional services firms. Project-based workspaces work well for time-limited initiatives that should be closed and archived afterward. The right pattern depends on where your confidentiality obligations sit. If a contract or regulation says two sets of data must not mix, they belong in different workspaces. ### Matching Workspace Boundaries to Data Sensitivity Not every workspace needs the same level of control. A marketing workspace that drafts public content carries far less risk than one that processes patient information or transaction data. Sorting workspaces by data sensitivity lets you apply stricter access, review, and retention rules where they matter most. The [NIST](https://www.nist.gov/itl/ai-risk-management-framework) AI Risk Management Framework, with its govern, map, measure, and manage functions, offers a helpful structure for this kind of tiering. ## Audit Logs: Proving What Your Agents Did If SSO controls who gets in and workspaces control what they can reach, audit logs show what actually happened. For regulated teams, logs are the evidence that ties the other two controls together. Without them, you are left asserting that controls worked rather than proving it. ### What a Useful AI Agent Audit Log Records A useful audit log for AI agents records who started each run, which agent and version ran, which workspace it ran in, which tools it called, what data sources it touched, and when it started and finished. It should also capture administrative events such as access changes, new agents, and setting updates. Logs that record only logins miss most of what matters for agents. The goal is to reconstruct any run without guessing. ### Retention, Export, and Review Routines Logs are only useful if they are kept long enough and can be reviewed. Check how long a platform retains records, whether you can export them to your own security tools, and whether exports include enough detail for an auditor. Build a simple routine around them, such as a monthly review of high-risk workspaces and a quarterly access review. The [HHS](https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html) HIPAA Security Rule, for example, requires mechanisms to record and examine activity in systems that hold electronic health information. ### Using Logs to Investigate an Unexpected Agent Action When an agent does something unexpected, such as sending a message no one approved or reading data outside its task, logs are how you find the cause. A good investigation traces the run back to the person who started it, the agent version, the tools it called, and any recent changes to its configuration. That trail tells you whether the problem came from user input, a changed tool, or the agent itself. Without it, the only safe response is to switch the agent off and start over. ## How These Controls Map to Common Compliance Frameworks No single platform feature makes a team compliant, but SSO, workspaces, and logs support the evidence most frameworks ask for. The examples below show how the three controls connect to rules many regulated teams already follow. Always confirm specific obligations with your own compliance or legal team. ### HIPAA and Healthcare Teams The HIPAA Security Rule includes technical safeguards for access control, which limit access to electronic protected health information to authorized persons, and for audit controls, which record and examine system activity. SSO supports the access requirement by tying each user to a managed identity. Workspaces help keep health data in clearly bounded spaces, and logs provide the activity records auditors look for. Healthcare teams should also confirm business associate terms with any vendor that processes protected health information. ### DORA and Financial Services Teams The Digital Operational Resilience Act sets rules for ICT risk management and ICT third-party risk across EU financial entities. According to the [Central Bank of Ireland](https://www.centralbank.ie/regulation/digital-operational-resilience-act-(dora)), DORA has been in application since 17 January 2025. An AI agent platform is an ICT third-party service, so financial teams need to show how access is controlled, how data is separated, and how incidents can be investigated. SSO, workspaces, and logs give that third-party risk assessment concrete answers. ### The EU AI Act and Record-Keeping The [EU AI Act](https://artificialintelligenceact.eu/article/12/) requires high-risk AI systems to allow automatic recording of events over their lifetime, and Article 12 sets out what those logs must support. According to the Act's published timeline, these record-keeping rules apply from 2 December 2027 for high-risk systems listed in Annex III and from 2 August 2028 for those under Annex I. Not every agent will fall into a high-risk category, but teams that build logging habits now will be better prepared. Choosing platforms with strong run records today avoids a rushed migration later. ## A Buyer's Checklist for AI Agent Platforms in Regulated Teams Use the questions below with any AI agent platform before you approve it for regulated work. Ask for answers in writing, and ask for documentation or a demo where possible. A vendor that cannot answer clearly is giving you useful information too. ### Identity and Access Questions - Does the platform support SAML SSO, and with which identity providers? - Can you enforce SSO for all users, or can people still log in with separate passwords? - What happens to access when a user is disabled in your identity provider? - Do agents run under individual user identities or shared accounts, and how are credentials for connected tools stored and managed? ### Separation and Data Handling Questions - Which objects are scoped to a workspace: chats, agents, files, knowledge sources, and settings? - Can data from one workspace ever be used in another? - Is your business data used to train models or shared with third parties? - Where are inputs and outputs processed and stored, and for how long? ### Logging and Evidence Questions - What does the platform record for each agent run and each administrative change? - How long are those records kept, and can they be exported to your own security or compliance tools? - Can you see which tools an agent called and what each run cost? - If something goes wrong, who at the vendor will help you investigate, and how quickly? ## Running Agents in Regulated Teams on the Caywork Platform Caywork is an AI agent platform where teams run agents from an open marketplace, build their own without code, or have custom agents built and managed through [Caywork Enterprise](https://caywork.com/enterprise). Several of the controls in this guide are part of how the platform is built. Here is what Caywork documents today and how to cover the rest. ### Enterprise SSO With SAML Support According to the [Caywork Changelog v22](https://caywork.com/learn/changelog/v22), Caywork integrated enterprise SSO to support SAML and single sign-on configuration, alongside login protections such as password strength warnings and duplicate account detection. For regulated teams, this means access can be tied to the corporate identities you already manage. Identity provider setup and plan availability are best confirmed directly with the Caywork team during onboarding. ### Isolated Workspaces for Separate Projects and Teams Caywork supports multiple isolated workspaces, and the [Caywork Changelog v22](https://caywork.com/learn/changelog/v22) notes that each workspace keeps separate storage for chats, agents, and settings. The [Caywork Changelog v23](https://caywork.com/learn/changelog/v23) adds a workspace switcher, workspace-scoped agent chat paths, and file uploads, along with a knowledge base and an MCP connector library with more than 50 integrations. Teams can use workspaces to separate departments, projects, or client work in line with their confidentiality obligations. ### Per-Run Records and Platform-Managed Credentials Every run on Caywork is settled individually, with a clear breakdown of action costs, the platform fee, and the creator's share, which gives teams a run-level record of agent activity and spend. Models and tools are accessed through the platform, so users do not paste their own API keys into agents and credential handling stays in one managed layer. Teams with formal audit log retention or export requirements should raise them with [Caywork Enterprise](https://caywork.com/enterprise) during scoping, so the setup matches their evidence needs. ### Caywork Enterprise for Managed, Supported Deployments [Caywork Enterprise](https://caywork.com/enterprise) scopes, builds, hosts, and supports custom agents, with a stated commitment never to share or republish your business data. A dedicated team monitors and maintains each agent after launch, and higher tiers include priority or 24/7 support with a dedicated account manager. For regulated teams, that gives one accountable partner for access setup, workspace design, and ongoing changes. | Planning agents for a regulated team? Talk to Caywork Enterprise about SSO, workspaces, and run records before your first deployment. | --- ## Frequently Asked Questions About SSO, Workspaces, and Audit Logs for AI Agents These are the questions regulated teams ask most often when they evaluate an AI agent platform. The answers summarize the guide in short form. For obligations specific to your sector, confirm the details with your compliance or legal team. ### What Is SAML SSO, and Why Does It Matter for AI Agents? SAML SSO lets people sign in to a platform with their corporate identity, verified by your identity provider instead of a separate password. For AI agents, it ties every run and every change to a specific, managed person, and it removes access automatically when someone leaves. That makes accountability and offboarding much easier to prove. ### Is SSO Enough to Make an AI Agent Platform Compliant? No. SSO controls who can get in, but compliance also depends on what people can access once inside, how data is handled, and whether you can prove what happened. Workspace separation, data handling commitments, and activity records are just as important, along with your own policies and review routines. ### What Should an AI Agent Audit Log Include? It should record who started each run, which agent and version ran, in which workspace, which tools it called, what data it touched, and when it started and ended. It should also cover administrative events such as access changes and new agents. Records should be retained long enough for your audits and be exportable for review. ### Does Caywork Support SAML SSO and Multiple Workspaces? Yes. Caywork's changelog documents enterprise SSO with SAML support and isolated workspaces that keep chats, agents, and settings separate. Identity provider setup, plan availability, and any specific logging requirements are best confirmed with [Caywork Enterprise](https://caywork.com/enterprise) during onboarding. ### How Do I Start Running Agents on Caywork in a Regulated Team? Start by mapping your workspaces to your data boundaries and listing your access and evidence requirements. Then contact [Caywork Enterprise](https://caywork.com/enterprise) to scope SSO setup, workspace structure, and any custom agents. Teams that want to explore first can sign up and try marketplace agents on non-sensitive tasks with 50 free credits. ## Final Thoughts Regulated teams do not need to avoid AI agents; they need to run them inside controls they can prove. SAML SSO decides who can get in, workspaces decide what each team can reach, and audit logs show what actually happened, together forming the evidence auditors and regulators expect. A short buyer's checklist turns those controls into questions any vendor should be able to answer. [Caywork](https://caywork.com/) brings these pieces together on one AI agent platform: enterprise SSO with SAML support, isolated workspaces for separate teams and clients, per-run records with platform-managed credentials, and [Caywork Enterprise](https://caywork.com/enterprise) for agents that are built, hosted, and supported for you. If you are planning agents for a regulated team, talk to [Caywork Enterprise](https://caywork.com/enterprise) and map your controls before the first deployment. --- ## References **Okta:** [https://www.okta.com/newsroom/articles/businesses-at-work-2026/](https://www.okta.com/newsroom/articles/businesses-at-work-2026/) **OWASP:** [https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026](https://genai.owasp.org/resource/owasp-top-10-for-agentic-applications-for-2026) **Cloud Security Alliance:** [https://securityboulevard.com/2026/03/csa-and-aembit-survey-68-of-organizations-cant-distinguish-ai-agent-actions-from-human-activity/](https://securityboulevard.com/2026/03/csa-and-aembit-survey-68-of-organizations-cant-distinguish-ai-agent-actions-from-human-activity/) **C1:** [https://www.c1.ai/news/press-release/future-of-identity-security-2026](https://www.c1.ai/news/press-release/future-of-identity-security-2026) **IBM:** [https://newsroom.ibm.com/2025-07-30-ibm-report-13-of-organizations-reported-breaches-of-ai-models-or-applications,-97-of-which-reported-lacking-proper-ai-access-controls](https://newsroom.ibm.com/2025-07-30-ibm-report-13-of-organizations-reported-breaches-of-ai-models-or-applications,-97-of-which-reported-lacking-proper-ai-access-controls) **Verizon:** [https://www.verizon.com/business/resources/articles/credential-stuffing-attacks-2025-dbir-research/](https://www.verizon.com/business/resources/articles/credential-stuffing-attacks-2025-dbir-research/) **NIST:** [https://www.nist.gov/itl/ai-risk-management-framework](https://www.nist.gov/itl/ai-risk-management-framework) **HHS:** [https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html](https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html) **Central Bank of Ireland:** [https://www.centralbank.ie/regulation/digital-operational-resilience-act-(dora)](https://www.centralbank.ie/regulation/digital-operational-resilience-act-(dora)) **EU AI Act:** [https://artificialintelligenceact.eu/article/12/](https://artificialintelligenceact.eu/article/12/) **Caywork:** [https://caywork.com/](https://caywork.com/) **Caywork Changelog v22:** [https://caywork.com/learn/changelog/v22](https://caywork.com/learn/changelog/v22) **Caywork Changelog v23:** [https://caywork.com/learn/changelog/v23](https://caywork.com/learn/changelog/v23) **Caywork Enterprise:** [https://caywork.com/enterprise](https://caywork.com/enterprise)