Workday named SailPoint, not its partner Okta, as the rival its AI agents must beat
Workday's sales chief Rob Enslin said C1.ai's competition "will be SailPoint more than Okta," days after SailPoint set November ship dates for the agent-governance layer Workday's agents would displace. The $11.32 billion pure-play just learned it is the target.
Vincent Jiang · 3 min read
The rival gets a name
At a Workday−3.17% — Workday, down 3.17 percent as of its last quote Rising roundtable in Las Vegas on October 16, Rob Enslin, Workday's president and chief commercial officer who decides how the planned C1.ai acquisition goes to market, was asked the question the identity market has been waiting on: would Workday sell identity governance against its decade-old partner Okta−10.32% — Okta, down 10.32 percent today? His answer drew the line. "Our competition will be SailPoint−4.81% — SailPoint, down 4.81 percent as of its last quote more than Okta. Okta does access. C1 is much more around governance." 1
Two days earlier his own CEO had been blunter. "If we turned off access to Okta tomorrow, they'd be out of business," Aneel Bhusri told the executive press Q&A, arguing that identity starts in the HR system Workday owns. 4 Enslin walked that back: customers will likely keep Okta for access and add Workday's C1 for governance side by side. 1 But the competitor he named was not the partner. It was SailPoint.
The stakes on the board
SailPoint, the Austin-based identity security pure-play listed on Nasdaq as SAIL, closed at $19.96 on October 16, a market cap of $11.32 billion and a 52-week range of $10.31 to $23.85, still down 1.3% year to date. 3 The buyer of C1.ai just told that market which company its agents are meant to displace, and it is not the partner whose access layer sits underneath Workday. It is the neutral governance layer that sits above every identity provider.
The layer Workday wants
Ten days before Enslin spoke, SailPoint had claimed exactly the ground Workday now enters. At its Navigate conference, chief technology officer Chandra Gnanasambandam cast SailPoint as a policy decision point that decides in real time whether access should be permitted, even after Okta, Microsoft−1.97% — Microsoft, down 1.97 percent today Entra or Ping has authenticated the user or agent. 2 Workday's counter is its Agent System of Record, which registers every AI agent the way it registers an employee: an ID, rules, access rights, auditability. 1 And its C1.ai announcement says the combined company will become "the identity governance layer for people, money, and agents." 5 Two layers, one budget.
The receipts
SailPoint is not waiting for the fight. Its Agentic Fabric and Entro, a credentials startup bought about 90 days before the briefing, are due to be fully integrated and generally available in November, with a majority of the Navigate capabilities slated for November 1 or year end. 2 One of the world's largest banks has signed as design partner for an automated certification agent targeted for December or January. 2 The business underneath is growing: quarterly revenue of $308.8 million in the quarter ended July 31, 2026, the seventh straight quarter of year-over-year growth above 16%, though the pace has cooled from 33.1% a year earlier. 7
SailPoint's revenue keeps climbing, and now Workday has named it the target
Data
| Quarterly revenue | |
|---|---|
| Q3 '24 | $235.26M |
| Q4 '24 | $240.12M |
| Q1 '25 | $230.47M |
| Q2 '25 | $264.36M |
| Q3 '25 | $281.94M |
| Q4 '25 | $294.65M |
| Q1 '26 | $280.14M |
| Q2 '26 | $308.81M |
Workday's clock is running too. Bhusri said he hopes regulatory clearance for C1.ai "within a month"; the deal terms say the fourth quarter of Workday's fiscal 2027, ending January 31, 2027. 45
The pure-play's card
SailPoint's strongest argument is neutrality: it governs access across whatever systems a company runs, while Workday's C1 governance begins at Workday's edge. Enslin himself split the market that way, expecting customers to buy agents from other vendors outside finance and HR and from Workday inside them. 1 And the pool is deep. SailPoint's own Horizons survey, released at Navigate, found 79% of organizations run AI agents in production while only 2% govern them with identity security tools. 6 A gap that size can fund two winners. What it cannot fund is confusion about who decides.
What to watch
Three dated tests settle this: SailPoint's November 1 general-availability dates 2, the bank certification agent in December or January 2, and the C1.ai close Bhusri expects within a month 4. Then watch next year's identity renewals. Whichever layer a CIO renews, and whichever one gets bundled into a suite bill without a separate line item, is the one that won the budget Enslin and SailPoint's CTO have both just claimed.
Deepdive
AI-generated from this story and its cited sources. Not investment advice.
