Workday said Monday at Workday Rising in Las Vegas that it has signed a definitive agreement to acquire C1.ai, the identity governance platform that was built and funded as ConductorOne. Workday’s 8-K says the agreement was signed Oct 12 and covers all of ConductorOne, Inc.’s outstanding stock. Price: Undisclosed. Closing is expected in Workday’s fiscal Q4, which ends Jan 31, 2027, subject to customary conditions (Workday press release, 8-K).
What C1 does. C1 connects to the apps a company runs on, including email, CRM, code repos, finance systems and cloud infrastructure, and grants, reviews and removes access for employees and AI agents. Its pitch is just-in-time access, scoped permissions, human approval steps and a log of every action. C1 raised a $79M Series B in October 2025 led by Greycroft, with Accel, Felicis and CrowdStrike Falcon Fund, bringing total funding past $100M (ConductorOne via Business Wire).
Why Workday wants it. Every hire, role change and exit already starts as a Workday event. Today an IGA tool reads that HR record and then pushes access changes downstream. Workday is collapsing those two steps into one vendor. It also says C1 will sit on top of its Agent System of Record, so an agent registered in Workday gets scoped access when it starts work and loses it when the job ends.
Who it squeezes. Standalone identity governance vendors such as SailPoint, Saviynt and Okta Identity Governance have always depended on HR feeds as their source of truth. Workday now has its own answer sitting right next to that feed. Expect a bundle offer for Workday shops at renewal.
What to do this week. If C1 is in your stack, get it in writing that connectors for non-Workday HR systems and the roadmap will continue after close. If your Workday tenant feeds another IGA tool, list every agent and service account that tool can’t see today. That gap is exactly what Workday will pitch to fill.
The read. It’s signed but not closed, and the price is Undisclosed. Still, this is the first time the HR system of record has bought its way into access enforcement. The fight over who governs AI agents is no longer only an identity-vendor fight.