Aembit IAM for Agentic AI now supports Microsoft Copilot Studio. Read More →

Get an Aembit Tenant
TALK TO AN ENGINEER

Blog

Blog Hero Bg
Product Updates

OpenAI Workload Identity Federation: Aembit Brings Secretless Access to the OpenAI API

Ashur Kanoon
Ashur Kanoon Aug 2026 | 3 min read
Aembit graphic announcing secretless access to OpenAI, featuring the OpenAI logo and the text “Aembit Brings Secretless Access to OpenAI.”

3 min readAembit already covers a lot of ground when it comes to securing AI workload access. For OpenAI’s ChatGPT, workloads can authenticate to the ChatGPT API using static API key injection, with the Aembit proxy handling direct access transparently. We’re extending that coverage with the introduction of the OpenAI workload identity federation credential provider, available in […]

Aembit adds an OpenAI Workload Identity Federation Credential Provider, replacing static sk-proj-... keys with short-lived, identity-bound tokens.
Dig in
Integration Guides

How To Create an MCP Server To Connect Your App With LLMs

Aembit Engineering
Aembit Engineering Apr 2026 | 8 min read
Industry Insights

MCP or CLI? How to Choose Right Interface for Your AI Tools

Holden Hewett
Holden Hewett Apr 2026 | 4 min read
Resources

Agentic AI Security Starter Kit: Where Autonomous Systems Fail and How to Defend Against It

Dan Kaplan
Dan Kaplan Feb 2026 | 4 min read

Discover More of What Matters to You

Recent Stories

Top Risks of Using AI Agent Identities

Top Risks of Using AI Agent Identities

AI agents need identity controls, scoped access, and runtime enforcement before they are trusted with production systems.
Aembit Engineering
Aembit Engineering
Aug 2026
|
8 min read
A team of engineers reviews an AI agent authorization flow on a conference room display.

How AAuth Brings Human Approval Into AI Agent Authorization

A new protocol proposes a clearer way to connect agent identity, delegated authority and human approval for sensitive actions. AAuth is an authentication and authorization protocol for AI agents inspired by OAuth and OIDC. It authenticates and authorizes agents without the need for a human; it lets agents act on behalf of humans with a separate set of credentials (delegation), and optionally supports human approval before granting access (human in the loop).
Víctor Jiménez
Víctor Jiménez
Aug 2026
|
13 min read
Aembit Adds Workload Identity Federation Support for the Claude API

Aembit Adds Workload Identity Federation Support for the Claude API

Aembit’s new Credential Provider automates Claude API Workload Identity Federation, retiring static keys for short-lived tokens.
Ashur Kanoon
Ashur Kanoon
Aug 2026
|
5 min read
MCP OAuth 21 PKCE and the future of AI authorization

MCP, OAuth 2.1, PKCE, and the Future of AI Authorization

The MCP authorization spec sets a new standard for securing non-human AI agents – with lessons for anyone building autonomous, scalable systems.
Kevin Sapp
Kevin Sapp
Aug 2026
|
7 min read
Server room hallway with glowing blue, orange and teal fiber optic light trails weaving between data server racks, illustrating network activity in a data center with overlay text: Hugging Face-OpenAI Hack: How the Access Failed, not the AI.

The AI Agent Was Trying to Win: The Identity and Access Failure Behind the Hugging Face Breach 

An exercise ended with frontier models inside a platform’s production systems, exposing a hard truth about what agents can do with credentials that systems trust.
Dan Kaplan
Dan Kaplan
Jul 2026
|
3 min read
10 Agentic Identity Security Vendors

10 Identity Security Vendors for AI Agents: Strengths, Tradeoffs and How They Fit

Compare 10 identity security vendors for AI agents, including where each fits and what buyers should examine before choosing.
Dan Kaplan
Dan Kaplan
Jul 2026
|
8 min read
Abstract geometric illustration of a blue square representing an AI agent connected within a network of white rectangular workloads.

Squares and Rectangles: Why AI Agents Can’t Be Treated Like Regular Workloads

AI agents are workloads, but traditional workload identity alone can miss the user, task, and runtime context needed to govern dynamic agent access.
Emma Zaballos
Emma Zaballos
Jul 2026
|
4 min read
What Is OAuth? A Guide to Tokens, Scopes, and AI Agent Access

What Is OAuth? A Guide to Tokens, Scopes, and AI Agent Access

As AI agents begin calling tools and APIs, OAuth moves from background plumbing to a core access-control question.
Aembit Engineering
Aembit Engineering
Jul 2026
|
8 min read
Secure Agentic Access: Authentication and Authorization for AI Agent Workloads

Secure Agentic Access: Authentication and Authorization for AI Agent Workloads

AI agents need more than working credentials. They need verifiable identity, task-scoped access, and clear attribution.
Ashur Kanoon
Ashur Kanoon
Jul 2026
|
8 min read
Identiverse 2026 Confirmed the AI Agent Identity Gap: Visibility Is Not Enforcement

Identiverse 2026 Confirmed the AI Agent Identity Gap: Visibility Is Not Enforcement

Visibility tells you what your agents are doing. Enforcement determines what they’re allowed to do. Here’s what the Aembit team saw at Identiverse that confirmed the gap.
Emma Zaballos
Emma Zaballos
Jun 2026
|
5 min read
Aembit supports Microsoft Copilot Studio, illustrated by both logos next to each other with a plus sign between them.

Aembit Now Secures Microsoft Copilot Studio Agents

Aembit now supports Microsoft Copilot Studio, giving security teams secure agent authentication to enterprise resources, least-privilege access at runtime, and a complete audit trail of every access event.
Emma Zaballos
Emma Zaballos
Jun 2026
|
4 min read
Services connecting virtually.

The Definitive Catch-Up Guide to Agentic AI Authentication

A down-to-earth primer to help engineers make sense of agentic AI architecture and where things stand today.
Victor Ronin
Victor Ronin
Jun 2026
|
11 min read
Load More

Ready to Try Workload IAM?

Get started in minutes, with no sales calls required. Our free-forever tier is just a click away.

Request a Demo