New: Aembit + CrowdStrike Bring AI Agent Access Control & Content Inspection Together →
Get an Aembit Tenant
TALK TO AN ENGINEER
Blog

Category: Best Practices

Graphic comparing impersonation vs. delegation, with human and AI agent identity cards representing different ways an actor can access resources on behalf of a user.

Impersonation vs. Delegation: Getting On-Behalf-Of Tokens Right

When one identity acts for another, the token model determines what downstream systems can actually see, trust, and audit.
Víctor Jiménez
Víctor Jiménez
Sep 2026
|
7 min read
OpenAI, Claude, Gemini, Microsoft Copilot, and Meta AI logos displayed in a conference room overlooking a city skyline.

The OWASP Top 10 for LLM Applications (2026): What Changed and Why It Matters

The latest rankings show which risks become more pressing when a model can do more than generate an answer.
Dan Kaplan
Dan Kaplan
Sep 2026
|
9 min read
OAuth vs OIDC

OAuth vs. OIDC: What’s the Difference and When Should You Use Each?

OAuth 2.0 and OIDC solve fundamentally different problems.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
6 min read
Vault door

What Is Privileged Access Management (PAM)?

PAM is an intensifying interest for DevOps teams trying to bring the right set of access controls to bear on their infrastructure.
Apurva Davé
Apurva Davé
Sep 2026
|
9 min read
AI and human face eye to eye.

A Guide to Agentic Identity and IAM

AI agents are changing how identity and access work but most teams are unprepared.
Dan Kaplan
Dan Kaplan
Aug 2026
|
5 min read
secrets-management-in-the-cloud

A Guide to Secrets Management: Frameworks and Best Practices

This guide covers the essential best practices for securing your organization’s secrets in cloud environments.
Ashur Kanoon
Ashur Kanoon
Aug 2026
|
6 min read
Minimal 3D illustration of a three-legged OAuth flow connecting a user, client application, and authorization server

3-Legged OAuth (3LO) Explained: How the OAuth Flow Works

Learn how 3-legged OAuth works by building a GitHub OAuth flow and tracing authorization, consent, codes, tokens, and state.
Víctor Jiménez
Víctor Jiménez
Aug 2026
|
11 min read
Top Risks of Using AI Agent Identities

Top Risks of Using AI Agent Identities

AI agents need identity controls, scoped access, and runtime enforcement before they are trusted with production systems.
Aembit Engineering
Aembit Engineering
Aug 2026
|
8 min read
What Is OAuth? A Guide to Tokens, Scopes, and AI Agent Access

What Is OAuth? A Guide to Tokens, Scopes, and AI Agent Access

As AI agents begin calling tools and APIs, OAuth moves from background plumbing to a core access-control question.
Aembit Engineering
Aembit Engineering
Jul 2026
|
8 min read
Secure Agentic Access: Authentication and Authorization for AI Agent Workloads

Secure Agentic Access: Authentication and Authorization for AI Agent Workloads

AI agents need more than working credentials. They need verifiable identity, task-scoped access, and clear attribution.
Ashur Kanoon
Ashur Kanoon
Jul 2026
|
8 min read
Load More