Fast Company names Aembit a Best Workplace for Innovators. Learn More →

TRY AEMBIT

Blog

Best Practices

Configuring an MCP Server with Auth0 as the Authorization Server

Victor Ronin Sep 2025 | 4 min read

4 min readA practical walkthrough of the Auth0 settings and tweaks you’ll need to get an MCP server working smoothly with real-world clients like Claude.

Say goodbye to long-lived personal access tokens as you replace them with ephemeral, policy-driven credentials and automated service account management.
Dig in
Best Practices

The Story Behind Snowflake’s Push to Rein in Non-Human Identities

Dan Kaplan Jul 2025 | 4 min read
Industry Insights

Replacing a GitHub Personal Access Token With a GitHub Application

Jason Kwon Jun 2025 | 5 min read
Best Practices

MCP, OAuth 2.1, PKCE, and the Future of AI Authorization

Kevin Sapp May 2025 | 7 min read

Discover More of What Matters to You

Recent Stories

Why Hybrid Windows Security Fails

Why Hybrid Windows Environments are Still a Security Blind Spot

Most enterprises struggle with hybrid Windows security gaps. Discover workload identity federation and conditional access to eliminate blind spots.
Ashur Kanoon
Sep 2025
|
5 min read
Are you suffering from credentialitis with doctor asking.

We’ve Identified a New IT Ailment. It’s Called Credentialitis – And It’s Spreading Fast

Recent flaws in Conjur and Vault highlight the risks of concentrating trust in a single repository – and why workload IAM may offer a more resilient path forward.
Dan Kaplan
Sep 2025
|
2 min read
Cloud Posture Tools Miss This Critical IAM Risk (Attackers Don't)

Cloud Posture Tools Don’t Catch This IAM Risk (But Attackers Will)

CSPM platforms excel at configuration analysis but miss dynamic credential lifecycle risks in workload identities. Learn how attackers exploit this blind spot.
Ashur Kanoon
Sep 2025
|
4 min read
Securing AI Agents and LLM Workflows Without Secrets

Securing AI Agents and LLM Workflows Without Secrets

Learn why static API keys put AI agents at risk and how workload identity and dynamic credentialing eliminate secrets, stop prompt injection attacks, and future-proof LLM security.
Ashur Kanoon
Sep 2025
|
10 min read
Announcing Aembit's integration with Splunk.

Enhancing Splunk Support for Workloads

Say goodbye to long-lived personal access tokens as you replace them with ephemeral, policy-driven credentials and automated service account management.
Ashur Kanoon
Sep 2025
|
2 min read
Businessperson interacting with CRM data.

When Salesforce Becomes a De Facto Credential Repository: Lessons from the Drift OAuth Breach

Recent flaws in Conjur and Vault highlight the risks of concentrating trust in a single repository – and why workload IAM may offer a more resilient path forward.
Dan Kaplan
Aug 2025
|
3 min read
a-new-class-of-identity-risk

How AI Agents Are Creating a New Class of Identity Risk

AI agents require broad API access across multiple domains simultaneously—LLM providers, enterprise APIs, cloud services, and data stores—creating identity management complexity that traditional workload security never anticipated.
Apurva Davé
Aug 2025
|
5 min read
Announcing GitLab CLM.

Aembit Introduces GitLab Credential Lifecycle Management and GitLab Component

Say goodbye to long-lived personal access tokens as you replace them with ephemeral, policy-driven credentials and automated service account management.
Ashur Kanoon
Aug 2025
|
7 min read
Workload identity vs. workload access management

Workload Identity vs. Workload Access Management: Securing Cloud-Native Workloads in a Dynamic Environment

Understanding the distinction is essential for implementing Zero Trust.
Dan Kaplan
Aug 2025
|
5 min read
Dynamic Authorization vs. Static Secrets

Dynamic Authorization vs. Static Secrets: Rethinking Cloud Access Controls

Learn why static secrets fail in modern environments and how to implement dynamic authorization.
Dan Kaplan
Aug 2025
|
6 min read
Vault with a warning sign superimposed.

Vault Fault: Secrets Managers and the Limits of Centralized Trust

Recent flaws in Conjur and Vault highlight the risks of concentrating trust in a single repository – and why workload IAM may offer a more resilient path forward.
Dan Kaplan
Aug 2025
|
3 min read
What Identity Federation Means for Workloads

What Identity Federation Means for Workloads in Cloud-Native Environments

Learn how federation works for non-human identities, where legacy models fall short, and how to implement a secure, scalable solution.
Dan Kaplan
Aug 2025
|
7 min read
Load More

Ready to Try Workload IAM?

Get started in minutes, with no sales calls required. Our free- forever tier is just a click away.

Request a Demo