New: Aembit + CrowdStrike Bring AI Agent Access Control & Content Inspection Together →
Get an Aembit Tenant
TALK TO AN ENGINEER
Blog

Tag: Authentication

Hands exchanging keys beneath the text “Understanding Token Exchange for AI Agents."

What is Token Exchange, and Why Does AI Need it?

Víctor Jiménez
Víctor Jiménez
Sep 2026
|
8 min read
Two professionals reviewing a secrets management dashboard, with text reading “Ranking the Top Secrets Managers & Alternatives (2026).

Ranking the Top Secrets Management Tools and Alternatives in 2026

Secrets managers still matter. But AI agents and workloads are changing when stored credentials make sense.
Dan Kaplan
Dan Kaplan
Sep 2026
|
5 min read
A swarm of futuristic AI humanoids rushes a glowing security barrier at the entrance to a brightly lit data center, visually representing agents pushing past authorization controls.

Barbarians at the Gate: The Authorization Assumption That Agents Are Tearing Down

Broad credentials made sense when fixed application logic stood between users and actions, but AI agents have changed that equation.
Apurva Davé
Apurva Davé
Sep 2026
|
4 min read
Graphic for Part 5 of Aembit’s MCP 2026-07-28 series, titled “The Agent Interoperability Layer,” with a network diagram of connected components in the background.

MCP as an Application Protocol: The Emerging Agent Interoperability Layer

What began as a way for agents to call tools is expanding into infrastructure for longer-running, governed interactions across enterprise systems.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
5 min read
Graphic comparing impersonation vs. delegation, with human and AI agent identity cards representing different ways an actor can access resources on behalf of a user.

Impersonation vs. Delegation: Getting On-Behalf-Of Tokens Right

When one identity acts for another, the token model determines what downstream systems can actually see, trust, and audit.
Víctor Jiménez
Víctor Jiménez
Sep 2026
|
7 min read
MCP 2026-07-28 Part 4: Governing at Scale, over a diagram of connected services and request flows.

Enterprise at Scale: MCP’s Emerging Identity and Governance Foundation

Centralized authorization eliminates repeated user consent, but autonomous agents still need runtime policy, short-lived credentials, and audit.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
4 min read
JWT vs. OAuth

JWT vs. OAuth: Understanding Tokens and Authorization

OAuth is an authorization framework that defines how to grant access. JWT is a token format that defines how to package and transmit claims. They solve different problems, and most production systems use both.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
8 min read
OAuth vs OIDC

OAuth vs. OIDC: What’s the Difference and When Should You Use Each?

OAuth 2.0 and OIDC solve fundamentally different problems.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
6 min read
OAuth 2.0 vs 2.1

OAuth 2.0 vs 2.1: What Changed and How to Migrate

OAuth 2.1 eliminates implicit flow, mandates PKCE, and requires exact redirect matching.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
8 min read
Illustration of four professionals comparing a simple workload identity diagram with a large, complex engineering system of pipes, modules and machinery.

SPIFFE and SPIRE: Can You Afford to Build It Right? | Aembit

What it takes to implement it, and why real-world environments make it hard to finish.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
18 min read
Load More