Tag: Authentication

AI agents don’t neatly fit into your IAM chart. They switch roles, borrow authority, and rewrite what identity means at runtime. Here’s what that means for you.
PAM is changing as AI agents, workloads and machine identities take on more privileged access.
Personal AI agents like Meta Muse will be coming to work with employees. Aembit enforces how they access enterprise systems.
Secrets managers still matter. But AI agents and workloads are changing when stored credentials make sense.
Broad credentials made sense when fixed application logic stood between users and actions, but AI agents have changed that equation.
What began as a way for agents to call tools is expanding into infrastructure for longer-running, governed interactions across enterprise systems.
When one identity acts for another, the token model determines what downstream systems can actually see, trust, and audit.
Centralized authorization eliminates repeated user consent, but autonomous agents still need runtime policy, short-lived credentials, and audit.
OAuth is an authorization framework that defines how to grant access. JWT is a token format that defines how to package and transmit claims. They solve different problems, and most production systems use both.