Personal agents are here. Aembit customers are already covered →
Get an Aembit Tenant
TALK TO AN ENGINEER
Blog

Tag: Authentication

MCP 2026-07-28 Part 4: Governing at Scale, over a diagram of connected services and request flows.

Enterprise at Scale: MCP’s Emerging Identity and Governance Foundation

Centralized authorization eliminates repeated user consent, but autonomous agents still need runtime policy, short-lived credentials, and audit.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
4 min read
JWT vs. OAuth

JWT vs. OAuth: Understanding Tokens and Authorization

OAuth is an authorization framework that defines how to grant access. JWT is a token format that defines how to package and transmit claims. They solve different problems, and most production systems use both.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
8 min read
OAuth vs OIDC

OAuth vs. OIDC: What’s the Difference and When Should You Use Each?

OAuth 2.0 and OIDC solve fundamentally different problems.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
6 min read
OAuth 2.0 vs 2.1

OAuth 2.0 vs 2.1: What Changed and How to Migrate

OAuth 2.1 eliminates implicit flow, mandates PKCE, and requires exact redirect matching.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
8 min read
Illustration of four professionals comparing a simple workload identity diagram with a large, complex engineering system of pipes, modules and machinery.

Everyone wants SPIFFE. Can You Afford to Build SPIRE Right?

What it takes to implement it, and why real-world environments make it hard to finish.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
18 min read
secrets-management-in-the-cloud

A Guide to Secrets Management: Frameworks and Best Practices

This guide covers the essential best practices for securing your organization’s secrets in cloud environments.
Ashur Kanoon
Ashur Kanoon
Aug 2026
|
6 min read
Minimal 3D illustration of a three-legged OAuth flow connecting a user, client application, and authorization server

3-Legged OAuth (3LO) Explained: How the OAuth Flow Works

Learn how 3-legged OAuth works by building a GitHub OAuth flow and tracing authorization, consent, codes, tokens, and state.
Víctor Jiménez
Víctor Jiménez
Aug 2026
|
11 min read
spiffe-and-spire-your-questions-answered

Exploring SPIFFE Protocols: A Technical Guide

Explore how the specifications impact secrets management and workload identity and access management practices across distributed environments.
Kevin Sapp
Kevin Sapp
Aug 2026
|
7 min read
10 Agentic Identity Security Vendors

Ranking the Top 10 AI Agent Identity Security Vendors for 2026

Compare 10 identity security vendors for AI agents, including where each fits and what buyers should examine before choosing.
Dan Kaplan
Dan Kaplan
Jul 2026
|
8 min read
Abstract geometric illustration of a blue square representing an AI agent connected within a network of white rectangular workloads.

Squares and Rectangles: Why AI Agents Can’t Be Treated Like Regular Workloads

AI agents are workloads, but traditional workload identity alone can miss the user, task, and runtime context needed to govern dynamic agent access.
Emma Zaballos
Emma Zaballos
Jul 2026
|
4 min read
Load More