Personal agents are here. Aembit customers are already covered →
Get an Aembit Tenant
TALK TO AN ENGINEER
Blog

Tag: Workload Identity

“Secure Agentic AI” over a connected digital globe.

MCP Authorization: OAuth 2.1, PKCE, and Agent Identity

An employee, a scheduled agent, and a company-wide assistant may knock on the same MCP server door. They should not get in with the same badge.
Kevin Sapp
Kevin Sapp
Sep 2026
|
9 min read
Thoughtful man in glasses works on a laptop at a sunlit office table, coffee nearby, with blurred coworkers and city skyline behind him.

What is OIDC and How Does It Work?

OIDC adds identity to OAuth, giving applications a standard way to verify users, receive claims, and support modern sign-on.
Víctor Jiménez
Víctor Jiménez
Sep 2026
|
6 min read
What Identity Federation Means for Workloads

What Workload Identity Federation Means for Cloud-Native Environments

Instead of duplicating accounts or sharing credentials, one identity system can validate identities issued by another and grant access based on that trust.
Dan Kaplan
Dan Kaplan
Sep 2026
|
10 min read
Illustration of four professionals comparing a simple workload identity diagram with a large, complex engineering system of pipes, modules and machinery.

Everyone wants SPIFFE. Can You Afford to Build SPIRE Right?

What it takes to implement it, and why real-world environments make it hard to finish.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
18 min read
AI and human face eye to eye.

A Guide to Agentic Identity: The Shift Security Teams Are Making

AI agents are changing how identity and access work but most teams are unprepared.
Dan Kaplan
Dan Kaplan
Aug 2026
|
6 min read
secrets-management-in-the-cloud

A Guide to Secrets Management: Frameworks and Best Practices

This guide covers the essential best practices for securing your organization’s secrets in cloud environments.
Ashur Kanoon
Ashur Kanoon
Aug 2026
|
6 min read
spiffe-and-spire-your-questions-answered

Exploring SPIFFE Protocols: A Technical Guide

Explore how the specifications impact secrets management and workload identity and access management practices across distributed environments.
Kevin Sapp
Kevin Sapp
Aug 2026
|
9 min read
A Human’s Guide to Non-Human Identities and How to Secure Them image

A Complete Technical Guide to Non-Human Identity Management

As apps and service accounts proliferate, robust management is key to maintaining automated, scalable, and resilient IT environments.
Dan Kaplan
Dan Kaplan
Aug 2026
|
9 min read
Top Risks of Using AI Agent Identities

Top Risks of Using AI Agent Identities

AI agents need identity controls, scoped access, and runtime enforcement before they are trusted with production systems.
Aembit Engineering
Aembit Engineering
Aug 2026
|
8 min read
A team of engineers reviews an AI agent authorization flow on a conference room display.

How AAuth Brings Human Approval Into AI Agent Authorization

A new protocol proposes a clearer way to connect agent identity, delegated authority and human approval for sensitive actions.
Víctor Jiménez
Víctor Jiménez
Aug 2026
|
13 min read
Load More