Agent Identity
The treatment of an AI agent as a first-class principal in an identity system — its own authenticatable, authorizable, auditable, and revocable entity — rather than something that borrows a human user's credentials or hides behind a shared service account. A proper agent identity answers three questions on every action: who is the agent (verifiable, independent of any user), on whose behalf is it acting (the delegating human or upstream agent, preserved separately), and is this specific action allowed right now. Agent identity is the load-bearing control for production agents because it converts a hijacked agent from an untraceable, unrevocable impersonator into a scoped principal whose Blast Radius is capped and whose access can be killed in one move. Microsoft's Entra Agent ID (2025-26) registers agents as a distinct identity type; Okta and Auth0 shipped agent-native registration and governance in the same window.
Written by Max Zeshut
Founder at Agentmelt · Last updated Sep 9, 2026
Example
A scheduling agent is registered as its own identity `agent:scheduler-prod-01`, not as the assistant's Google account. When it books a meeting, the calendar's audit log shows the agent identity acting on behalf of the user (two separate claims), the agent's token is scoped to one calendar, and a security admin can revoke `agent:scheduler-prod-01` without touching the user's own access.
Frequently asked questions
- Is an agent identity the same as a service account?
- No. A classic service account is a static machine credential with a fixed scope and no notion of a user behind it. An agent identity is a principal that acts on behalf of a (possibly changing) human or upstream agent, autonomously, across many systems — so it needs delegation semantics (Delegated Authority (On-Behalf-Of)), runtime-attested authentication (Workload Identity (SPIFFE/SPIRE)), and per-action authorization (Fine-Grained Authorization (for agents)) that ordinary service accounts never required.
- Do I need a vendor product to give an agent an identity?
- Not necessarily. The primitives are open standards — SPIFFE/SPIRE for workload identity, OAuth 2.0 Token Exchange (RFC 8693) for delegation — that you can wire yourself. Vendor products (Entra Agent ID, Okta/Auth0 for AI Agents) add directory integration, lifecycle governance, and audit UI on top of those primitives.