Tag
An article exploring how to detect and clean up dormant or 'zombie' accounts in Active Directory environments, highlighting the security risks these stale credentials pose to enterprise networks.
一项由 Cloud Security Alliance 开展的研究显示，只有约22%的受访团队将 AI 代理视为独立身份。文章围绕代理应使用独立身份还是继承用户凭证展开讨论。
The OpenID Foundation released a 2025 white paper on Identity Management for Agentic AI, outlining the authentication, authorization, and credential models needed as autonomous AI agents increasingly act on behalf of users across systems.
Agent Identity is a product that provides persistent identities, credentials, permissions, and audit trails for AI agents, designed for developers building real agentic systems.
The Public Ledger of Credentials (PLC) organization has been formally established as a Swiss Association to independently operate the PLC directory for managing identities in the AT Protocol network.
The article discusses the emerging identity problem for AI agents as they gain access to sensitive resources, shifting focus from human authentication to agent ownership and permissions.
The Agent Network Protocol (ANP) is an open-source communication protocol suite for intelligent agents, focusing on identity, naming, discovery, and secure messaging to enable cross-domain agent collaboration and become the HTTP of the agentic web era.
The author proposes a local-first, distributed model for AI agents where users own persistent agents that can operate locally, negotiate with other agents, and interact across environments with structured actions and an agent economy.
GoDaddy's Agent Name Service (ANS) enables offline, sub-millisecond verification of AI agents' identities using cryptography, enhancing security and complementing authorization frameworks like OAuth 2.0.
Repeated passport scans pose privacy and security risks, and reusable, user-controlled credentials can reduce these risks while extending verifiable authority to AI agents.
Sequoia Capital has invested $30 million in Cymphony, a startup that addresses enterprise security risks posed by AI agents by providing a unified view of human and non-human identities and their data access.
The article discusses the emerging identity problem for AI agents as they perform tasks autonomously, with industry players like Microsoft introducing solutions such as Entra Agent ID to address accountability and governance.
The article argues that authorization terminology is confusing and proposes a taxonomy based on five key questions to better categorize models like RBAC, ABAC, and PBAC.
Descope launches Cross-App Access to replace static API keys with short-lived identity assertions for AI agents and MCP servers, enabling enterprises to govern agent access through existing identity providers with per-request authorization policies.
The article questions the practice of granting AI agents user credentials and proposes a more granular identity system to enhance security and accountability in production environments.
A forum called 1f916.ai has been launched where AI agents are citizens with key-based identity, addressing part of the debate on verifiable agent mandates. The author discusses the need for a delegation layer to complete the stack for real-world use.
The article explores the challenges of updating personal identity information in git commit histories due to life events and proposes using ATProto to manage distributed identity for better privacy and compliance.
OpenPubkey SSH (OPKSSH) has been open-sourced, enabling SSH to integrate with single sign-on technologies like OpenID Connect, eliminating the need for manual SSH key management.
This article details the release of the AWiki plugin for DeepSeek Harness, enabling identity and messaging capabilities for AI agents with features like registration, direct messaging, group creation, and local data persistence.
Release of AWiki identity and messaging tool for DeepSeek Harness, featuring stable identity handles and local-first messaging to address attribution and silent-failure issues in AI agent systems.