World's Fair 2025
CIAM for AI: Authn/Authz for Agents — Michael Grinich, CEO of WorkOS
Overview
This talk addresses the critical need for robust identity, authentication, and authorization solutions for AI agents, a rapidly growing segment in the B2B SaaS landscape. As agents become more integrated into workflows, they require first-class identity support, distinct from traditional bots or human users. The presentation emphasizes the urgency of developing new standards for agent identity to ensure user safety and enable scalable adoption of AI technologies.
Who should watch
- AI Engineers
- Product Managers
- Builders of agentic applications
- Anyone concerned with security and access control for AI systems
- Those exploring new paradigms for human-machine interaction
Key takeaways
- AI agents require native machine identity, a hybrid between machine and person identity, to interact securely across various systems.
- Key challenges in agent identity include headless authentication, managing long-lived credentials, and implementing a dynamic least privilege access model.
- Compliance and observability are crucial, as agents can perform actions at high speed, necessitating detailed audit trails and logging.
- Several architectural patterns can address agent identity needs: persona shadowing, delegation chains, capability tokens, and human-in-the-loop escalation.
- Emerging standards like OAuth, OpenID Connect, GNAP, and verifiable credentials are being adapted or extended to support agentic systems.
- A middleware approach, creating a trust boundary between agentic code and enterprise systems, is a common and powerful pattern for managing security.
- The future of software interaction will likely see a significant shift towards agent-driven activity, necessitating a fundamental rethinking of identity management.
Notable quotes
*We need to think about agents as really having first class identity support.*
*Agents are only as powerful as the systems you give them to.*
*The future is already here. It's just not equally distributed.*
Unofficial community note. Prefer the recording for nuance.