Ad

Privum

We build, secure and run your digital infrastructure.

Software, AI systems, penetration testing and secure cloud for companies.

Talk to Privum

ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway

9d

Age

Published
Collected

Learn how to configure Amazon Bedrock AgentCore Gateway for an on-behalf-of (OBO) token exchange with Microsoft Entra ID, so an AI agent can call the ServiceNow REST API while preserving the calling user's identity. AgentCore Gateway performs the exchange natively, with no interceptor Lambda or custom code.

Excerpt from the source

AI agents that interact with enterprise APIs on behalf of users need to maintain user identity throughout the request chain. Without identity propagation, API calls arrive at downstream services as the application itself rather than the user who initiated the action. This breaks audit trails, bypasses user-level access controls, and violates the principle of least privilege. Amazon Bedrock AgentCore is a platform to build, connect, and optimize agents at scale, with any framework or model. This…

overfeed.news indexes and links. We publish a short excerpt — the full article stays at AWS Machine Learning Blog.

Log in to follow this source
ServiceNow on-behalf-of token exchange with Bedrock AgentCore…