token exchange

The token exchange tag covers workload identity federation for AI agents and the use of short-lived, claims-based identity tokens in place of stored secrets. Tagged content examines how software agents authenticate across cloud, application, and tool boundaries while retaining the agent’s identity, runtime context, and the user or workload it represents. It also focuses on delegation as agents move among APIs, tenants, and data stores, where predictable pipeline assumptions no longer apply. This archive is relevant to readers exploring secretless authentication and identity controls for agent-driven workloads that need to operate across multiple services and trust boundaries.