Amazon Bedrock AgentCore simplifies identity propagation for enterprise agents
In short: Amazon has updated the AgentCore Gateway to support automated token exchange between Microsoft Entra ID and protected REST APIs. By leveraging this flow, AI agents can now perform actions in platforms like ServiceNow using the identity and permissions of the end-user rather than acting as a generic service account.
This summary was generated automatically by AI from AWS Machine Learning's publication. It is our own text, not a copy of the original — facts, figures and quotes belong to the source, linked above and below.
What changed?
- 1Native support for on-behalf-of (OBO) token exchange patterns via AgentCore Gateway.
- 2New requirement: Must use MCP version 2025-11-25 to enable OBO features.
- 3Integrated configuration for JWT-based authorization grants at the gateway target level.
- 4Automated request handling to include the 'requested_token_use: on_behalf_of' parameter.
| Parameter | Before | Now |
|---|---|---|
| MCP version | Earlier versions | 2025-11-25 |
Why it matters
This feature ensures that audit logs and access controls remain accurate when AI agents interact with secure systems. It prevents over-privileged access by ensuring every API request is tied to a specific user's identity, removing the need for manual token management code.
What it means for AI agents and contact centers
When building voice agents that perform actions in CRMs or enterprise tools, this is critical for security compliance and tracking user-specific actions. Compare the setup complexity against custom middleware implementations and evaluate the latency introduced by the token exchange process.
🧪 Worth Testing
The native integration significantly reduces the complexity of managing identity tokens in multi-tenant environments.
Sources
- AWS Machine LearningOfficialPrimary sourceOriginal article →„ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway“3 Nov 2026, 18:47
- Published by source
- 3 Nov 2026, 18:47
- Found by our system
- 3 Nov 2026, 19:03
- Summary generated
- 3 Nov 2026, 19:33
This article was written by AI from the original source. Facts, numbers and prices come from the source; missing values are marked “Not specified”. Legal notice, copyright and privacy