Episode 197: Defining the AI Agent Taxonomy
There are so many unanswered questions about the critical challenge of agentic identity: What is an Agent? What is the lifecycle for AI Agents? Is there consensus on the schema and attributes for…
Identerati Office Hours
Identerati Office Hours episodes
A livestream about identity standards and the people who write them. Every episode is archived here.
Episode 196: EIC 2026 Debrief
Every year, important things happen at EIC and current trends coalesce. In 2009, Mike launched Gluu at EIC (when it was in the Deutsches Museum in Munich). And 26 years later, Mike announced Token…
Episode 195: The Crazy Road of AuthZ: Are We Really Ready for Agents?
In the 2000s, Bhavna helped build one of the first commercial policy decision points at Sun Microsystems, and was one of the lead developers and architects on the Sun OpenSSO access manager product.…
Episode 194: My Terms and IEEE 7012
What if people—not platforms—set the terms for personal data sharing? This episode explores MyTerms, the IEEE 7012 standard for machine-readable privacy agreements, and how it could replace today’s…
Episode 193: OpenID4VCI Meets OAuth First-Party Apps
Could OpenID for Verifiable Credential Issuance reuse the new OAuth First-Party Applications draft instead of reinventing its own Interactive Authorization Endpoint? This session explores the…
Episode 192: Intent-Based Authorization in AI Agents
As autonomous agents become more capable, the coarse-grained permission model inherited from OAuth is showing its limits. This piece examines why scope-based authorization—designed for human-driven…
Episode 191: Agentic AI: Pushing the gaps in existing protocols
The rapid deployment of agentic AI systems is illuminating the gaps in core industry protocols and creating an explosion of recommended extensions or brand new protocols to address the gaps.…
Episode 190: The Agentic Desired Outcome Contract
Agentic workflows need more than broad tool access: they need intent-bound authorization that ties every action back to a declared human outcome. This episode explores Desired Outcome Contracts as…
Episode 189: Agentic Authorization with Cedar
How to give agents real capabilities without surrendering control, provability, or accountability? Clawdrey Hepburn frames agentic authorization as a real security problem: an autonomous AI with…
Episode 188: Linux Security: Face Issues Before Attackers
Most teams have a comforting story about Linux security on paper, but the reality hiding in sudoers files, SSH keys, and service accounts is usually very different — and that’s exactly what attackers…
Episode 187: Automated Reasoning Meets AI: The Next Leap in Verified Infrastructure
Automated reasoning technologies — including solvers and theorem provers — have long secured critical infrastructure by mathematically verifying systems and policies. From AWS ensuring secure S3…
Episode 183: Bots With Keys: Welcome to AAuth
AAuth (Agent Auth) is a proposed protocol for authenticating AI agents when they access APIs and MCP servers. Instead of relying on a single identity token, agents sign requests and perform a…