Identity Management for Agentic AI: The new frontier of authorization, authentication, and security for an AI agent world
On the map: LLM agents and tool use → Agent threats, guardrails and governance
Abstract (arXiv)
The rapid rise of AI agents presents urgent challenges in authentication, authorization, and identity management. Current agent-centric protocols (like MCP) highlight the demand for clarified best practices in authentication and authorization. Looking ahead, ambitions for highly autonomous agents raise complex long-term questions regarding scalable access control, agent-centric identities, AI workload differentiation, and delegated authority. This OpenID Foundation whitepaper is for stakeholders at the intersection of AI agents and access management. It outlines the resources already available for securing today's agents and presents a strategic agenda to address the foundational authentication, authorization, and identity problems pivotal for tomorrow's widespread autonomous systems.
Key facts. Cited by 14 papers in the map (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 5 of its 21 references that are in the map. First posted on arXiv 29 Oct 2025.
Builds on
5 of 21 references.
References · 5
- 2023The Data Provenance Initiative: A Large Scale Audit of Dataset Licensing & Attribution in AIcited by 73
- 2025Authenticated Delegation and Authorized AI Agentscited by 63
- 2024IDs for AI Systemscited by 18
- 2024Personhood credentials: Artificial intelligence and the value of privacy-preserving tools to distinguish who is real onlinecited by 15
- 2025OpenID Connect for Agents (OIDC-A) 1.0: A Standard Extension for LLM-Based Agent Identity and Authorizationcited by 3
Built on by
Citing papers per year: 2026: 14.
14 papers.
Sort:
By area:
- 2026A Framework for Formalizing LLM Agent Securitycited by 16
- 2026HDP: A Lightweight Cryptographic Protocol for Human Delegation Provenance in Agentic AI Systemscited by 5
- 2026Blind Gods and Broken Screens: Architecting a Secure, Intent-Centric Mobile Agent Operating Systemcited by 3
- 2026Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AIcited by 3
- 2026Distributed General-Purpose Agent Networks: Architecture, Key Mechanisms, and Prototypescited by 3
- 2026SoulAuth: An Actor-native Identity Architecture and Rust Reference Implementation for Humans and Long-lived AI Actorscited by 1
- 2026Turn: A Language for Agentic Computationcited by 0
- 2026Non-Colliding Biometric Identities for Digital Entities: Geometry, Capacity, and Million-Scale Virtual Identity Provisioningcited by 0
- 2026Agent Security Meets Regulatory Reality -- A Practitioner Systematization of Autonomous-Agent Threats and Controls in Regulated Financial Systemscited by 0
- 2026Cryptographically verifiable authorization for autonomous AI agents: a falsifiable hypothesis and proof of conceptcited by 0
- 2026Binding Biometrics with AI Agent Identifiers for Delegation of Authoritycited by 0
- 2026InterSAGE: The Secure and Verifiable Interoperability Protocol for An Internet of Agentscited by 0
2 more
- 2026Runtime Authorization Consistency Checking for MCP-based Agentic Workflows20 Sep 2026
- 2026SoulAuth: An Actor-native Identity Architecture and Rust Reference Implementation for Humans and Long-lived AI Actors10 Sep 2026
- 2026AgentKernel: The Trust-Native Agentic Operating System29 Aug 2026
- 2026InterSAGE: The Secure and Verifiable Interoperability Protocol for An Internet of Agents13 Aug 2026
- 2026Binding Biometrics with AI Agent Identifiers for Delegation of Authority4 Aug 2026
- 2026Cryptographically verifiable authorization for autonomous AI agents: a falsifiable hypothesis and proof of concept23 Jul 2026
- 2026Agent Security Meets Regulatory Reality -- A Practitioner Systematization of Autonomous-Agent Threats and Controls in Regulated Financial Systems28 Jun 2026
- 2026Distributed General-Purpose Agent Networks: Architecture, Key Mechanisms, and Prototypes15 Jun 2026
- 2026Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AI2 Jun 2026
- 2026Non-Colliding Biometric Identities for Digital Entities: Geometry, Capacity, and Million-Scale Virtual Identity Provisioning18 May 2026
- 2026HDP: A Lightweight Cryptographic Protocol for Human Delegation Provenance in Agentic AI Systems6 Apr 2026
- 2026A Framework for Formalizing LLM Agent Security19 Mar 2026
2 more
- 2026A Framework for Formalizing LLM Agent Securitycited by 16
- 2026HDP: A Lightweight Cryptographic Protocol for Human Delegation Provenance in Agentic AI Systemscited by 5
- 2026Blind Gods and Broken Screens: Architecting a Secure, Intent-Centric Mobile Agent Operating Systemcited by 3
- 2026Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AIcited by 3
- 2026Distributed General-Purpose Agent Networks: Architecture, Key Mechanisms, and Prototypescited by 3
- 2026Turn: A Language for Agentic Computationcited by 0
- 2026Agent Security Meets Regulatory Reality -- A Practitioner Systematization of Autonomous-Agent Threats and Controls in Regulated Financial Systemscited by 0
- 2026InterSAGE: The Secure and Verifiable Interoperability Protocol for An Internet of Agentscited by 0
- 2026Runtime Authorization Consistency Checking for MCP-based Agentic Workflowscited by 0
- 2026AgentKernel: The Trust-Native Agentic Operating Systemcited by 0
- 2026Runtime Authorization Consistency Checking for MCP-based Agentic Workflows20 Sep 2026
- 2026AgentKernel: The Trust-Native Agentic Operating System29 Aug 2026
- 2026InterSAGE: The Secure and Verifiable Interoperability Protocol for An Internet of Agents13 Aug 2026
- 2026Agent Security Meets Regulatory Reality -- A Practitioner Systematization of Autonomous-Agent Threats and Controls in Regulated Financial Systems28 Jun 2026
- 2026Distributed General-Purpose Agent Networks: Architecture, Key Mechanisms, and Prototypes15 Jun 2026
- 2026Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AI2 Jun 2026
- 2026HDP: A Lightweight Cryptographic Protocol for Human Delegation Provenance in Agentic AI Systems6 Apr 2026
- 2026A Framework for Formalizing LLM Agent Security19 Mar 2026
- 2026Turn: A Language for Agentic Computation7 Mar 2026
- 2026Blind Gods and Broken Screens: Architecting a Secure, Intent-Centric Mobile Agent Operating System11 Feb 2026
- 2026SoulAuth: An Actor-native Identity Architecture and Rust Reference Implementation for Humans and Long-lived AI Actorscited by 1
- 2026Non-Colliding Biometric Identities for Digital Entities: Geometry, Capacity, and Million-Scale Virtual Identity Provisioningcited by 0
- 2026Cryptographically verifiable authorization for autonomous AI agents: a falsifiable hypothesis and proof of conceptcited by 0
- 2026Binding Biometrics with AI Agent Identifiers for Delegation of Authoritycited by 0
- 2026SoulAuth: An Actor-native Identity Architecture and Rust Reference Implementation for Humans and Long-lived AI Actors10 Sep 2026
- 2026Binding Biometrics with AI Agent Identifiers for Delegation of Authority4 Aug 2026
- 2026Cryptographically verifiable authorization for autonomous AI agents: a falsifiable hypothesis and proof of concept23 Jul 2026
- 2026Non-Colliding Biometric Identities for Digital Entities: Geometry, Capacity, and Million-Scale Virtual Identity Provisioning18 May 2026
Similar, not cited
Close in wording, no citation either way
- 2025A Novel Zero-Trust Identity Framework for Agentic AI: Decentralized Authentication and Fine-Grained Access Control
- 2026Authorization Propagation in Multi-Agent AI Systems: Identity Governance as Infrastructure
- 2026Digital Identity for Agentic Systems: Toward a Portable Authorization Standard for Autonomous Agents
- 2026Rethinking Agent Security as a Networking Problem
- 2025Security of Internet of Agents: Attacks and Countermeasures
- 2026Authorization Architectures for Tool-Using AI Agents
- 2025SAGA: A Security Architecture for Governing AI Agentic Systems
- 2026Janus: a Playground for User-Involved Agentic Permission Management