# Identity Management for Agentic AI: The new frontier of authorization, authentication, and security for an AI agent world

arXiv: https://arxiv.org/abs/2510.25819 · HTML: https://mlsanity.com/paper/2510.25819/

## Key facts

- Cited by 15 papers in the map (data through 14 Oct 2026).
- Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use.
- Builds on 5 of its 21 references that are in the map.
- First posted on arXiv 29 Oct 2025.

## Placed in

- LLM agents and tool use / [Agent threats, guardrails and governance](https://mlsanity.com/agents/agent-threats-guardrails-and-governance/)

## Builds on (most cited first, 5 of 5)

- [The Data Provenance Initiative: A Large Scale Audit of Dataset Licensing & Attribution in AI](https://mlsanity.com/paper/2310.16787/) (2023)
- [Authenticated Delegation and Authorized AI Agents](https://mlsanity.com/paper/2501.09674/) (2025)
- [IDs for AI Systems](https://mlsanity.com/paper/2406.12137/) (2024)
- [Personhood credentials: Artificial intelligence and the value of privacy-preserving tools to distinguish who is real online](https://mlsanity.com/paper/2408.07892/) (2024)
- [OpenID Connect for Agents (OIDC-A) 1.0: A Standard Extension for LLM-Based Agent Identity and Authorization](https://mlsanity.com/paper/2509.25974/) (2025)

## Built on by (most cited first, 15 of 15)

- [A Framework for Formalizing LLM Agent Security](https://mlsanity.com/paper/2603.19469/) (2026)
- [HDP: A Lightweight Cryptographic Protocol for Human Delegation Provenance in Agentic AI Systems](https://mlsanity.com/paper/2604.04522/) (2026)
- [Overlaying Governance: A Compositional Authorization Framework for Delegation and Scope in Agentic AI](https://mlsanity.com/paper/2606.03518/) (2026)
- [Blind Gods and Broken Screens: Architecting a Secure, Intent-Centric Mobile Agent Operating System](https://mlsanity.com/paper/2602.10915/) (2026)
- [Distributed General-Purpose Agent Networks: Architecture, Key Mechanisms, and Prototypes](https://mlsanity.com/paper/2606.17368/) (2026)
- [SoulAuth: An Actor-native Identity Architecture and Rust Reference Implementation for Humans and Long-lived AI Actors](https://mlsanity.com/paper/2609.11258/) (2026)
- [Turn: A Language for Agentic Computation](https://mlsanity.com/paper/2603.08755/) (2026)
- [Non-Colliding Biometric Identities for Digital Entities: Geometry, Capacity, and Million-Scale Virtual Identity Provisioning](https://mlsanity.com/paper/2605.18238/) (2026)
- [Agent Security Meets Regulatory Reality -- A Practitioner Systematization of Autonomous-Agent Threats and Controls in Regulated Financial Systems](https://mlsanity.com/paper/2606.29142/) (2026)
- [Cryptographically verifiable authorization for autonomous AI agents: a falsifiable hypothesis and proof of concept](https://mlsanity.com/paper/2607.21325/) (2026)
- [Binding Biometrics with AI Agent Identifiers for Delegation of Authority](https://mlsanity.com/paper/2608.04292/) (2026)
- [InterSAGE: The Secure and Verifiable Interoperability Protocol for An Internet of Agents](https://mlsanity.com/paper/2608.13030/) (2026)
- [Runtime Authorization Consistency Checking for MCP-based Agentic Workflows](https://mlsanity.com/paper/2609.23498/) (2026)
- [AgentKernel: The Trust-Native Agentic Operating System](https://mlsanity.com/paper/2609.29647/) (2026)
- [Who is the 'I' in AI? Establishing Decentralized Identity and Accountability for Autonomous Agents](https://mlsanity.com/paper/2610.17126/) (2026)

## Abstract (arXiv)

The rapid rise of AI agents presents urgent challenges in authentication, authorization, and identity management. Current agent-centric protocols (like MCP) highlight the demand for clarified best practices in authentication and authorization. Looking ahead, ambitions for highly autonomous agents raise complex long-term questions regarding scalable access control, agent-centric identities, AI workload differentiation, and delegated authority. This OpenID Foundation whitepaper is for stakeholders at the intersection of AI agents and access management. It outlines the resources already available for securing today's agents and presents a strategic agenda to address the foundational authentication, authorization, and identity problems pivotal for tomorrow's widespread autonomous systems.