OAuth

The OpenID Foundation has released a 2025 white paper on identity management for agentic AI, addressing how autonomous AI agents should be authenticated, authorized and held accountable when acting on behalf of users. The paper, published as a PDF on the OpenID.net site, is drawing attention from developers and security professionals debating whether existing identity standards like OAuth can cope with machine-driven agents.

The OpenID Foundation has released a 2025 white paper on identity management for agentic AI, addressing how autonomous software agents can be authenticated and authorized when acting on behalf of users. The paper examines the gaps existing identity standards like OAuth and OpenID Connect leave when AI agents, rather than people, initiate actions across services. Developers and security professionals are weighing how current identity infrastructure can adapt to machine-driven agents.

The OpenID Foundation has released a paper on identity management for agentic AI, addressing how autonomous AI agents should authenticate and be authorized when acting on behalf of users. The document examines how existing standards like OAuth and OpenID Connect can extend to machine agents that independently make decisions and take actions, a growing concern as companies deploy AI agents with access to sensitive systems and credentials.