sources · source-BATCH-2026-005-004
Identity Management for Agentic AI
Accepted discovery candidate candidate-BATCH-2026-001-027; contributes nonprofit/company white paper evidence or normative context to governed AI-agent identity.
Open the canonical original source
Source at a glance
- Source type
- research report
- Publisher
- OpenID Foundation
- Source or access date
- 2026-08-15
- Analysis depth
- deeply analyzed
- Rights treatment
- link and paraphrase
- Human review
- Murray Newlands · 2026-08-16
What the source reports or argues
- The authors argue that current mechanisms are strongest for synchronous, single-trust-domain patterns and weaker for cross-domain or recursive delegation.
- The paper distinguishes agent identity from user identity and calls for lifecycle management and enriched audit trails.
Important limitations
- No implementation benchmark or comparative test.
- Formal source-selection, funding, conflicts, and review process are not reported.
Source-located statements
7 reviewed statements are indexed from this source.
- The report warns that agents which appear identical to users leave investigators unable to separate delegated action from direct user action. (PDF file p. 3 (document p. 2), Executive Summary, "User impersonation by agents", October 2025 version)
- An on-behalf-of authorization flow should carry distinct identities for the delegating user and acting agent. (PDF file p. 19 (document p. 18), Section 3.2 "From Impersonation to Delegation (On-Behalf-Of)", October 2025 version)
- The report organizes agent identity practice around open protocols, authenticated interactions, least privilege, automated lifecycle controls, audit trails, and interoperability. (PDF file p. 17 (document p. 16), "Best Practices", October 2025 version)
- Audit records should identify both the authorizing human principal and the particular agent instance that executed an action. (PDF file p. 15 (document p. 14), end of Section 2.11, October 2025 version)
- Agent identities need formal creation, permission changes, ownership transfer, de-provisioning, and off-boarding across systems. (PDF file p. 17 (document p. 16), "Best Practices", bullet "Automate agent lifecycle management", October 2025 version)
- Each handoff in a multi-agent delegation chain should reduce the permissions passed to the next agent. (PDF file p. 27 (document p. 26), Section 4.4 "Recursive Delegation in Dynamic Agent Networks", October 2025 version)
- Requiring approval for every agent action can produce consent fatigue and habitual approval, weakening meaningful human oversight. (PDF file p. 21 (document p. 20), Section 3.4 "Scalable Human Governance and Consent", opening paragraph, October 2025 version)
Evidence lineage and transparency
| Relationship field | Linked identifiers |
|---|---|
| author ids | person-BATCH-2026-005-tobin-south, person-BATCH-2026-005-subramanya-nagabhushanaradhya, person-BATCH-2026-005-ayesha-dissanayaka, person-BATCH-2026-005-sarah-cecchetti, person-BATCH-2026-005-george-fletcher, person-BATCH-2026-005-victor-lu, person-BATCH-2026-005-aldo-pietropaolo, person-BATCH-2026-005-dean-h-saxe, person-BATCH-2026-005-jeff-lombardo, person-BATCH-2026-005-abhishek-shivalingaiah, person-BATCH-2026-005-stan-bounev, person-BATCH-2026-005-alex-keisner, person-BATCH-2026-005-andor-kesselman, person-BATCH-2026-005-zack-proser, person-BATCH-2026-005-ginny-fahs, person-BATCH-2026-005-andrew-bunyea, person-BATCH-2026-005-ben-moskowitz, person-BATCH-2026-005-atul-tulshibagwale, person-BATCH-2026-005-dazza-greenwood, person-BATCH-2026-005-jiaxin-pei, person-BATCH-2026-005-alex-pentland |
Machine review: machine checked. Human review: approved. Workflow: published.
Complete structured record
- source id
- source-BATCH-2026-005-004
- canonical title
- Identity Management for Agentic AI
- alternate titles
- source type
- research_report
- series or parent source
- official OpenID Foundation PDF
- publisher
- OpenID Foundation
- channel
- Unknown
- speaker ids
- author ids
- person-BATCH-2026-005-tobin-south, person-BATCH-2026-005-subramanya-nagabhushanaradhya, person-BATCH-2026-005-ayesha-dissanayaka, person-BATCH-2026-005-sarah-cecchetti, person-BATCH-2026-005-george-fletcher, person-BATCH-2026-005-victor-lu, person-BATCH-2026-005-aldo-pietropaolo, person-BATCH-2026-005-dean-h-saxe, person-BATCH-2026-005-jeff-lombardo, person-BATCH-2026-005-abhishek-shivalingaiah, person-BATCH-2026-005-stan-bounev, person-BATCH-2026-005-alex-keisner, person-BATCH-2026-005-andor-kesselman, person-BATCH-2026-005-zack-proser, person-BATCH-2026-005-ginny-fahs, person-BATCH-2026-005-andrew-bunyea, person-BATCH-2026-005-ben-moskowitz, person-BATCH-2026-005-atul-tulshibagwale, person-BATCH-2026-005-dazza-greenwood, person-BATCH-2026-005-jiaxin-pei, person-BATCH-2026-005-alex-pentland
- institutional author
- OpenID Foundation
- organization references
- recorded at
- Unknown
- event date
- Unknown
- published at
- Unknown
- updated at
- Unknown
- duration seconds
- Unknown
- language
- lang-en
- translated title
- Unknown
- translation method
- Unknown
- geography of speaker
- geography of organization
- geography discussed
- global technology standards context
- study geography
- global technology standards context
- original url
- https://openid.net/wp-content/uploads/2025/10/Identity-Management-for-Agentic-AI.pdf
- canonical url
- https://openid.net/wp-content/uploads/2025/10/Identity-Management-for-Agentic-AI.pdf
- archived url
- Unknown
- embed url
- Unknown
- doi
- Unknown
- canonical identity status
- verified
- repost status
- original_or_authoritative_rendition
- original source id
- Unknown
- rights status
- link_and_paraphrase
- ownership status
- third_party
- relationship to off
- none_identified; Executive AI Research snapshot contains no matching production records
- transcript status
- Unknown
- transcript source
- Unknown
- transcript republication permission
- Unknown
- chapter markers
- analysis basis
- Complete official 33-page PDF reviewed; identity, delegation, auditability, and use-case sections inspected visually.
- topics
- topic-ai-agents, topic-ai-governance, topic-cybersecurity, topic-non-human-identity
- executive roles
- role-ciso, role-cio, role-cto, role-general-counsel, role-board-director
- original abstract
- Unknown
- inclusion rationale
- Accepted discovery candidate candidate-BATCH-2026-001-027; contributes nonprofit/company white paper evidence or normative context to governed AI-agent identity.
- source quality dimensions
- {"attribution_strength":"high","methodological_transparency":"appropriate_for_white_paper_but_source_selection_not_reported","independence":"standards_community_publisher","bibliographic_stability":"high_official_pdf","evidence_strength":"moderate_normative_synthesis_not_empirical","unresolved":"Substantially the same intellectual work appears as arXiv:2510.25819v1."}
- methodology quality
- {"design":"non-empirical technical white paper and standards synthesis","transparency":"appropriate_for_white_paper_but_source_selection_not_reported","human_review_required":true}
- study design
- non-empirical technical white paper and standards synthesis
- sample
- {"size":"not applicable","sampling_method":"not applicable"}
- population
- AI-agent systems interacting with protected resources and other agents
- date range
- {"fieldwork":"not applicable","version":"October 2025"}
- funding
- not reported
- sponsor
- OpenID Foundation publisher; separate sponsorship not reported
- peer review status
- not reported; not treated as peer reviewed
- findings
- The authors argue that current mechanisms are strongest for synchronous, single-trust-domain patterns and weaker for cross-domain or recursive delegation., The paper distinguishes agent identity from user identity and calls for lifecycle management and enriched audit trails.
- limitations
- No implementation benchmark or comparative test., Formal source-selection, funding, conflicts, and review process are not reported.
- correction ids
- retraction status
- none_identified_on_official_pdf_or_publisher_url_as_of_2026-08-15
- content hash
- e6a0e5909fcb2486568180f69d511ae2af8d20a1bfb3028b39b3d1072846f4f3
- accessed at
- 2026-08-15
- verification status
- metadata_content_and_version_machine_verified_human_approved
- source depth
- deeply_analyzed
- publication status
- published
- workflow status
- published
- machine review status
- machine_checked
- human review status
- approved
- reviewed by
- Murray Newlands
- reviewed at
- 2026-08-16T23:17:22Z
Provenance and revision history
{
"provenance": [
{
"source_url": "https://openid.net/wp-content/uploads/2025/10/Identity-Management-for-Agentic-AI.pdf",
"accessed_at": "2026-08-15",
"retrieval_method": "official source retrieval and machine-assisted review",
"exact_locator": "October 2025",
"content_hash": "e6a0e5909fcb2486568180f69d511ae2af8d20a1bfb3028b39b3d1072846f4f3",
"batch_id": "BATCH-2026-005",
"prompt_id": "OEII-EVIDENCE-RESEARCH",
"prompt_version": "2.0",
"notes": "Human review pending."
}
],
"revision_history": [
{
"changed_at": "2026-08-16T23:17:22Z",
"changed_by": "Murray Newlands",
"summary": "Approved for the governed-identities pilot release under the exact scope, exclusions, rights treatment, and limitations recorded in issue #18.",
"batch_id": "BATCH-2026-005"
}
]
}