#422 - Decoded - Securing AI Agents with Standards You Already Have

Episode 422 is the debut of Decoded by Identity at the Center, a new sub-series hosted by Jeff Steadman and Sean O'Dell dedicated to unpacking the specifications and standards powering IAM. Joining them is Pieter Kasselman, VP of Open Standards at Defakto and chair of the WIMSE working group. The conversation covers why traditional non-human identity approaches break at agentic scale, how SPIFFE and SPIRE enable short-lived automated credential provisioning without long-lived secrets, and why treating agents as workloads unlocks a decade of existing standards. Pieter walks through critical OAuth specs including JWT authorization grant, token exchange, client ID metadata, and the emerging transaction tokens draft. Sean connects these to practical gateway architecture, continuous access evaluation, and policy-based authorization. The episode closes with real-world deployment examples and a clear takeaway: the tools to secure agentic identity are available today. Episode Links:Pieter Kasselman: https://www.linkedin.com/in/pieter-kasselman-0259862/AI Agent Authentication and Authorization: https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/Workload Identity in Multi-system environments (WIMSE): https://ietf-wg-wimse.github.io/OAuth SPIFFE Client Authentication: https://datatracker.ietf.org/doc/draft-ietf-oauth-spiffe-client-auth/Transaction Tokens: https://datatracker.ietf.org/doc/draft-ietf-oauth-transaction-tokens/08/Agentic Identity Control Framework. You Already Have the Pieces. Now Build It. by Sean O'Dell: https://www.linkedin.com/pulse/agentic-identity-control-framework-you-already-have-pieces-o-dell-61b5e/ Timestamps: 00:00 Introduction to Decoded by Identity at the Center 00:13 The mission of the Decoded sub-series 03:02 Guest intro: Pieter Kasselman, VP of Open Standards at Defakto 06:21 Why agentic identity is urgent: scale, multi-platform, and shifting threat landscape 10:42 The real cost of API keys and credential sprawl in agentic systems 13:23 Agentic identity identifiers and how SPIFFE assigns unique workload IDs 21:00 Credential types: X.509, JWTs, and workload identity tokens 31:00 Connecting SPIFFE to OAuth and dynamic registration with client ID metadata 38:18 SPIFFE SVIDs, multiple credentials per agent, and governance traceability 41:44 Authentication versus authorization: delegation versus impersonation 47:00 Transaction tokens: binding access to specific transactions to stop token theft 51:21 Identity chaining and cross-domain authorization 55:00 Shared Signals Framework and dynamic authorization 57:00 Gateways, CAEP, and mid-flight token revocation for rogue agents 59:31 What you can deploy today with SPIFFE, OAuth, and existing IDPs 01:02:58 Policy-based access control and why instance-level governance cannot scale 01:04:58 Workload identity federation: Anthropic and Google Agent ID updates 01:07:13 Cross-platform federation and the law of agentic utility 01:11:55 Elevator pitch: agents are workloads and 95% of the problem is solved now 01:17:03 What is coming next: a transaction tokens deep dive Keywords: agentic identity, SPIFFE, SPIRE, OAuth, transaction tokens, Shared Signals Framework, WIMSE, workload identity, non-human identity, authorization delegation, JWT, CAEP, API gateway, IAM standards, AIMS, Jeff Steadman, Sean O'Dell, Pieter Kasselman, IDAC, Identity at the Center, Jim McDonald, Decoded by Identity at the Center Decoded by Identity at the Center: Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/ Sean O'Dell: https://www.linkedin.com/in/seanodentity/ Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/ Visit the show on the web at https://idacdecoded.com/