Standards and security principles

Put identity principles into practice.

Explore the protocols and industry guidance that inform identity, access and governed AI-agent execution.

Identity and sign-in

OAuth, OpenID Connect, PKCE, SAML, SCIM, FIDO2/WebAuthn and passkeys connect applications, identities and sign-in journeys.

Workload and device identity

SPIFFE workload identity, mutual TLS, device certificates and supported enrollment help distinguish machines and agent runs.

Governed agent access

Role, attribute and relationship context inform access decisions. Agent identity can include decentralized identifiers and verifiable credentials; MCP connects agents to tools.

Capabilities depend on the product, deployment and configuration. Standards references do not imply certification or endorsement.

Industry context

Why agent identity matters

NIST design tenets

Consider how identity and authority follow agents through their lifecycle.

Read the tenets →

Cloud Security Alliance

Explore broader industry work on AI safety and security.

CSA AI Safety →

See the controls in context

Discuss your security requirements.

Discuss your identity estate, an Agent workflow or an edge-device use case with the Thiligence team.

Request a product demo

Opens your email app with the Thiligence team addressed. You choose when to send. If your device has no email app, write to [email protected].