AWS shows AgentCore Gateway performing on-behalf-of token exchange with ServiceNow
AIAWS Machine Learning Blog describes configuring Amazon Bedrock AgentCore Gateway to perform an on-behalf-of (OBO) token exchange with Microsoft Entra ID, so an AI agent can call the ServiceNow REST API while preserving the calling user's identity. The gateway exchanges the agent's token for one scoped to the ServiceNow API connector on each request, and the post says the pattern applies to other OAuth-protected REST APIs.
Source details
AWS Machine Learning Blog · Greg Biegel · aws.amazon.comPublished · added here
Original title: ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway