AgentCore Gateway on-behalf-of token exchange with ServiceNow via Entra ID
Overview
AWS Machine Learning Blog describes configuring Amazon Bedrock AgentCore Gateway to perform an on-behalf-of (OBO) token exchange with Microsoft Entra ID, so an AI agent can call the ServiceNow REST API while keeping the calling user's identity.
According to the post, the gateway exchanges the agent's token for one scoped to the ServiceNow API connector on each request. The post says the same pattern applies to other OAuth-protected REST APIs.
Written by AI from the articles below · updated Nov 3, 12:23 PM ET
Check the sources:
Article timeline
The articles in this story. Times are ET.
- AWS Machine Learning BlogOfficialAWS shows AgentCore Gateway performing on-behalf-of token exchange with ServiceNow
AIAWS Machine Learning Blog describes configuring Amazon Bedrock AgentCore Gateway to perform an on-behalf-of (OBO) token exchange with Microsoft Entra ID, so an AI agent can call the ServiceNow REST API while preserving the calling user's identity. The gateway exchanges the agent's token for one scoped to the ServiceNow API connector on each request, and the post says the pattern applies to other OAuth-protected REST APIs.
Heat Trend
Not enough continuous observations to show a trend yet.