‹ Archive
Oauth
Dispatches on oauth for AI agents in financial services.
Read this topic as JSON → Same coverage, ready for agents.
Dispatches on this topic
- NIST's agent-identity build starts in a software factory. The advisor-to-custodian hop isn't on its schedule.
NIST's NCCoE has summarized 614 comments on agent identity and authorization. Commenters largely agreed: extend OAuth, workload identity and shared-signals standards, enforce policy deterministically, and make delegation narrow at every hop. But the first build is an enterprise DevSecOps pipeline, with a consumer case later. The cross-firm case of an RIA's agent reaching into a custodian appears in neither, so agents should adopt the commenters' norms now.