News for hackers. Stuff that matters.

jbspeakr

jbspeakr on Hacker News

Show HN: Agentic Identity Broker, OAuth Delegation for AI Agents

Posted by jbspeakr on Friday November 06, 2026 @10:07AM
from the show-hn dept.

https://github.com/zalando-incubator/agentic-identity-broker

Hi HN, I’m Jan. I am co-author of the Agentic Identity Broker (AIB), an MIT-licensed OAuth2 broker in the Zalando Incubator, that lets a user give an AI agent scoped, revocable access to MCP services.The broker solves three major challenges that are especially relevant in corporate environments: (A) Enable users to delegate workloads to agents without providing the agents all the user’s tokens....

( Read More... | 4 comments | on HN )
Re:What Is Password Spraying, How It Works and How to Prevent It on Sunday May 14, 2023 @09:13AM (#35937699)
Totally agree on the compromised credential check, hence it‘s also part of my general password policy recommendations [0].

I also agree that IdPs and SSO is commodity nowadays (to speak in Wardley-terms). However, some orgs still have vastly heterogeneous authentication systems. In these situations it might be financially beneficial first do unify and then switch to an off-the-shelf service provider later. OIDC makes it possible.

[0]: https://www.jbspeakr.cc/password-strength-policy-guide/#pass...

Re:Passkeys: The Beginning of the End of the Password on Monday May 08, 2023 @09:44AM (#35861440)
Lots of uncritical media coverage out their and to be fair, I am also quite hyped about killing passwords. Nevertheless there is certain aspects that I believe did not get enough attention yet, the biggest potentially being the switch from knowledge to possession factors.. not sure whether everyone is aware of the potential implications.

Some critical notes on Passkeys: https://www.jbspeakr.cc/fido-passkeys/

Re:Credential Breach Detection: Honeytoken Defence Against Authenticat... on Saturday May 06, 2023 @02:35PM (#35844069)
Discover the power of Honeytokens in credential breach detection, and learn how they bolster defenses against authentication attacks from cybercriminals by improving threat detection.