standard
Standard used for the on-behalf-of exchange that converts agent context into a user-scoped Salesforce access token.
No evidence-backed relationships are recorded.
Auth0's documentation gives middle-tier services and MCP servers an RFC 8693 route to call downstream APIs as the user. The token carries the delegation chain, and the exchange has its own rate ceiling.
Reality
Traefik Labs says its Sovereign Trust Plane, generally available by September 30, commits gateway logs to a transparency log and issues each agent an assertion naming both the agent and the person it acts for.
Reality
The GA release registers KAGENT_STS_RESOURCE and KAGENT_STS_AUDIENCE with descriptions that name the RFC, then defaults both to empty, and whether that default is an exposure depends on what your own STS hands back.
Reality
The token standards for delegated machine authority are older than the agent boom, yet nothing portable records how far a mandate extends once it crosses company lines, which leaves accountability for a committed purchase unsettled.
Reality
A PingFederate write-up wires RFC 8693 token exchange to a SPIRE JWT-SVID so neither the user's token nor the workload's proof can stand in for the other. The lifetimes tell you where the risk sits.
Reality
A new Bedrock AgentCore pattern from AWS treats the agent as an orchestrator with no say over access, pushing per-user enforcement down to DynamoDB, Knowledge Bases and Salesforce.
Reality