Topic

Machine and Workload Identity

Assigning verifiable, usually short-lived cryptographic identities to non-human actors such as services, workloads and automated agents so their requests can be attributed and scoped.

Current clusters

science1 publisher

NIST traces the agent accountability gap to users handing over their own credentials

Drawing on public comments to its NCCoE concept paper, NIST argues that each agent needs its own identifier and entitlements, and notes that the enterprise protocols for delegating that access already exist.

Publishers:nist.gov

Reality

Evidence55
Adoption: Insufficient
Hype gap+10
Incentives35
Confidence58