CIAM for AI: Authn/Authz for Agents — Michael Grinich, CEO of WorkOS
Source: YouTube · AI Engineer · published Jul 21, 2025 · 20:14
Implementing proper identity frameworks for AI agents is critical as agentic systems become more prevalent, requiring new approaches beyond traditional authentication models 0:15.
Key Takeaways:
• AI agents need headless login, long-lived sessions, and dynamic permissions, creating unique security challenges that differ from traditional authentication 2:29
• Four architectural patterns for agent identity include persona shadowing, delegation chains, capability tokens, and human escalation loops 6:43
• The industry is moving toward middleware solutions to create trust boundaries between agentic code and enterprise systems, with emerging standards like OAuth, GNAP, and OIDC being adapted 15:18
We're rapidly shifting toward a future where 95% of application interactions will be agent-driven rather than human-driven, requiring fundamentally new identity frameworks 17:42.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Identity & Access Management. Commonly maps to: Identity and Access Management (IAM), Security Architecture and Engineering. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[Music] My talk that was up here said Syiam for AI. Um that's a bit of industry lingo. It stands for customer identity and access management. Really what I'm going to be talking about here is O login for agents. Um, we just heard from uh from someone from Hex. Hex is actually a work OS customer. We provide identity services to lots and lots of different SAS businesses, B2B products and our fastest growing segment is AI companies. Turns out AI products need identity and authentication. So we have a lot of experience seeing this. So I'm going to talk about um how you can bring identity specifically to aentic based applications what we're seeing in the world today. So to start I'll just start with a little bit of a story. Um, I want you to imagine that you're uh building like a a new chat too…