Tags

57 Tags

The Agent Provider Is the IdP: A Standards Reading of WorkOS auth.md

Authorization Is the Other Half of Executable Intent Evals Made Intent Executable for Verification. A Mission Makes It Executable for Authorization.
Re-Subjecting Is a Mint, Not an Attenuation
Authorization Denied Is No Longer Enough
The Agent Provider Is the IdP: A Standards Reading of WorkOS auth.md
Sessions Are Not Missions Why Agent Harnesses Cannot Own the Mission Layer

Welcome to Control Plane

Authorization Is the Other Half of Executable Intent Evals Made Intent Executable for Verification. A Mission Makes It Executable for Authorization.

The Agent Provider Is the IdP: A Standards Reading of WorkOS auth.md

Authorization Is the Other Half of Executable Intent Evals Made Intent Executable for Verification. A Mission Makes It Executable for Authorization.
Authorization Denied Is No Longer Enough
Sessions Are Not Missions Why Agent Harnesses Cannot Own the Mission Layer
Enterprise SaaS Needs OAuth Federation Now
AAuth Now Has a Mission Layer

Authorization Denied Is No Longer Enough

ID-JAG Beyond the Enterprise IdP

Client Instances Are Actors, Not New Clients

Client Instances Are Actors, Not New Clients

Authorization Is the Other Half of Executable Intent Evals Made Intent Executable for Verification. A Mission Makes It Executable for Authorization.
Re-Subjecting Is a Mint, Not an Attenuation
Authorization Denied Is No Longer Enough
Sessions Are Not Missions Why Agent Harnesses Cannot Own the Mission Layer
Client Context and ID-JAG for Mission-Bound OAuth

Welcome to Control Plane

Enterprise SaaS Needs OAuth Federation Now

SAML at the Post-Quantum Crossroads

Authorization Is the Other Half of Executable Intent Evals Made Intent Executable for Verification. A Mission Makes It Executable for Authorization.

Re-Subjecting Is a Mint, Not an Attenuation
Authorization Denied Is No Longer Enough
SAML at the Post-Quantum Crossroads
The Agent Provider Is the IdP: A Standards Reading of WorkOS auth.md
Sessions Are Not Missions Why Agent Harnesses Cannot Own the Mission Layer

Welcome to Control Plane

Re-Subjecting Is a Mint, Not an Attenuation

Mission-Bound OAuth

SAML at the Post-Quantum Crossroads

Standardize `act` Across Assertion Grants and JWT Access Tokens

Sessions Are Not Missions Why Agent Harnesses Cannot Own the Mission Layer
Open-World OAuth Still Needs Mission Shaping
OAuth for Open-World Ecosystems

Re-Subjecting Is a Mint, Not an Attenuation
Authorization Denied Is No Longer Enough
SAML at the Post-Quantum Crossroads
The Agent Provider Is the IdP: A Standards Reading of WorkOS auth.md
Sessions Are Not Missions Why Agent Harnesses Cannot Own the Mission Layer

Welcome to Control Plane

SAML at the Post-Quantum Crossroads

Standardize `act` Across Assertion Grants and JWT Access Tokens

SAML at the Post-Quantum Crossroads

Sessions Are Not Missions Why Agent Harnesses Cannot Own the Mission Layer
Agents Don't Need Your Passport. They Need Your Authority.
From Passports to Power of Attorney
Governing the Stay, Not Just the Entry

Sessions Are Not Missions Why Agent Harnesses Cannot Own the Mission Layer

Authorization Is the Other Half of Executable Intent Evals Made Intent Executable for Verification. A Mission Makes It Executable for Authorization.
Re-Subjecting Is a Mint, Not an Attenuation
Authorization Denied Is No Longer Enough
The Agent Provider Is the IdP: A Standards Reading of WorkOS auth.md
Client Instances Are Actors, Not New Clients

Standardize `act` Across Assertion Grants and JWT Access Tokens

Re-Subjecting Is a Mint, Not an Attenuation

Client Instances Are Actors, Not New Clients