<div dir="auto">At the most fundamental level we need to agree on what autonomy means for AI agents. Does that mean there is no logging of their behaviors? No monitoring? No failure handling? No intervention if “something goes wrong”? My gut feeling is that AI agents should always be monitored by humans as - and Ayesha said it - there is no guarantee that they will behave in the same way twice for the same requests. </div><div dir="auto"><br></div><div dir="auto">Then - getting philosophical - can we agree that every AI agent should always have an ultimately responsible human owner? </div><div dir="auto"><br></div><div dir="auto">Until we agree on fundamentals like this one, we won’t get very far on defining AIIM standards. </div><div dir="auto"><br></div><div dir="auto">Eleanor. </div><div><br><div class="gmail_quote gmail_quote_container"><div dir="ltr" class="gmail_attr">On Sun, Jul 20, 2025 at 1:44 PM Lombardo, Jeff via Openid-aiim <<a href="mailto:openid-aiim@lists.openid.net">openid-aiim@lists.openid.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="FR-CA" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="m_5817149226882384460WordSection1">
<p class="MsoNormal"><span lang="EN-CA" style="font-size:11.0pt">I think we can thank Ayesha for putting forward the idea of baes that can define the relation in between an human and an agent, an agent and a resource.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-CA" style="font-size:11.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-CA" style="font-size:11.0pt">There is space for improvement on this first Draft for sure, Ayesha candidly opened her text and requested feedback from this group.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-CA" style="font-size:11.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-CA" style="font-size:11.0pt">Maybe the best approach is to propose new formulation for the mental model and text description of it, with at heart to remind that this Community Group is here to expose
and document the current state and what needs to be done for the best state with whatever exist today or need to be created tomorrow.<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-CA" style="font-size:11.0pt"><u></u> <u></u></span></p>
<p class="MsoNormal"><span lang="EN-CA" style="font-size:11.0pt">In this vein (pun intended), I think we should:<br>
- comment wherever needed on Ayesha document to make it more robust<br>
- start a new document on Agentic Assurance Levels<u></u><u></u></span></p>
<p class="MsoNormal"><span lang="EN-CA" style="font-size:11.0pt"><u></u> <u></u></span></p>
<div>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Amazon Ember Heavy",sans-serif">Jean-François “<span style="color:#e97132">Jeff</span>” Lombardo</span></b><span> </span><span style="font-size:10.0pt;font-family:"Amazon Ember Light",sans-serif">|<span style="color:gray">
</span><span style="color:#e97132">Amazon Web Services</span></span><span style="font-size:10.0pt;font-family:"Amazon Ember Light",sans-serif;color:#e97132"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:4.0pt;font-family:"Amazon Ember Light",sans-serif;color:gray"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Amazon Ember Light",sans-serif;color:gray">Architecte Principal de Solutions, Spécialiste de Sécurité<br>
Principal Solution Architect, Security Specialist<br>
Montréal, Canada<u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span lang="EN-CA" style="font-size:13.5pt;font-family:"Wingdings 2"">(</span><span lang="EN-CA" style="font-size:10.0pt;font-family:"Amazon Ember Light",sans-serif;color:gray">
</span><span style="font-size:10.0pt;font-family:"Amazon Ember Light",sans-serif;color:gray">+1 514 778 5565<br>
<br>
<u></u><u></u></span></p>
<p class="MsoNormal"><i><span style="font-size:10.0pt;font-family:"Amazon Ember Light",sans-serif;color:gray">Commentaires à propos de notre échange?
</span></i><i><span lang="EN-US" style="font-size:10.0pt;font-family:"Amazon Ember Light",sans-serif;color:gray">Exprimez-vous
</span></i><span><a href="https://urldefense.com/v3/__https:/feedback.aws.amazon.com/?ea=jeffsec&fn=Jean*20Francois&ln=Lombardo__;JQ!!Pe07N362zA!0k9CkAV8Djpw_8EfIAKrbhP3TQrJr0oMnznlUgBJ3V3NoEk6hihx7dNHnQuejn6SSH2CP8Iow3G-tTzppHeg$" target="_blank"><i><span lang="EN-US" style="font-size:10.0pt;font-family:"Amazon Ember Light",sans-serif;color:#467886">ici</span></i></a></span><i><span lang="EN-US" style="font-size:10.0pt;font-family:"Amazon Ember Light",sans-serif;color:gray">.<u></u><u></u></span></i></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:4.0pt;font-family:"Amazon Ember Light",sans-serif;color:gray"><u></u> <u></u></span></p>
<p class="MsoNormal"><i><span lang="EN-US" style="font-size:10.0pt;font-family:"Amazon Ember Light",sans-serif;color:gray">Thoughts on our interaction? Provide feedback
</span></i><span><a href="https://urldefense.com/v3/__https:/feedback.aws.amazon.com/?ea=jeffsec&fn=Jean*20Francois&ln=Lombardo__;JQ!!Pe07N362zA!0k9CkAV8Djpw_8EfIAKrbhP3TQrJr0oMnznlUgBJ3V3NoEk6hihx7dNHnQuejn6SSH2CP8Iow3G-tTzppHeg$" target="_blank"><i><span lang="EN-US" style="font-size:10.0pt;font-family:"Amazon Ember Light",sans-serif;color:#467886">here</span></i></a></span><i><span lang="EN-US" style="font-size:10.0pt;font-family:"Amazon Ember Light",sans-serif;color:gray">.<u></u><u></u></span></i></p>
</div>
<p class="MsoNormal"><span lang="EN-CA" style="font-size:11.0pt"><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Openid-aiim <<a href="mailto:openid-aiim-bounces@lists.openid.net" target="_blank">openid-aiim-bounces@lists.openid.net</a>>
<b>On Behalf Of </b>Tom Jones via Openid-aiim<br>
<b>Sent:</b> July 20, 2025 10:29 PM<br>
<b>To:</b> Eve Maler <<a href="mailto:eve@vennfactory.com" target="_blank">eve@vennfactory.com</a>><br>
<b>Cc:</b> Tom Jones <<a href="mailto:thomasclinganjones@gmail.com" target="_blank">thomasclinganjones@gmail.com</a>>; <a href="mailto:peace@acm.org" target="_blank">peace@acm.org</a>; <a href="mailto:openid-aiim@lists.openid.net" target="_blank">openid-aiim@lists.openid.net</a><br>
<b>Subject:</b> RE: [EXT] [Openid-aiim] IAM needs for Agentic AI and Path Forward<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<table border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr style="height:15.25pt">
<td width="1123" valign="top" style="width:842.35pt;border:solid #ed7d31 1.5pt;padding:0cm 5.4pt 0cm 5.4pt;height:15.25pt">
<p><strong><span style="font-family:"Aptos",sans-serif;color:black;background:#ffff99">CAUTION</span></strong><span style="color:black;background:#ffff99">: This email originated from outside of the organization. Do not click links or open attachments unless
you can confirm the sender and know the content is safe.</span><u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<table border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr style="height:15.25pt">
<td width="1123" valign="top" style="width:842.35pt;border:solid #ed7d31 1.5pt;padding:0cm 5.4pt 0cm 5.4pt;height:15.25pt">
<p><strong><span style="font-family:"Aptos",sans-serif;color:black;background:#ffff99">AVERTISSEMENT</span></strong><span style="color:black;background:#ffff99">: Ce courrier électronique provient d’un expéditeur externe. Ne cliquez sur aucun lien et n’ouvrez
aucune pièce jointe si vous ne pouvez pas confirmer l’identité de l’expéditeur et si vous n’êtes pas certain que le contenu ne présente aucun risque.</span><u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<table border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse">
<tbody>
<tr style="height:15.25pt">
<td width="1123" valign="top" style="width:842.35pt;border:solid #ed7d31 1.5pt;padding:0cm 5.4pt 0cm 5.4pt;height:15.25pt">
<p><strong><span style="font-family:"Aptos",sans-serif;color:black;background:#ffff99">CAUTION</span></strong><span style="color:black;background:#ffff99">: This email originated from outside of the organization. Do not click links or open attachments unless
you can confirm the sender and know the content is safe.</span><u></u><u></u></p>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<div>
<p class="MsoNormal">Those ideas are completely broken.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">If an agent, on behalf of a legal person, is allowed to order and pay for goods, then a legal contract was created and satisfied.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Anything else is not agency.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">So the question is, do we have an agent or not?<u></u><u></u></p>
</div>
<table border="0" cellspacing="3" cellpadding="0">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt"></td>
</tr>
</tbody>
</table>
<div>
<p class="MsoNormal">.<a href="https://www.law.cornell.edu/wex/agent" target="_blank">https://www.law.cornell.edu/wex/agent</a><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#38761d;background:#f2f2f2">Peace ..tom jones</span><u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Sun, Jul 20, 2025 at 9:56<span style="font-family:"Arial",sans-serif"> </span>AM Eve Maler <<a href="mailto:eve@vennfactory.com" target="_blank">eve@vennfactory.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal">Feeling philosophical today: Is there room to square this circle?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">There’s an emerging field of relational AI (vs. transactional — behaviors vs. actions). I’ve been talking to the <a href="https://kaystoner.substack.com" target="_blank">developer</a> of a number of custom GPTs that are aligned with very
precisely drawn personas — and, yes, have also been playing with some of them. The outputs are indeed variable but the behaviors are designed to provide certain kinds of interactive support. Their design also includes some guardrails and some level of transparency.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Maybe what needs to come first, before we can trust a high-autonomy-level transactional agent, is measurable behavioral alignment with their human delegator (Agentic Assurance Level? :-) ). Perhaps only then can we start to assess the alignment
of any actions that agent takes.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">(Human delegates are not immune to misalignment with their delegator, of course, which is why agency law and the concept of fiduciary duty exist. I doubt AI agents will win humanlike legal status any time soon, but if they are ever to get
anywhere near it, they’ll need to solve these sorts of issues.)<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Eve<u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal"><img border="0" src="cid:ii_1982ac7df9fad7999131" style="width:200px;max-width:100%"><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><br>
<br>
</span><u></u><u></u></p></div></div></blockquote></div></div></div></div></div></div><div lang="FR-CA" link="blue" vlink="purple" style="word-wrap:break-word"><div class="m_5817149226882384460WordSection1"><div><div><div><div><blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm"><div><div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"SpaceGrotesk-Medium",serif;color:#476458">Eve Maler, president and founder</span><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><u></u><u></u></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"SpaceGrotesk-Medium",serif;color:#476458">Cell and Signal <a href="tel:+1-425-345-6756" target="_blank">+1 (425) 345-6756</a></span><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:black"><u></u><u></u></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><br>
<br>
<u></u><u></u></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On Jul 19, 2025, at 12:33<span style="font-family:"Arial",sans-serif"> </span>PM, Tom Jones via Openid-aiim <<a href="mailto:openid-aiim@lists.openid.net" target="_blank">openid-aiim@lists.openid.net</a>> wrote:<u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<div>
<p>non-deterministic agents do present serious challenges to <strong><span style="font-family:"Aptos",sans-serif">trust</span></strong>,
<strong><span style="font-family:"Aptos",sans-serif">security</span></strong>, and
<strong><span style="font-family:"Aptos",sans-serif">governance</span></strong>. In domains like digital identity, law, finance, and public infrastructure,
<strong><span style="font-family:"Aptos",sans-serif">unpredictability</span></strong> isn't just inconvenient—it’s potentially
<strong><span style="font-family:"Aptos",sans-serif">unacceptable</span></strong>. Let’s break down why:<u></u><u></u></p>
<h3><span style="font-family:"Segoe UI Emoji",sans-serif">⚠️</span> <strong><span style="font-family:"Aptos",sans-serif">Why Non-Determinism Breeds Unacceptability</span></strong><u></u><u></u></h3>
<ul type="disc">
<li><strong><span style="font-family:"Aptos",sans-serif">Inconsistent behavior</span></strong>: Agents that act differently under the same conditions can’t be reliably audited or certified.<u></u><u></u></li><li><strong><span style="font-family:"Aptos",sans-serif">Untraceable outputs</span></strong>: It becomes hard to pinpoint cause, responsibility, or compliance status.<u></u><u></u></li><li><strong><span style="font-family:"Aptos",sans-serif">Vulnerability to manipulation</span></strong>: Adversaries can exploit probabilistic logic to induce unwanted outcomes.<u></u><u></u></li><li><strong><span style="font-family:"Aptos",sans-serif">Loss of control</span></strong>: Especially in systems involving user consent or legal transactions, determinism enables meaningful boundaries.<u></u><u></u></li></ul>
<div>
<p class="MsoNormal">The above is what a bing bot thinks of this idea. I agree with it.<u></u><u></u></p>
</div>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#38761d;background:#f2f2f2">Peace ..tom jones</span><u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Sat, Jul 19, 2025 at 10:19<span style="font-family:"Arial",sans-serif"> </span>AM Ayesha Dissanayaka <<a href="mailto:ayshsandu@gmail.com" target="_blank">ayshsandu@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<p class="MsoNormal">Hi Tom, <u></u><u></u></p>
<div>
<p class="MsoNormal"><br>
Thank you for your input. Of course, defining an agent is a top priority when considering IAM. It's the very first term in the <a href="https://github.com/openid/cg-ai-identity-management/blob/main/deliverable/taxonomy.md" target="_blank"><span style="font-size:11.0pt;font-family:"Arial",sans-serif">taxonomy
document</span></a> that the CG is constructing. <span style="font-family:"Segoe UI Emoji",sans-serif">😃</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Major AI framework providers have their definitions for AI agents, as I tried to summarize
<a href="https://docs.google.com/document/d/1PhWC4KRO00kOPUW113ldG06Vii5dZjW3ljiV1tA0GCc/edit?tab=t.1iyru8xdjt9u" target="_blank">
here.</a>. We can draw some inspiration from them when constructing a definition for the AI agents in the context of IAM for Agents. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><br>
On your suggestion for the agent definition, the term "consistent behavior" might not go well with an agent, as agents are, by design, undeterministic and dynamic. If you ask an agent to do the same thing twice, there is a fair chance that it will do the task
differently, unlike a traditional application or a workload. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Sat, Jul 19, 2025 at 12:19<span style="font-family:"Arial",sans-serif"> </span>AM Tom Jones <<a href="mailto:thomasclinganjones@gmail.com" target="_blank">thomasclinganjones@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal">you talk about giving ai agents and id, but there appears to be no definition of what an agent must be to deserve an ID.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">Let's do that - how about this.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Roboto;color:#444746;letter-spacing:.15pt">An agent is a persistent collection of software and language models together in a workload with a consistent behavior (identity) for the duration of the
validity of an assigned Identifier.<br>
An agent can be delegated authority by Entities, that is by named objects.</span><u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:Roboto;color:#444746;letter-spacing:.15pt"><br>
<br>
</span><u></u><u></u></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Segoe UI",sans-serif;color:#38761d;background:#f2f2f2">Peace ..tom jones</span><u></u><u></u></p>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Fri, Jul 18, 2025 at 10:49<span style="font-family:"Arial",sans-serif"> </span>AM Ayesha Dissanayaka via Openid-aiim <<a href="mailto:openid-aiim@lists.openid.net" target="_blank">openid-aiim@lists.openid.net</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<p class="MsoNormal">Hi All, <u></u><u></u></p>
<div>
<p class="MsoNormal"><br>
Thanks, everyone, for your comments on the thoughts on the doc. And I had a great time discussing this during the CG meeting yesterday. Following up on our <a href="https://github.com/openid/cg-ai-identity-management/wiki/20250717-%E2%80%90-Meeting-notes:-July-17,-2025#ayeshas-agent-identity-discussion-iam-need-for-agentic-ai---brainstorming" target="_blank">discussion
i</a>n the last CG meeting, I am moving this conversation to email so that it's easier to comment and gather thoughts from everyone. Please refer to <a href="https://docs.google.com/document/d/1PhWC4KRO00kOPUW113ldG06Vii5dZjW3ljiV1tA0GCc/edit?tab=t.0" target="_blank">this</a><a href="https://docs.google.com/document/d/1PhWC4KRO00kOPUW113ldG06Vii5dZjW3ljiV1tA0GCc/edit?tab=t.0" target="_blank">
documen</a>t for detailed information. <br>
<br>
<u></u><u></u></p>
<p style="margin-right:0cm;margin-bottom:12.0pt;margin-left:0cm">
<span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#1a1c1e">The complexity of AI-native applications, when considering GenAI, has progressed in added stages of complexity :</span><u></u><u></u></p>
<ol style="margin-top:0cm" start="1" type="1">
<li style="color:#1a1c1e;margin-top:11.0pt;margin-bottom:0cm;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<b><span style="font-size:10.5pt;font-family:"Arial",sans-serif">Task-Specific AI:</span></b><span style="font-size:10.5pt;font-family:"Arial",sans-serif"> Simple applications using LLMs for specific tasks like text generation.<u></u><u></u></span></li></ol>
<div>
<ol start="2" type="1">
<li class="MsoNormal" style="color:#1a1c1e;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<b><span style="font-size:10.5pt;font-family:"Arial",sans-serif">RAG-Enabled AI:</span></b><span style="font-size:10.5pt;font-family:"Arial",sans-serif"> Applications that can access and synthesize external knowledge bases.<u></u><u></u></span></li></ol>
</div>
<div>
<ol start="3" type="1">
<li class="MsoNormal" style="color:#1a1c1e;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<b><span style="font-size:10.5pt;font-family:"Arial",sans-serif">Apps that include Agents:</span></b><span style="font-size:10.5pt;font-family:"Arial",sans-serif"> Applications where agents can make decisions and execute tasks on a user's behalf.<u></u><u></u></span></li></ol>
</div>
<ol style="margin-top:0cm" start="4" type="1">
<li style="color:#1a1c1e;margin-top:0cm;margin-bottom:11.0pt;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<b><span style="font-size:10.5pt;font-family:"Arial",sans-serif">Agent Teammates:</span></b><span style="font-size:10.5pt;font-family:"Arial",sans-serif"> The current frontier, where agents act on their own accord and collaborate with humans in shared workflows.<u></u><u></u></span></li></ol>
<p style="margin-right:0cm;margin-bottom:0cm;margin-left:0cm">
<span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#1a1c1e">This evolution presents exciting opportunities, but it also brings a new set of challenges, particularly in how we manage identity and access. To ensure we build a secure and trustworthy
ecosystem for these agents, we need to establish a robust set of IAM best practices.</span><u></u><u></u></p>
<p style="margin-right:0cm;margin-bottom:14.0pt;margin-left:0cm">
<span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#1a1c1e">Here are some of the key requirements that we should be thinking about:</span><u></u><u></u></p>
<ul style="margin-top:0cm" type="disc">
<li style="color:#1a1c1e;margin-top:11.0pt;margin-bottom:0cm;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<b><span style="font-size:10.5pt;font-family:"Arial",sans-serif">Seamless Integration:</span></b><span style="font-size:10.5pt;font-family:"Arial",sans-serif"> Agents need to interact with existing systems, like those using OAuth, with minimal disruption.<u></u><u></u></span></li></ul>
<div>
<ul type="disc">
<li class="MsoNormal" style="color:#1a1c1e;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<b><span style="font-size:10.5pt;font-family:"Arial",sans-serif">Flexible Action:</span></b><span style="font-size:10.5pt;font-family:"Arial",sans-serif"> Agents should be able to act on their own or securely on behalf of a user or another entity.<u></u><u></u></span></li></ul>
</div>
<div>
<ul type="disc">
<li class="MsoNormal" style="color:#1a1c1e;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<b><span style="font-size:10.5pt;font-family:"Arial",sans-serif">Just-in-Time Permissions:</span></b><span style="font-size:10.5pt;font-family:"Arial",sans-serif"> To mitigate risks from the non-deterministic nature of agents, we need mechanisms for granting
just-enough access, precisely when it's needed.<u></u><u></u></span></li></ul>
</div>
<div>
<ul type="disc">
<li class="MsoNormal" style="color:#1a1c1e;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<b><span style="font-size:10.5pt;font-family:"Arial",sans-serif">Clear Accountability:</span></b><span style="font-size:10.5pt;font-family:"Arial",sans-serif"> There must be a designated responsible party for an agent's actions.<u></u><u></u></span></li></ul>
</div>
<div>
<ul type="disc">
<li class="MsoNormal" style="color:#1a1c1e;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<b><span style="font-size:10.5pt;font-family:"Arial",sans-serif">Auditable Traceability:</span></b><span style="font-size:10.5pt;font-family:"Arial",sans-serif"> All agent actions should be traceable back to their identity and the delegating authority.<u></u><u></u></span></li></ul>
</div>
<div>
<ul type="disc">
<li class="MsoNormal" style="color:#1a1c1e;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<b><span style="font-size:10.5pt;font-family:"Arial",sans-serif">Agent-Specific Controls:</span></b><span style="font-size:10.5pt;font-family:"Arial",sans-serif"> Resource servers may need to identify and apply specific controls for actions initiated by agents.<u></u><u></u></span></li></ul>
</div>
<ul style="margin-top:0cm" type="disc">
<li style="color:#1a1c1e;margin-top:0cm;margin-bottom:11.0pt;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<b><span style="font-size:10.5pt;font-family:"Arial",sans-serif">Lifecycle Management:</span></b><span style="font-size:10.5pt;font-family:"Arial",sans-serif"> We need clear governance for the entire lifecycle of an agent, from onboarding to decommissioning.<u></u><u></u></span></li></ul>
<p style="margin-right:0cm;margin-bottom:14.0pt;margin-left:0cm">
<span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#1a1c1e">This is a pivotal moment for us to lead the way in defining the standards and best practices that will shape the future of agentic AI. To get the ball rolling, let's consider a few
key questions:</span><u></u><u></u></p>
<ol style="margin-top:0cm" start="1" type="1">
<li style="color:#1a1c1e;margin-top:11.0pt;margin-bottom:0cm;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<span style="font-size:10.5pt;font-family:"Arial",sans-serif">Where can we apply <b>
existing standards and best practices</b>?<u></u><u></u></span></li></ol>
<div>
<ol start="2" type="1">
<li class="MsoNormal" style="color:#1a1c1e;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<span style="font-size:10.5pt;font-family:"Arial",sans-serif">What are the <b>novel problems</b> that existing solutions can't address?<u></u><u></u></span></li></ol>
</div>
<div>
<ol start="3" type="1">
<li class="MsoNormal" style="color:#1a1c1e;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<span style="font-size:10.5pt;font-family:"Arial",sans-serif">Where do we need to
<b>extend current standards or innovate</b>?<u></u><u></u></span></li></ol>
</div>
<div>
<ol start="4" type="1">
<li class="MsoNormal" style="color:#1a1c1e;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<span style="font-size:10.5pt;font-family:"Arial",sans-serif">How should an <b>agent's identity</b> be defined and structured?<u></u><u></u></span></li></ol>
</div>
<div>
<ol start="5" type="1">
<li class="MsoNormal" style="color:#1a1c1e;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<span style="font-size:11.0pt;font-family:"Arial",sans-serif">Develop a shared vocabulary for scenarios, actors, and challenges.</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif"><u></u><u></u></span></li></ol>
</div>
<div>
<ol start="5" type="1">
<ul type="circle">
<li class="MsoNormal" style="color:#1a1c1e;vertical-align:baseline;font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;white-space:pre-wrap">
<span style="font-size:11.0pt;font-family:"Arial",sans-serif">Happening at <a href="https://github.com/openid/cg-ai-identity-management/blob/main/deliverable/taxonomy.md" target="_blank">
https://github.com/openid/cg-ai-identity-management/blob/main/deliverable/taxonomy.md</a> as initiated at AIIM-CG<u></u><u></u></span></li></ul>
</ol>
</div>
<p style="margin-right:0cm;margin-bottom:0cm;margin-left:0cm">
<span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#1a1c1e">Please share your thoughts, any references, and any ideas you might have on the above.</span><u></u><u></u></p>
<p style="margin-right:0cm;margin-bottom:14.0pt;margin-left:0cm">
<span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#1a1c1e">Looking forward to continuing the discussion.</span><u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Wed, Jul 9, 2025 at 10:04<span style="font-family:"Arial",sans-serif"> </span>PM Ayesha Dissanayaka <<a href="mailto:ayshsandu@gmail.com" target="_blank">ayshsandu@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal">Thanks, Alex, for the comments. <u></u><u></u></p>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Mon, Jul 7, 2025 at 8:41<span style="font-family:"Arial",sans-serif"> </span>PM Alex Babeanu <<a href="mailto:alex.babeanu@indykite.com" target="_blank">alex.babeanu@indykite.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<p class="MsoNormal">Added some comments to the doc, thanks for sharing Ayesha. This could serve as a starting point for discussion...
<u></u><u></u></p>
<div>
<p class="MsoNormal">A side question, could we use a common share drive to such docs or material ?<u></u><u></u></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal">Sure, if the CG has such a shared space, I can move the doc there. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><a href="mailto:atul@sgnl.ai" target="_blank"><span style="font-size:11.5pt;font-family:"Arial",sans-serif;color:#0b4c8c">Athul</span></a>, do we have any such for the AIIM CG?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Cheers,<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">./\.<u></u><u></u></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<div>
<p class="MsoNormal">On Thu, Jul 3, 2025 at 10:56<span style="font-family:"Arial",sans-serif"> </span>AM Ayesha Dissanayaka <<a href="mailto:ayshsandu@gmail.com" target="_blank">ayshsandu@gmail.com</a>> wrote:<u></u><u></u></p>
</div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<p class="MsoNormal">Hi All, <u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">It's great to be part of this exciting community to discuss IAM for the Agentic Era. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Bubbling up a discussion in the Slack channel, I'm sharing this analysis on emerging
<a href="https://docs.google.com/document/d/1PhWC4KRO00kOPUW113ldG06Vii5dZjW3ljiV1tA0GCc/edit?tab=t.0#heading=h.secnaj745bir" target="_blank">
IAM challenges from Agentic AI</a> systems that now function as autonomous workforce members, and how we can approach addressing them.<u></u><u></u></p>
<p>I'd love to hear working groups' thoughts on this, and collaborate to extend this work to commonly identify the IAM problems we need to be solving for agentic AI systems and how.<u></u><u></u></p>
<p>I'm happy to discuss these findings at an upcoming meeting. Till then, let's collaborate on the mailing list and in the
<a href="https://docs.google.com/document/d/1PhWC4KRO00kOPUW113ldG06Vii5dZjW3ljiV1tA0GCc/edit?tab=t.0#heading=h.secnaj745bir" target="_blank">
doc</a> itself.<u></u><u></u></p>
<p>Cheers!<u></u><u></u></p>
<p>- Ayesha<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<p class="MsoNormal">-- <br>
Openid-aiim mailing list<br>
<a href="mailto:Openid-aiim@lists.openid.net" target="_blank">Openid-aiim@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-aiim" target="_blank">https://lists.openid.net/mailman/listinfo/openid-aiim</a><u></u><u></u></p>
</blockquote>
</div>
<div>
<p class="MsoNormal"><br clear="all">
<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal"><span class="m_5817149226882384460gmailsignatureprefix">-- </span><u></u><u></u></p>
<div>
<div>
<table border="0" cellspacing="0" cellpadding="0" width="600" style="width:450.0pt">
<tbody>
<tr>
<td width="44" valign="top" style="width:33.0pt;padding:0cm 12.0pt 0cm 12.0pt">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif"><img border="0" width="71" height="129" style="width:.7416in;height:1.3416in" id="m_5817149226882384460_x0000_i1025" src="https://lh6.googleusercontent.com/t9ujvLE5ixncgTZdMRypM3BVdboAHbvIP0ENG6TwOqyegNnox4CtJXTNCyp7v7u3N-D6hxkZFn_N2GAttGtVtIAJkg7k7kp4K4GJGFH4WjlSfRyE0jXPP9MW1NXgMDVlPV4iZJjt"></span><span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif"><u></u><u></u></span></p>
</td>
<td width="16" style="width:12.0pt;border:none;border-left:solid #d4d4d4 1.0pt;padding:24.0pt 0cm 24.0pt 0cm">
</td>
<td valign="top" style="padding:24.0pt 0cm 24.0pt 0cm">
<p class="MsoNormal"><b><span style="font-size:11.5pt;font-family:"Segoe UI",sans-serif"><br>
Alex Babeanu</span></b><span style="font-size:11.5pt;font-family:"Segoe UI",sans-serif"><br>
</span><span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif">Lead Product Manager, AI Control Suite</span><span style="font-size:11.5pt;font-family:"Segoe UI",sans-serif"><br>
</span><span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif;color:#4c4c4c"><br>
t. +1 604 728 8130<br>
e. <a href="mailto:alex.babeanu@indykite.com" target="_blank"><span style="color:#1155cc">alex.babeanu@indykite.com</span></a> <br>
w. <a href="http://www.indykite.com/" target="_blank"><span style="color:#1155cc">www.indykite.com</span></a></span><span style="font-size:10.0pt;font-family:"Segoe UI",sans-serif"><u></u><u></u></span></p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</blockquote>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal">-- <br>
Openid-aiim mailing list<br>
<a href="mailto:Openid-aiim@lists.openid.net" target="_blank">Openid-aiim@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-aiim" target="_blank">https://lists.openid.net/mailman/listinfo/openid-aiim</a><u></u><u></u></p>
</blockquote>
</div>
</blockquote>
</div>
</blockquote>
</div>
<p class="MsoNormal">-- <br>
Openid-aiim mailing list<br>
<a href="mailto:Openid-aiim@lists.openid.net" target="_blank">Openid-aiim@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-aiim" target="_blank">https://lists.openid.net/mailman/listinfo/openid-aiim</a><u></u><u></u></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</blockquote>
</div>
</div>
</div>
</div>
</div>
</div>
-- <br>
Openid-aiim mailing list<br>
<a href="mailto:Openid-aiim@lists.openid.net" target="_blank">Openid-aiim@lists.openid.net</a><br>
<a href="https://lists.openid.net/mailman/listinfo/openid-aiim" rel="noreferrer" target="_blank">https://lists.openid.net/mailman/listinfo/openid-aiim</a><br>
</blockquote></div></div>