Secure Authorization for Agentic AI in Multi-Domain Environments

Explore secure authorization mechanisms for agentic AI systems operating across organizational boundaries in this 39-minute conference talk from the Linux Foundation. Learn how to design scalable authorization flows for AI agent collaboration using open standards including OAuth 2.1, Model Context Protocol (MCP), and Agent-to-Agent (A2A) protocols. Begin with single-domain authorization implementations covering authorization code flow, token introspection, and resource protection before advancing to complex multi-domain environments where tokens from one domain cannot be reused in another. Discover how OAuth 2.0 Token Exchange (RFC 8693) enables agents to securely obtain new tokens for downstream services across different trust domains. Watch a practical demonstration using Keycloak that showcases federated authorization in action, providing concrete insights for building secure, interoperable agent infrastructures that can operate effectively across organizational trust boundaries.