Agentic workflows in cloud-native environments demand robust identity and authorization. This session explores how to move beyond hard-coded credentials by assigning trusted, granular identities to agents acting on behalf of users. We'll dive into strategies for establishing traceability, enforcing least privilege, and enabling auditable decision-making within a zero-trust architecture.

Focusing on shared agents and tool-calling patterns, we'll demonstrate how SPIRE’s workload identity integrates with user identity to support secure delegation and dynamic, context-aware authorization. You’ll learn how to safeguard agent interactions with external tools and data sources through identity propagation and policy enforcement.

Through a real-world case study using Llama Stack and the extended Model Context Protocol (MCP), attendees will gain actionable insights to build secure, identity-aware agentic platforms ready for production use.