Identity and authorization brokerage across trust domains continues to be a challenging problem. When agents interact, we see an evolution of prior models where service accounts or users in one domain assume roles in another to execute tasks and APIs. With the rise of autonomous agents, this model extends to agents invoking other agents or MCP servers across domains using a brokered trust framework.

In this case study, we demonstrate a cross-domain, multi-agent architecture enabling secure delegation, dynamic identity propagation, and fine-grained authorization. Using emerging standards such as XAA and verifiable credentials, we show how agents exchange tokens across identity providers, enforce policy-based access control, and maintain auditable delegation chains.

Participants will gain practical insights into building zero-trust agent systems that operate securely across enterprise boundaries, with governance, provenance, and dynamic scoping built in.