Skip to content
assaynotes
EN日本語中文

AWS demonstrates OBO token exchange on AgentCore Gateway

Developing1 reports1 sourcesupdated 6 h ago

What happened

AI digest

On 4 November 2026, the AWS Machine Learning Blog published a first-hand report on implementing on-behalf-of (OBO) token exchange for ServiceNow on Amazon Bedrock AgentCore Gateway. According to the report, AgentCore Gateway can be configured for OBO token exchange, allowing AI agents to preserve the originating user's identity when calling ServiceNow REST APIs. This is currently the only report on the matter, with no follow-up developments or inconsistencies with earlier coverage.

Written by AI from the reports · updated 2 h ago

LatestNov 4 00:47
An AWS blog explains that AgentCore Gateway can be configured for OBO token exchange, letting agents preserve user identity when calling ServiceNow APIs.

Timeline

Follow the reports to see the event from each side.

Nov 4
  1. AWS Machine Learning Blog
    ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway

    Learn how to configure Amazon Bedrock AgentCore Gateway for an on-behalf-of (OBO) token exchange with Microsoft Entra ID, so an AI agent can call the ServiceNow REST API while preserving the calling user's identity. AgentCore Gateway performs the exchange natively, with no interceptor Lambda or custom code.

Heat of this event

Not enough continuous observations yet to draw a trend.