AWS demonstrates OBO token exchange on AgentCore Gateway
What happened
On 4 November 2026, the AWS Machine Learning Blog published a first-hand report on implementing on-behalf-of (OBO) token exchange for ServiceNow on Amazon Bedrock AgentCore Gateway. According to the report, AgentCore Gateway can be configured for OBO token exchange, allowing AI agents to preserve the originating user's identity when calling ServiceNow REST APIs. This is currently the only report on the matter, with no follow-up developments or inconsistencies with earlier coverage.
Written by AI from the reports · updated 3 h ago
Timeline
Follow the reports to see the event from each side.
- AWS Machine Learning BlogServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway
Learn how to configure Amazon Bedrock AgentCore Gateway for an on-behalf-of (OBO) token exchange with Microsoft Entra ID, so an AI agent can call the ServiceNow REST API while preserving the calling user's identity. AgentCore Gateway performs the exchange natively, with no interceptor Lambda or custom code.
Heat of this event
Current heat 8·Peak in the comparable range 9（Nov 4 05:00）·Change over 24 hours in the comparable range –
The trend compares only the same accounts observed without a break, so its range can be narrower than the current heat count. Move the pointer or tap the chart to see each hour; with a keyboard, use the left and right arrow keys.