Agents in Enterprise IT

AWS AgentCore Gateway can now pass the user's identity to APIs an agent calls

AWS says AgentCore Gateway runs an on-behalf-of token exchange with Microsoft Entra ID on each request, so ServiceNow applies the calling user's own permissions. Gateways must be set to MCP version 2025-11-25.

Why it matters: Agents that call APIs as themselves break audit trails and per-user access. If yours use a shared service account, AWS offers a pattern that needs no custom code.