IETF WIMSE · Guidance
AI Identity Management System (AIMS)
Best practices for authenticating and authorizing AI agents with WIMSE and OAuth 2.0, and the gaps those building blocks leave when an agent acts for a user or for itself.
Working group draftWorking group document, intended Informational; adopted 2026-09-09 from draft-klrc-aiagent-authCanonical documentwimse-aims
Revisions
- draft-00current
Adopted by the WIMSE working group; replaces draft-klrc-aiagent-auth.
- draft-klrc-03superseded
- draft-klrc-00superseded
Relations 4
AI Identity Management System (AIMS) builds on 1
- Workload Identity in a Multi System Environment (WIMSE) ArchitectureWG draftApplies WIMSE workload identity to AI agents.Source
AI Identity Management System (AIMS) references 2
- The OAuth 2.0 Authorization FrameworkpublishedReviews how OAuth 2.0 grants apply when an agent acts for a user.Source
- OAuth 2.0 Token ExchangepublishedToken exchange is one of the building blocks it evaluates for agent delegation.Source
AI Identity Management System (AIMS) solves the same problem as 1
- WIMSE Applicability for AI AgentsdraftBoth describe how WIMSE applies to AI agents. AIMS is the working group's adopted document with a best-practices scope; the applicability draft is an individual proposal that also binds the agent to an accountable user or organisation.
Defines in the shared model
No features of this document are recorded yet. Features are what the atlases observe and the explorer cites; they are added as the products need them.