Enterprise identity used to have a fairly stable center of gravity. A user authenticated. An application received a token. The token carried scopes or claims. The backend enforced what that application was allowed to do. That model was never trivial, but it was legible. Agents are making it less so. An AI agent is not just another software client. It can plan, delegate, chain tools, invoke other a
Every AI app I've shipped recently rewrote the same plumbing. The OAuth dance for Slack. Encrypted storage for an API key. Refresh-token logic that finally fails on the 3rd call after an hour. Wiring up an MCP client to a server behind a bearer token someone pasted into a Notion page.