Open Source Summit + Embedded Linux Conference North America 2026

Every enterprise has identity management for humans—SSO, MFA, RBAC, audit logs. But AI agents? They run with API keys, no verified identity, no behavioral tracking, no audit trail.

This talk bridges the gap between traditional IAM and the emerging world of autonomous AI agents:

What we learned from human IAM:

- Why identity must be cryptographic, not just credentials

- How least-privilege access control prevents lateral movement

- Why audit trails matter for compliance and incident response

Applying it to AI agents:

- Agent identity: Ed25519 keypairs vs API keys

- Capability-based access: what tools can this agent call?

- Behavioral trust scoring: detecting compromised agents

- MCP server attestation: verifying the tools agents connect to

We'll examine real attack scenarios—agent impersonation, tool injection, privilege escalation—and show how identity-first security prevents them.

Live demo using AIM (Agent Identity Management), an Apache-2.0 open-source platform. All patterns are framework-agnostic and applicable to LangChain, CrewAI, AutoGen, or raw MCP implementations.

Attendees leave with actionable security patterns for their AI agent deployments.