Identity Working Groups Meeting Notes - 3/26/26

[jmcisgoo5]

Quick Recap
This meeting focused on the Linux Foundation's Agency project and identity working group discussions. Sarah presented her work on mapping identity conversations across different Linux Foundation projects and foundations, highlighting how Agency could serve as a central collaboration space for implementing and testing agent identity standards. The group discussed Chandrahass's customer use case involving multi-organization agent workflows, where different agents needed varying access levels when communicating across organizations. Manish and Shankar shared their work on brokered identity gateways, particularly focusing on Envoy-based implementations. Ankit provided context on token exchange protocols and KYA (Key for Agent) specifications, explaining how these could address the cross-domain authorization challenges discussed. Mike Jones briefly shared insights from recent ITF meetings in Shenzhen regarding agent identity standards and the need for coordinated interoperability efforts.

Next Steps
Sarah: Publish slides from the ITU workshop to the GitHub repository after the workshop.
Sarah: Collaborate with Identity Working Group members over the next month or two to expand the presentation into a collective blog or white paper, incorporating feedback and additional perspectives.
Manish and Shankar: Send out business logic use cases for the brokered ID gateway by the end of the month for wider review and feedback.
All participants (especially those interested in brokered ID gateway): Review the business logic use cases shared by Manish and Shankar and provide feedback by the end of the month.
Manish: Share the link to the Envoy gateway/token exchange module in the Zoom chat or appropriate group channel.
Julu: Work with Manish to publish volunteer/contributor opportunities for the brokered ID gateway implementation, especially for students seeking opportunities.
Chandrahass (and team): Join Ankit's subgroup (BCR/DCR) to collaborate on dynamic agent identity, token exchange, and inter-domain authorization use cases.
Julu: Connect Chandrahass (and interested parties) with Ankit/Sri's subgroup to work on fine-grained agent-to-agent policy and dynamic authorization challenges.
Mike: Provide a more detailed update on ITF agent identity standardization activities in a subsequent meeting.
Summary
Innovation Team Service Delivery Discussion:
The meeting began with introductions, where Chandrahass from Presidio led the innovation team exploring how to incorporate Agency into their service delivery model. Other participants included Kishan, Sachin from Presidio, Shankar from Lyft's identity team, and Mike Jones from Skyfire who shared insights from the recent ITF meeting in Shenzhen. The group discussed switching to a new Linux Foundation Zoom invite and noted that Amrita was absent due to illness. The meeting was transitioning to discuss Sarah's work on interconnect and an upcoming ITU workshop when the transcript ended.

Linux Foundation Identity Collaboration:
Sarah presented her observations on identity discussions within the Linux Foundation, focusing on how software developers navigate identity challenges in agentic AI applications. She highlighted the need for a central collaboration space, like the Agency Identity Working Group, to test and extend identity standards and protocols. The group discussed payment protocols and identity needs, with Ankit explaining the current fragmented state of payment systems and potential future directions. The team agreed to consider extending their work on agent identities to include payment ecosystems when appropriate.

Cross-Organization Access Control Discussion:
The team discussed two main topics: brokered ID gateways and agent-to-agent communication policies across organizations. Manish and Shankar presented their work on refining business flows for brokered ID gateways using the Envoy gateway, with plans to share business logic use cases by the end of the month for feedback. Chandrahass raised concerns about implementing fine-grained access control between agents from different organizations, particularly when external agents need limited access to tools compared to internal agents. Ankit explained that this use case aligns with ongoing work on token exchange and KYA (Key-Value Authorization) protocols, suggesting that Chandrahass could join existing working groups to help develop solutions. The discussion highlighted the need for evolution in both agent and identity service capabilities to support cross-organization workflows with appropriate access controls.