Enterprise identity used to have a fairly stable center of gravity.

A user authenticated. An application received a token. The token carried scopes or claims. The backend enforced what that application was allowed to do.

That model was never trivial, but it was legible.

Agents are making it less so.

An AI agent is not just another software client. It can plan, delegate, chain tools, invoke other agents, operate over time, and make decisions inside partially autonomous loops. It may act on behalf of a user in one moment, on behalf of a service in the next, and through a brokered protocol hop after that.…