The De-Provisioning Gap in Identity Management for Agentic AI

• Fernanda Lauck Jablonski IFRS
• Fernanda L. Müller UFSC
• Julio Ribeiro Sant Ana IFRS
• Yuri H. Lima Schoenardie IFRS
• Kléber H. Cardoso da Silva IFRS
• Frederico Schardong UFSC

DOI: https://doi.org/10.5753/sbseg_estendido.2026.33354

Resumo

Various proposals have emerged to address challenges related to identity, authentication, and authorization in agentic systems. Given this context, this article compiles key proposals, such as OIDC-A, SPIFFE, A-JWT, A2A, and LDP, and compares them based on five criteria derived from the “Identity Management for Agentic AI” white paper. The results show that, although current proposals are robust in specific areas, none satisfies all analyzed criteria. The main limitation is the lack of rapid, verifiable de-provisioning, highlighting challenges in the reliable revocation of identities and permissions in agentic AI.

Referências

Bandi, A., Kongari, B., Naguru, R., Pasnoor, S., and Vilipala, S. V. (2025). The rise of agentic ai: A review of definitions, frameworks, architectures, applications, evaluation metrics, and challenges. Future Internet, 17(9):404. DOI: 10.3390/fi17090404.

Garzon, S. R., Vaziry, A., Kuzu, E. M., Gehrmann, D. E., Varkan, B., Gaballa, A., and Küpper, A. (2025). Ai agents with decentralized identifiers and verifiable credentials. arXiv preprint. [link].

Google (2026). Agent2Agent (A2A) Protocol. [link].

Goswami, A. (2025). Agentic jwt: A secure delegation protocol for autonomous ai agents. arXiv preprint. [link].

Nagabhushanaradhya, S. (2025). Openid connect for agents (oidc-a) 1.0: A standard extension for llm-based agent identity and authorization. arXiv preprint. DOI: 10.48550/arXiv.2509.25974.

Prakash, S. (2026). Ldp: An identity-aware protocol for multi-agent llm systems. [link].

South, T. et al. (2025). Identity management for agentic ai: The new frontier of authorization, authentication, and security for an ai agent world. OpenID Foundation Whitepaper. DOI: 10.48550/arXiv.2510.25819.

SPIFFE (2026). Spiffe documentation. [link].