Every talk about AI agents begins after the interesting part. The agent is already connected: it holds a credential, it can reach the database, and the discussion starts from what it does next. But that secret is the least examined object in modern infrastructure, and in almost every production system running today, it does not belong to the agent at all. It is borrowed. A service account, a pipeline credential, a static string inherited from whatever the application authenticates as. The access decision is not about the agent. It is about a costume the agent is wearing.And this is not only a production concern: the credentials that matter most often sit in build pipelines and evaluation environments, where they are least governed and most useful to an attacker.
This talk argues that every agent must be a first-class principal: an identity in its own right, cryptographically attested, scoped to a single task, and expiring on its own. We will look at how long-lived credentials actually fail in practice: stolen, half-rotated, or simply never revoked, and why each of those is an identity failure rather than a model failure. We will examine the assumptions underpinning conventional identity systems that autonomous actors break, why machine identities now outnumber human ones by two orders of magnitude while every governance control we have built still protects the human, and what any credible identity model must answer: who is this actor and for how long, what may it do and can that authority only narrow, and what did it do and on whose behalf. Prompts are not permission boundaries. Identity is.
Olu is a Solutions Architect at Teleport, where he helps organisations solve one of the hardest problems in security: giving every human, machine, workload and AI agent a cryptographically secured identity. He works with engineering and security teams to design and operationalise that shift end to end at scale, drawing on a background in building secure, resilient cloud-native and hybrid infrastructure. Olu has delivered webinars and spoken at conferences, sharing his perspective on securing identity and access across increasingly complex and heterogeneous environments.
