What changed
AWS has introduced a new capability through Amazon Bedrock AgentCore Gateway that enables AI agents to interact with enterprise APIs, such as ServiceNow, while maintaining the user's identity throughout the request chain. This is achieved through an on-behalf-of (OBO) token exchange with Microsoft Entra ID. The process ensures that API calls are made under the original user's identity, preserving audit trails and access controls.
What this means in practice
AI agents can now call the ServiceNow REST API while preserving the calling user’s identity. This is done by configuring the token exchange on the gateway target, where AgentCore Gateway performs the exchange on each request. The solution involves three key components: an AI agent application protected by Microsoft Entra ID, a Model Context Protocol (MCP) server implemented using AgentCore Gateway, and the ServiceNow REST API configured with an inbound OAuth integration tied to Microsoft Entra ID. The OBO flow bridges the gap between the agent's token and the ServiceNow API's expected token, ensuring the original user's identity is preserved.
Limitations and availability
The solution requires an AWS account with access to AgentCore Gateway, a Microsoft Entra ID tenant with permissions to create application registrations, and a ServiceNow instance with administrative access. The configuration involves setting up application registrations in Microsoft Entra ID, configuring the inbound integration in ServiceNow, and setting up the outbound auth configuration in AgentCore Gateway. The supplied announcement does not specify the exact release date or availability of the feature beyond its configuration process.
