I work in identity and access, the quiet part of IT that decides who you are
and what you’re allowed to do. Lately one question keeps pulling me in: what
changes when the one logging in isn’t a person, but an AI agent?
So I started experimenting to see how it really works. This blog is where I
write down what I find: the experiments, the surprises, and the things that
didn’t work the first time (there are plenty).
No hype, no sales pitch. Just someone learning in public and sharing notes.
If something here helps you, or if you think I got it wrong, I’d love to hear
about it.
Opinions are my own.
Things I like to poke at:
- Logins, tokens and sessions
- Who can do what, and why
- Taking access back, fast
- Machines and AI agents
- Identity standards, explained
- Hands-on experiments