U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Announcements

Comments on Software and Agentic AI Identity Concept Paper

NIST | NCCoE

The NIST National Cybersecurity Center of Excellence (NCCoE) has released a summary of comments received on the Software and Agentic Artificial Intelligence (AI) Identity and Authorization concept paper. This deliverable is available now on the project’s new online resource hub.

Based on this feedback, the NCCoE’s Secure Software Development (DevSecOps) project will provide the first implementation use case for this project to demonstrate how AI agents can be identified, authenticated, and authorized within the software development lifecycle.

Background

Earlier this year, the NCCoE announced a new project to address challenges with software and AI agent identity and authorization and released a concept paper to solicit feedback on how to design and deliver a project that would drive meaningful outcomes for securing the emerging agentic ecosystem.

The concept paper received an exceptional level of engagement, with feedback received from more than 600 commenters across industry, government, and academia.

The newly available summary of comments outlines the key observations and feedback identified through the public comments submitted, including key capabilities, challenges, and potential use cases for the project to demonstrate Given the volume of feedback highlighting the early adoption of AI agents in software development, the project team is collaborating with the NCCoE’s DevSecOps project to demonstrate the identity and authorization of AI agents in the software development lifecycle. This DevSecOps environment will provide the first implementation use case for the project, with additional use cases to be determined/scoped in the future.

The summary of comments is live now on the new Software and Agentic AI Identity and Authorization Online Resource Hub. This resource hub will supplement our blog series and special publications, allowing the project to more quickly publish and revise resources.

To learn more about this project and why agentic AI needs a strong identity foundation, read our latest blog post.

Register Today: Upcoming Agentic AI & DevSecOps Webinar  

The NCCoE is hosting a webinar on October 28th at 1:00 P.M. EDT to provide an overview of both the NCCoE Software and AI Agent Identity and Authorization project and the DevSecOps project, followed by a panel discussion on the role of agentic AI in DevSecOps.

Webinar attendees will have the opportunity to engage with both NCCoE project teams and a panel of our industry collaborators.

Submit Your Feedback!

We want to continue hearing from the community as this work evolves. Rather than a fixed comment period, we will release resources and review feedback on a rolling basis. Please share your insights at your convenience.