# Amazon — ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway

- Company: Amazon (amazon.com)
- Announced: 2026-11-03T16:47:40+00:00
- Category: not stated
- Coverage: not counted
- Announcement: no
- Group: routine
- Source: https://aws.amazon.com/blogs/machine-learning/servicenow-on-behalf-of-token-exchange-with-bedrock-agentcore-gateway/
- Record: https://forck.live/items/31098-servicenow-on-behalf-of-token-exchange-with-bedrock-agentcore-gateway
- Subject: Bedrock / Nova

Amazon's guide shows how to configure Bedrock AgentCore Gateway for an on-behalf-of token exchange with Microsoft Entra ID so an AI agent can call the ServiceNow REST API while preserving the calling user's identity. Without identity propagation, API calls arrive at downstream services as the application itself rather than the user who initiated the action, which breaks audit trails, bypasses user-level access controls, and violates the principle of least privilege. The architecture connects an agent application protected by Entra ID, an MCP server implemented with AgentCore Gateway, and the ServiceNow REST API configured with an inbound OAuth integration tied to Entra ID. The gateway sends the inbound token to the Entra token endpoint with the agent application's client credentials, the target scope, and requested_token_use: on_behalf_of; Entra validates that the calling user consented to the delegation and issues a new token for the ServiceNow API with the original user's claims intact. ServiceNow then receives a token whose preferred_username claim maps to an existing ServiceNow user and applies that user's permissions to the call. Setup requires an AWS account with AgentCore Gateway access, an Entra ID tenant with at least the Application Developer role, a ServiceNow instance with administrative access, and two Entra application registrations, one for the agent and one for the ServiceNow API connector. The pattern can be applied to other REST APIs protected by OAuth, and Amazon says identity propagation can be paired with Bedrock Guardrails in production.

## Evidence

Verbatim from https://aws.amazon.com/blogs/machine-learning/servicenow-on-behalf-of-token-exchange-with-bedrock-agentcore-gateway/:

> AI agents that interact with enterprise APIs on behalf of users need to maintain user identity throughout the request chain. Without identity propagation, API calls arrive at downstream services as the application itself rather than the user who initiated the action. This breaks audit trails, bypasses user-level access controls, and violates the principle of least privilege.
> 
> Amazon Bedrock AgentCore is a platform to build, connect, and optimize agents at scale, with any framework or model. This post shows how to configure AgentCore Gateway , a capability of Amazon Bedrock AgentCore, for an on-behalf-of (OBO) token exchange with Microsoft Entra ID. An AI agent can then call the ServiceNow REST API while preserving the calling user’s identity. You configure the token exchange on the gateway target, and AgentCore Gateway performs the exchange on each request. The pattern can be applied to other REST APIs protected by OAuth.
> 
> In production, you can additionally pair identity propagation with Amazon Bedrock Guardrails to filter harmful content and validate the agent’s inputs and outputs.
> 
> Solution overview

---

Record: https://forck.live/items/31098-servicenow-on-behalf-of-token-exchange-with-bedrock-agentcore-gateway
Catalogue: https://forck.live/llms.txt
Current issue: https://forck.live/feed.md