← Back to brief
InfrastructureOfficialAWS Machine Learning Blog

Implement on-behalf-of token exchange for multi-tenant agents with Amazon Bedrock AgentCore Gateway

Jul 13, 2026

AWS has published a guide for implementing on-behalf-of (OBO) token exchange in multi-tenant agent systems using Amazon Bedrock AgentCore Gateway. The guide covers a complete setup with Okta, including JWT claim transformations and audience binding to enhance security across tenants.

Why it matters: This approach enables fine-grained access control and secure token exchange in enterprise multi-tenant AI deployments.

Full story at: AWS Machine Learning Blog