Blog
Notes from the lab.
Working notes on carrying User-Managed Access into the agent era — what translated cleanly, what needed reshaping, and what the agent era demands that the 2018 specification has no slot for.
Everything You Need to Know About Deploying U4A at Scale
So you read the first post, ran the lab, watched an agent get told no by a resource server and then talked into a yes by its owner's terms — and now you are wondering what it takes to run…
August 12, 2026
Agentic IdentityLet Them: A Developer's Guide to UMA for Agents
There is a fight happening right now over how AI agents should prove who they are. Centralized or decentralized. Ephemeral or enrolled. A new identity type in your IdP, or a cryptographic…
August 06, 2026