Claims-Based Identity

Claims-based identity is an authentication model in which an identity provider issues a token containing assertions (claims) about the subject, such as its name, role, group membership, or custom attributes.

In agent systems, claims can encode agent-specific metadata like framework, version, owning team, and risk classification, giving downstream services the information they need to make fine-grained authorization decisions.

Closely related concepts include Agent Hijacking, Agent Card, Agent Passport, Workload Identity. Each is defined in the Prefactor glossary.