Bedrock Gateway lets AI agents call ServiceNow as the user
What is ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway?
Amazon Bedrock’s AgentCore Gateway swaps a Microsoft Entra ID token for a ServiceNow on-behalf-of token, allowing an LLM-driven agent to invoke ServiceNow’s REST API while preserving the caller’s identity. The token exchange happens inside the gateway, so no custom auth code is needed.
Who it is for
IT admins and developers building AI assistants for ticketing or workflow automation can keep audit trails and enforce permissions without extra plumbing.