enterprise-identity

Here are 3 public repositories matching this topic...

aws-samples / sample-lark-identity-on-agentcore-interceptor

Enterprise identity on Amazon Bedrock AgentCore with Lark (Feishu) as the IdP. A Gateway Request Interceptor forwards the user's identity and injects a per-user credential — the agent never holds it — so downstream MCP tools act as the user against Lark and reach only what that user can.

bedrock-agentcore agentcore-memory agentcore-gateway agentcore-runtime lark-oauth enterprise-identity gateway-interceptor

Updated Jul 10, 2026
Python

aws-samples / sample-lark-identity-on-agentcore-native

Star

Enterprise identity on Amazon Bedrock AgentCore with Lark (Feishu) as the IdP. Every turn arrives as a signed per-user JWT, and that user's Lark token lives in the AgentCore Identity Token Vault (OAuth 3LO) — stored and refreshed natively, no self-managed store. MCP tools act as the user against Lark, reaching only what that user can.