The New OAuth Problem Is Agent Delegation

Enterprise identity used to have a fairly stable center of gravity. A user authenticated. An application received a token. The token carried scopes or claims. The backend enforced what that application was allowed to do. That model was never trivial, but it was legible. Agents are making it less so.