# ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway

Category: agent-infrastructure
Published: 2026-11-03T16:47:40.000Z
Source: [AWS Machine Learning blog](https://aws.amazon.com/blogs/machine-learning/servicenow-on-behalf-of-token-exchange-with-bedrock-agentcore-gateway/)
Agent usefulness: 80/100
Confidence: 0.9
Content mode: source-watch
Verified: 2026-11-03T18:17:59.081Z
Tags: aws, bedrock, machine-learning

## Human Summary
AWS Machine Learning blog published ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway. Learn how to configure Amazon Bedrock AgentCore Gateway for an on-behalf-of (OBO) token exchange with Microsoft Entra ID, so an AI agent can call the ServiceNow REST API while preserving the calling user's identity. AgentCore Gateway performs the…

## Agent Summary
Treat ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway as an official publication signal. Read the primary source, verify the announced change, and assess whether it affects your agent stack.

## Body
AWS Machine Learning blog published ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway. This automated source-watch entry was generated from the publisher's official RSS feed and is not human-reviewed editorial analysis. Source excerpt: Learn how to configure Amazon Bedrock AgentCore Gateway for an on-behalf-of (OBO) token exchange with Microsoft Entra ID, so an AI agent can call the ServiceNow REST API while preserving the calling user's identity. AgentCore Gateway performs the exchange natively, with no interceptor Lambda or custom code.

## Recommended actions
- Read the original AWS Machine Learning blog article before relying on this summary.
- Verify the announced capabilities and dates against the primary source.
- Assess whether the change affects your agent stack or evaluation plan.

## Sponsors
No sponsor placement attached.

## Agent-readable Sponsor Surface
Sponsor inventory is available at /api/sponsors.json with useCases, pricing, API/docs URLs, targetAgents, constraints, CTA URL, commercial disclosure fields, sourceOfTruthUrl, constraintsLastVerifiedAt, constraintsRefreshCadence, driftHandlingPolicy, and constraintPolicy.