You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Enterprise identity on Amazon Bedrock AgentCore with Lark (Feishu) as the IdP. A Gateway Request Interceptor forwards the user's identity and injects a per-user credential — the agent never holds it — so downstream MCP tools act as the user against Lark and reach only what that user can.
Enterprise identity on Amazon Bedrock AgentCore with Lark (Feishu) as the IdP. Per-user Lark tokens live in the AgentCore Identity Token Vault (OAuth 3LO) — stored, refreshed, and injected natively, no custom interceptor. Downstream MCP tools act as the user against Lark, reaching only what that user can.