用 Bedrock AgentCore Gateway 实现 ServiceNow 代发令牌交换
ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway
AWS 演示 AgentCore Gateway 原生做 OBO 令牌交换，agent 调 ServiceNow 时保留用户身份，连 interceptor Lambda 都不用写，做企业 agent 的可以照着配一遍。
Amazon Bedrock AgentCore Gateway 现已原生支持 on-behalf-of（OBO）令牌交换。配置 ServiceNow REST API 与 Microsoft Entra ID 对接后，AI agent 调用 ServiceNow API 时仍能保留发起调用的用户身份，无需编写 interceptor Lambda 或自定义代码。教程以 AWS 官方博客形式给出完整配置步骤。
ServiceNow on-behalf-of token exchange with Bedrock AgentCore Gateway
Learn how to configure Amazon Bedrock AgentCore Gateway for an on-behalf-of (OBO) token exchange with Microsoft Entra ID, so an AI agent can call the ServiceNow REST API while preserving the calling user's identity. AgentCore Gateway performs the exchange natively, with no interceptor Lambda or custom code.