It replaces the practice of an agent borrowing a person's password or session. Approaches include per-agent keypairs, OpenID Connect providers built for agents such as AgentMail's AgentID, and password-manager flows where the user approves each sign-in so the agent never sees the secret. A good agent identity supports scoped permissions, revocation and an audit trail.