What is Blended identity?
In short:Blended identity is Aembit's term for evaluating an agent and the human behind it together in one access decision. Policy looks at who the agent is and who it serves at the same time. The idea is that neither identity alone gives enough context to decide safely.
How does it work?
The access request carries both the agent's workload identity and the user's identity. Policy rules can reference either.
What does it look like in practice?
An agent may read a file only when both the agent is approved and its user is in the finance group.