What is CIBA?
In short:CIBA, Client-Initiated Backchannel Authentication, is an OpenID standard that lets an app request a person's approval on a separate device. The person approves or declines on their phone. Agents use it to ask for consent while the person is away from the agent's session.
How does it work?
The client sends a backchannel request; the authorization server notifies the user and returns a token once they approve.
What does it look like in practice?
Auth0 for AI Agents offers asynchronous authorization through CIBA.