What is short-lived credential?
In short:A short-lived credential is an access token or certificate that expires within minutes or hours. It is issued for a task and then lapses on its own. If it leaks, the window for misuse is small, and nobody has to remember to revoke it afterwards.
How does it work?
The agent authenticates with its own identity and asks for a token with a narrow scope. The token expires and the agent asks again next time.
What does it look like in practice?
An agent receives a fifteen-minute token scoped to read one CRM object, then the token expires.