Binding a logical agent to a real workload with SPIRE Part 2 used a SPIRE JWT-SVID as the actor token in PingFederate token exchange. That proves more than a caller-supplied agent name, but it helps to understand exactly what it proves. A logical agent describes an approved application role. A SPIFFE ID identifies an attested running workload. They are related, but they are not interchangeable. AgentID: urn:agent:customer-support SPIFFEID: spiffe://example.org/agent/customer-su...