---
schema_version: "newruntime-agent-readable-v0.2"
type: "post"
stable_id: "post:vercel-passport-agent-identity-boundary"
slug: "vercel-passport-agent-identity-boundary"
title: "Vercel Passport Makes Identity a Deployment Boundary"
description: "Vercel Passport is now generally available, adding verified identity tokens, group claims, audit events, and automation bypasses to protected deployments."
retrieval_nugget: "Vercel Passport is now generally available, adding verified identity tokens, group claims, audit events, and automation bypasses to protected deployments. Vercel Passport is now generally available for Enterprise customers. It protects deployments with an organization's identity provider, then forwards a signed identity token to the deployment so application code can reason about the authenticated visitor. The mechanics are important."
status: "published"
published_at: "2026-07-31"
updated_at: "2026-07-31"
record_date: "2026-07-31"
date_kind: "published_at"
topics: ["security","infrastructure","api-design","enterprise-ai"]
source_urls: ["https://x.com/vercel/status/2083193506940829949","https://vercel.com/changelog/vercel-passport-generally-available"]
visuals: [{"id":"vercel-passport-agent-identity-boundary-nano-banana","kind":"editorial-diagram","role":"hero","src":"https://newruntime.com/images/posts/vercel-passport-agent-identity-boundary-nano-banana.webp","alt":"Hand-drawn deployment boundary diagram where an identity provider signs a visitor token before a protected Vercel deployment forwards verified identity to app code and downstream services.","caption":"Passport moves identity verification in front of the deployment and forwards a signed token that app code can use.","credit":"New Runtime synthesis from public source inspection","source_url":"https://vercel.com/changelog/vercel-passport-generally-available","generated_with":"nano-banana-style-imagegen","width":1600,"height":900,"legend":[{"label":"Verified token","description":"Vercel strips client-supplied identity headers and injects a verified Passport token."},{"label":"Groups","description":"Provider claims such as group membership can be carried into application authorization."},{"label":"Automation","description":"Bypass secrets and trusted OIDC sources keep webhooks, CI, and cron jobs working."}]}]
routes: {"html":"https://newruntime.com/posts/vercel-passport-agent-identity-boundary/","markdown":"https://newruntime.com/posts/vercel-passport-agent-identity-boundary.md","json":"https://newruntime.com/posts/vercel-passport-agent-identity-boundary.json"}
source_format: "markdown"
---

# Vercel Passport Makes Identity a Deployment Boundary

## Retrieval answer

Vercel Passport is now generally available, adding verified identity tokens, group claims, audit events, and automation bypasses to protected deployments. Vercel Passport is now generally available for Enterprise customers. It protects deployments with an organization's identity provider, then forwards a signed identity token to the deployment so application code can reason about the authenticated visitor. The mechanics are important.

Vercel Passport is now generally available for Enterprise customers. It protects deployments with an organization's identity provider, then forwards a signed identity token to the deployment so application code can reason about the authenticated visitor.

The mechanics are important. Passport works with Okta, Microsoft Entra ID, or any OIDC provider. Vercel strips client-supplied `x-vercel-oidc-passport-token` headers and injects a verified token after Passport validates the session. The `getIdentity()` helper in `@vercel/passport` then reads the verified visitor identity from the Vercel request context.

The package install path is simple:

```bash
pnpm add @vercel/passport
```

Passport can also carry additional provider claims, including group membership, when the provider and Vercel Connect application are configured for those scopes. For downstream services, `verifyIdentity()` checks the forwarded token's signature, Passport claims, project, and environment. Non-JavaScript services can verify the token as a standard JWT using the published JWKS.

Operationally, Passport records successful access as `passport-access-granted` events in both Activity Log and Audit Logs. For automation, Vercel supports the existing protection bypass header or query parameter, and Trusted Sources can use short-lived OIDC tokens instead of a shared secret. Custom environments such as staging and QA can also be protected.

## New Runtime Read

Identity is becoming part of the deployment boundary, not just application middleware.

That matters for agent-facing systems because the same protected surface needs to handle humans, webhooks, CI runs, and external services. The useful distinction is not "browser traffic versus automation." It is verified identity, verified automation, and explicit bypass paths with auditable evidence.