What Google's Agent Identity Deadline Means for Platform Teams
PlatformEngineering.com, Monday, October 19th, 2026
Google has set no cutoff for service-account agents, but every agent deployed on one now is a manual migration later.
Nitish Mane clarifies that Google has not announced a date when service accounts stop working for AI agents, despite commentary implying it has.
Agent Identity, GA since April 2026, is a new IAM principal type with a SPIFFE ID and 24-hour auto-renewing X.509 certificates, plus mTLS-bound tokens.
It cannot be shared by default, impersonated or given long-lived keys, and audit logs record both the agent and the user it acts for.
He advises platform teams to move agents off shared service accounts now, before more systems depend on them.