Agent 2 Agent authentication

Connect Integration Service to a remote Agent2Agent (A2A) agent by entering its service URL and the credentials for the authentication type the agent requires.

Each Agent 2 Agent connection points to one remote agent. Create a connection for every agent you want to call from Maestro.

前提条件

• The remote agent meets the remote agent requirements.
• The base URL of the agent, used as the Service URL. Enter the base URL only, without a path or a trailing slash. The connector adds the A2A paths, such as /.well-known/agent-card.json, itself.
• The credentials for the authentication type that the agent requires. The agent declares its supported security schemes in its Agent Card.

認証の種類

All authentication types require the Service URL. The other fields depend on the authentication type.

認証の種類	フィールド
基本認証	Username, Password (optional), Authentication validation API (optional)
API キー	Parameter name, Value, Add to (Header or Query, default Header), Authentication validation API (optional)
個人用アクセス トークン	Token prefix (default Bearer), Token, Authentication validation API (optional)
OAuth 2.0 の認可コード	Client ID, Client secret, Authorization URL, Token URL, Scope (optional)
OAuth 2.0 クライアント資格情報	Client ID, Client secret, Token URL, Scope (optional)
OAuth 2.0 パスワード	Client ID, Client secret, Authorization URL, Token URL, Username, Password (optional), Scope (optional)
OAuth 2.0 JWT ベアラー	Client ID, Client secret, Authorization URL, Token URL, JWT base64 encoded key, Scope (optional)

The following fields need more context:

• Parameter name: the exact name of the header or query parameter that carries the API key, for example X-API-Key.
• Token prefix: the prefix added before the token in the Authorization header. Leave it empty if the agent expects the token without a prefix.
• Authentication validation API: a relative path that returns a successful response when the credentials are valid, for example /api/v1/me.
• Scope: the OAuth scopes requested from the authorization server of the agent, as declared in its Agent Card. Separate multiple scopes with spaces or commas. Leave it empty to use the default scopes of the authorization server.
• JWT base64 encoded key: the Base64-encoded private key used to sign the JWT. Follow the instructions of your identity provider to generate and encode it.

Add the Agent 2 Agent connection

1. 製品起動ツールから [ Orchestrator ] を選択します。

2. フォルダーを選択して [ コネクション ] タブに移動します。

3. [ コネクションを追加] を選択します。

4. To open the connection creation page, select the Agent 2 Agent connector from the list. You can use the search bar to find the connector.

5. In Service URL, enter the base URL of the agent.

6. Select the Authentication Type.

7. Enter the fields required for the selected authentication type.

   利用可能な場合は、フィールドの横にあるメニューを選択し、[ 資格情報アセットを使用 ] または [ Orchestrator アセットを使用 ] を選択して、値を直接入力するのではなく Orchestrator アセットを参照します。詳細については、「 コネクションに資格情報アセットを使用する」をご覧ください。

8. [接続] を選択します。

The connection is created and named after the agent, as declared in the name field of its Agent Card.