CIBA
In short: CIBA, Client-Initiated Backchannel Authentication, is an OpenID standard that lets an application ask a user to approve a request on a separate device. The agent waits while the user approves on their phone. It suits agents that need consent for sensitive actions without a browser redirect.
Where does it show up in practice?
Auth0 for AI Agents asynchronous authorization (CIBA) became GA on 19 November 2025.