# Authentication

| Reference | What it covers |
| [Secrets](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/secrets.md) | Secrets page tabs, the Secrets list, secret fields and types, and lifecycle operations (create, update, delete). |
| [API keys](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/api-keys.md) | API key fields, key states, and lifecycle operations (create, revoke, rotate, delete). |
| [JWT Verification Strategies](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/jwt-verification-strategies.md) | Strategy fields, token validation sequence, and audience configuration. |
| [STS Clients](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/sts-clients.md) | STS client fields for RFC 8693 token exchange and ID-JAG issuance and redemption. |
| [Access tokens](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/access-tokens.md) | Personal access tokens for the management API: token fields, scopes, resource scoping, creation links, and revocation. |

## Pages in this section
- [Secrets](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/secrets.md): Field reference for the Secrets page in the Agent Gateway dashboard: its tabs, the Secrets list, secret fields and types, and how to create, update, and delete a secret.
- [API keys](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/api-keys.md): Field reference for surface-scoped API keys in the Agent Gateway dashboard: fields, key states, and lifecycle operations.
- [JWT Verification Strategies](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/jwt-verification-strategies.md): Field reference for JWT Verification Strategy configuration, which defines reusable bearer-token validation rules that surfaces reference to authenticate callers.
- [STS Clients](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/sts-clients.md): Field reference for STS Clients, the managed connections that authorize an agent or service to exchange tokens at the gateway's Security Token Service, including RFC 8693 token exchange and ID-JAG issuance and redemption.
- [Access tokens](/products/affinidi-trust-fabric/agent-gateway/reference/authentication/access-tokens.md): Field reference for personal access tokens (PATs) in the Agent Gateway dashboard: where they live, the token form and its scopes, the created-token page, and revoking a token.