Scope of identity sets how specifically an identity is assigned to a service, instance, or container. Greater specificity helps clarify which system component is making a request and supports safer service communication. section 16.1
Keep scope connected to the wider service-identity chain:
- Identity states who a service claims to be; authentication verifies that claim. section 16.1
- Trust anchors establish which certificates, tokens, or metadata-based identities are accepted. section 16.1
A service-name claim
A message might identify its sender with `X-Service-Name: order-service`. Treating that label as trustworthy without verifying the sender leaves room for impersonation and manipulated or stolen data.
