Developed a three-tier authentication system for the awslabs/amazon-bedrock-agentcore-samples repository, focusing on enterprise security and access control. Leveraging Okta, OAuth2, and AWS, the work introduced robust RBAC and token isolation across user, agent, and server layers. The implementation included an end-to-end demo integrating Gateway, Agent Runtime, Interceptor, and MCP Server to demonstrate the authentication flow in practice. By enabling the Authorization Code grant flow with group-based RBAC enforcement, the solution strengthened auditability and governance. Built primarily in Python, this feature enhanced security posture and streamlined onboarding for Bedrock samples, addressing key requirements for enterprise adoption and compliance.