Setup & Installation
npx skills add https://github.com/microsoft/skills --skill entra-agent-id
https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/entra-agent-id
View on GitHubWhat This Skill Does
Microsoft Entra Agent ID lets you create and manage OAuth2-capable identities for AI agents using Microsoft Graph beta API. It uses a Blueprint model where each agent type gets an application object, and individual agent instances get their own service principals under that blueprint. Supports Workload Identity Federation and a containerized sidecar for polyglot agent authentication.
Instead of sharing a single app registration across multiple agents or using Azure CLI tokens that carry overly broad directory permissions, Entra Agent ID gives each agent instance its own identity with the exact permissions it needs.
When to use it
- Provisioning isolated service principal identities for each AI agent instance in a multi-agent system
- Registering third-party AI agents in your Azure tenant with scoped Graph permissions
- Setting up Workload Identity Federation so agents running in Kubernetes authenticate without stored secrets
- Automating Blueprint and agent identity teardown as part of CI/CD pipeline cleanup
- Configuring sponsor assignments and admin consent for agent identity permissions across tenants