entra-agent-id
Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth,…
- installs 8w
- 115,302
- 30-day movement
- starts with the next reading
- Related entries
- 1
- Connections
- 0
This is an agent skill (SKILL.md) that guides an AI coding agent through provisioning Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph. It also covers configuring OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) and deploying the Microsoft Entra SDK for AgentID sidecar.
Use it when your agent needs distinct, auditable Entra identities with OAuth token exchange, since the skill encodes the required Graph workflow, role prerequisites, and common pitfalls (e.g., manual BlueprintPrincipal creation, DefaultAzureCredential being rejected).
Use it to
- Provision an Agent Identity Blueprint and its BlueprintPrincipal via Graph API
- Create per-instance Agent Identities with scoped permissions
- Configure fmi_path or OBO token exchange for agent runtime auth
- Deploy the Microsoft Entra SDK for AgentID sidecar
- Set up Workload Identity Federation for agents in .NET with Microsoft.Identity.Web.AgentIdentities
For Developers building authenticated AI agents on Microsoft Entra ID
- Host repository
- microsoft/azure-skills
- Version
- 1.1.1
- Installs, lifetime
- 307k
- Installs, 8 weeks
- 115k
- Licence
- MIT
- Host stars
- 1,486
- Host language
- Shell