Agent skill · software engineering · aiskillstore
entra-agent-id
Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registration (use entra-app-registration), Azure RBAC (use azure-rbac), Microsoft Foundry agent authoring (use microsoft-foundry).
Why this skill is useful
Provides specific commands and configurations for provisioning Microsoft Entra Agent Identities that the AI wouldn't reliably generate on its own.
What it needs
Requires powershell installed locally. Requires microsoft account access. About 7k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Microsoft Entra Agent ID Create and manage OAuth 2.0-capable identities for AI agents using Microsoft Graph. Every agent instance gets a distinct identity, audit trail, and independently-scoped permission grants. Quick Reference Property Value ---------- ------- Service Microsoft Entra Agent ID API Microsoft Graph (https://graph.microsoft.com/v1.0) Required role Agent Identity Developer, Agent Identity Administrator, or Application Administrator Object model Blueprint (application) → BlueprintPrincipal (SP) → Agent Identity (SP) Runtime exchange Two-step fmipath exchange (autonomous and OBO) .NET helper Microsoft.Identity.Web.AgentIdentities Polyglot helper Microsoft Entra SDK for AgentID (sidecar container) When to Use This Skill Provisioning a new Agent Identity Blueprint and BlueprintPrincipal Creating per-instance Agent Identities under a Blueprint Configuring credentials (FIC, Managed Identity, or client secret) on the Blueprint Implementing the two-step fmipath runtime token exchange (autonomous or OBO) Cross-tenant agent token flows Deploying the Microsoft Entra SDK for AgentID sidecar for polyglot agents (Python, Node, Go, Java) Granting per-Agent-Identity application (appRoleAssignments) or delegated (oauth2PermissionGrants) permissions Diagnosing Agent ID errors such as AADSTS82001, AADSTS700211, or PropertyNotCompatibleWithAgentIdentity MCP Tools Tool Use ------ ----- mcpazuremcpdocumentation Search Microsoft Learn for current Agent ID setup, Graph API shapes, and SDK configuration There is no dedicated Agent Identity MCP server today. This skill guides direct Microsoft Graph API calls (PowerShell or Python requests). Use mcpazuremcpdocumentation to verify request bodies and endpoints against current docs before running. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/entra-agent-id