Tooluck logoTooluck
SKILL.md

entra-agent-id

Agent skill frommicrosoft/azure-skills

Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registration (use entra-app-registration), Microsoft Foundry agent authoring (use microsoft-foundry).

How to install entra-agent-id

install entra-agent-id
# install the azure-skills pack with the skills CLI
npx skills add microsoft/azure-skills

# or add only this skill to Claude Code: copy the folder

skills/entra-agent-id/

# into

~/.claude/skills/entra-agent-id/ (all projects)

.claude/skills/entra-agent-id/ (one project)

skills/entra-agent-id/SKILL.md

MITFull file
1# Microsoft Entra Agent ID
2
3Create and manage OAuth 2.0-capable identities for AI agents using Microsoft Graph. Every agent instance gets a distinct identity, audit trail, and independently-scoped permission grants.
4
5## Quick Reference
6
7| Property | Value |
8|----------|-------|
9| Service | Microsoft Entra Agent ID |
10| API | Microsoft Graph (`https://graph.microsoft.com/v1.0`) |
11| Required role | Agent Identity Developer, Agent Identity Administrator, or Application Administrator |
12| Object model | Blueprint (application) → BlueprintPrincipal (SP) → Agent Identity (SP) |
13| Runtime exchange | Two-step `fmi_path` exchange (autonomous and OBO) |
14| .NET helper | `Microsoft.Identity.Web.AgentIdentities` |
15| Polyglot helper | Microsoft Entra SDK for AgentID (sidecar container) |
16
17## When to Use This Skill
18
19- Provisioning a new Agent Identity Blueprint and BlueprintPrincipal
20- Creating per-instance Agent Identities under a Blueprint
21- Configuring credentials (FIC, Managed Identity, or client secret) on the Blueprint
22- Implementing the two-step `fmi_path` runtime token exchange (autonomous or OBO)
23- Cross-tenant agent token flows
24- Deploying the Microsoft Entra SDK for AgentID sidecar for polyglot agents (Python, Node, Go, Java)
25- Granting per-Agent-Identity application (`appRoleAssignments`) or delegated (`oauth2PermissionGrants`) permissions
26- Diagnosing Agent ID errors such as `AADSTS82001`, `AADSTS700211`, or `PropertyNotCompatibleWithAgentIdentity`
27
28## MCP Tools
29
30| Tool | Use |
31…

Excerpt shown under the repository's MIT license.

More skills in azure-skills

Keep exploring

Similar skill repositories

thedotmack /

claude-mem
116k

Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More

CCCXGHGM+135 skills

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates